Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ML8pn-E_qbwwKV6QggJMhgPXITY.roa
File: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (raw, json)
Hash identifier: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=
Subject key identifier: 30:BF:29:9F:E1:3F:A9:BC:30:29:5E:90:82:02:4C:86:03:D7:21:36
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019421B245907CB9EF639B69A5F28202E3A0
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ML8pn-E_qbwwKV6QggJMhgPXITY.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 80.253.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:45:90:7c:b9:ef:63:9b:69:a5:f2:82:02:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30bf299fe13fa9bc30295e9082024c8603d72136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:f8:17:38:e0:ac:80:cd:30:0d:86:94:7b:
96:4c:9a:33:d3:47:0d:5b:b8:87:ff:03:f2:b7:08:
b8:16:80:ec:ba:35:ec:f9:0d:d9:39:dd:9a:61:36:
28:9c:17:84:d7:97:48:71:6d:5a:54:77:f8:c7:65:
6f:a0:b1:2b:09:d0:84:f6:7d:7e:e1:af:58:21:5c:
bf:e7:8b:37:be:ca:f7:9b:47:6b:a0:51:fe:c9:b4:
b7:35:07:50:76:4a:8d:9f:db:d1:37:18:32:7e:71:
65:ee:1e:cf:bb:e0:73:a1:4f:82:75:c8:a2:b8:4c:
23:c8:b3:33:e4:05:07:2e:72:8f:2d:ab:84:5e:c3:
a7:85:de:a4:03:69:83:65:ea:f4:09:76:e3:14:46:
63:1a:cf:81:43:bc:2c:3e:a3:e5:15:26:cf:63:cc:
91:42:b9:a0:e6:65:8b:a7:80:36:40:5f:34:a9:f0:
6c:c2:d1:30:86:c9:ca:a4:38:18:49:42:ee:c3:47:
b2:68:aa:60:53:d1:c4:50:9d:1a:78:6a:d2:ca:bd:
74:78:64:c4:d4:ab:c8:20:f8:65:7f:24:99:42:3e:
3f:35:f5:70:c4:81:d9:1d:01:d5:5d:52:0a:0a:9b:
48:0c:7c:cb:d8:7f:ca:27:cb:cd:77:bf:ca:61:c2:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BF:29:9F:E1:3F:A9:BC:30:29:5E:90:82:02:4C:86:03:D7:21:36
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/ML8pn-E_qbwwKV6QggJMhgPXITY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.115.0/24
Signature Algorithm: sha256WithRSAEncryption
40:18:95:06:6e:04:d2:e6:a1:01:ce:e9:35:91:7f:60:4d:c8:
d8:51:7e:26:a7:36:bc:a1:01:f1:8b:b4:f9:19:a0:d0:26:65:
f7:ef:a6:89:5b:e3:04:01:90:14:94:f8:62:ec:bf:c5:5b:32:
26:7e:7b:a1:b5:1c:83:21:bb:67:b5:0f:97:68:28:05:45:09:
6a:1c:bf:db:f7:a4:c9:8f:49:a6:35:73:99:1d:10:0c:27:1c:
92:d5:88:42:23:9c:a4:bb:f4:db:9e:d8:a8:28:15:cc:5c:f0:
93:11:39:a9:e2:28:5d:db:50:89:1f:1b:86:b4:a5:cb:e0:d6:
a8:e3:02:1c:28:79:3c:92:39:5c:f8:06:e0:3f:b6:b3:db:f6:
5a:69:8a:8f:0c:8e:1f:90:7e:9e:30:06:7b:00:02:b9:e0:33:
9a:7f:0e:43:fb:24:61:80:85:d6:25:28:28:fa:04:f1:e1:de:
06:2e:a5:6a:4a:3d:a3:d4:e3:69:08:31:be:91:98:b0:c7:3d:
4e:09:ea:2c:bc:e8:7d:e4:7f:94:da:f6:5c:47:5f:4a:76:0f:
3f:09:99:31:76:f5:5c:2c:90:6b:2a:d0:23:44:4a:1d:37:b6:
1d:d4:f4:59:7a:5f:de:05:93:a5:c8:b7:66:61:c6:7f:35:a1:
09:93:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:11:26 2025 by rpki-client