Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/MKtSEudJjYxJ2DfflLHdzdfxSVE.roa
File: MKtSEudJjYxJ2DfflLHdzdfxSVE.roa (raw, json)
Hash identifier: 9QFd5na9tBhDAKHrJRlOjmbZA1jfdi3XsAQnD5d1uWQ=
Subject key identifier: 30:AB:52:12:E7:49:8D:8C:49:D8:37:DF:94:B1:DD:CD:D7:F1:49:51
Certificate issuer: /CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Certificate serial: 018964C04F2673E04079579B8C75D11D911A
Authority key identifier: 0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/MKtSEudJjYxJ2DfflLHdzdfxSVE.roa
Signing time: Mon 17 Jul 2023 16:47:51 +0000
ROA not before: Mon 17 Jul 2023 16:47:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 80.68.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:4f:26:73:e0:40:79:57:9b:8c:75:d1:1d:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Validity
Not Before: Jul 17 16:47:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30ab5212e7498d8c49d837df94b1ddcdd7f14951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:36:1e:bc:64:bb:35:66:fb:2d:d8:4e:16:5f:
02:da:ab:49:73:81:62:94:cb:36:b1:db:11:d0:d0:
64:6e:79:e0:96:58:6b:fc:b1:1b:68:d7:09:d8:fc:
ec:af:18:6c:ea:7f:3e:a2:c4:48:03:29:b4:17:91:
ee:5c:89:e0:94:24:eb:68:da:f9:96:12:84:e8:a6:
48:8e:2a:82:7e:b7:a3:d4:fb:6a:ed:d9:b9:f1:ce:
d7:1b:a2:26:30:2d:07:1b:f8:9b:2d:76:c9:4c:71:
26:e8:47:b5:2d:9f:b1:d4:0a:08:dc:6f:9f:2e:2b:
9f:c2:19:09:78:b0:59:e5:dd:cc:9e:df:b0:ba:9c:
bb:a4:f9:b7:ed:d6:69:a7:aa:9a:b4:1d:64:84:32:
6b:c1:8f:8c:7f:2f:7d:1b:04:53:6d:60:dd:98:ad:
11:74:93:5f:04:d2:69:c1:c7:d9:04:77:1b:f5:2c:
2f:f6:c5:84:af:28:32:75:6b:e1:38:21:94:cc:f6:
a9:cc:10:14:b8:35:4a:9f:d3:86:a8:a9:01:90:ab:
4c:da:dd:5f:6e:bd:c2:e1:54:45:78:0e:b4:30:fd:
da:33:77:cb:7f:00:f3:c3:9f:53:ec:d8:01:b6:fa:
e1:8c:cf:b0:0e:1f:a6:b0:1f:69:21:df:d3:4f:87:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AB:52:12:E7:49:8D:8C:49:D8:37:DF:94:B1:DD:CD:D7:F1:49:51
X509v3 Authority Key Identifier:
keyid:0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/MKtSEudJjYxJ2DfflLHdzdfxSVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DroFQi1N1HjI8kt_QwIhO_-CdPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.150.0/24
Signature Algorithm: sha256WithRSAEncryption
40:67:e3:9c:a6:95:48:5c:6c:b7:a9:13:65:52:8e:2d:56:52:
c1:ca:ee:26:b8:76:2a:53:07:cc:48:a1:74:9b:6b:98:75:e3:
9e:7d:f0:e1:a7:55:a1:c7:be:9a:6a:7f:f7:56:45:57:97:fe:
e0:1b:45:ec:21:13:66:12:11:3c:9a:29:a6:67:6e:a6:f4:48:
ea:ff:b5:4e:3b:a1:c8:4e:50:e4:52:1f:6b:31:37:b3:f8:44:
4c:26:9c:11:04:67:68:83:ab:11:3a:09:7b:a6:8e:e1:ab:b2:
7a:2b:3a:45:40:52:50:a6:dd:8d:2b:95:b7:77:42:26:3f:3e:
22:9e:72:24:0d:36:f9:c2:6e:95:bc:71:0f:06:55:c3:1d:8a:
17:fb:85:96:5b:04:65:9e:9e:c9:7e:74:41:c6:67:61:c3:e8:
f8:f7:db:2f:e5:b1:97:16:5c:35:53:27:14:1e:d0:1f:16:9e:
9f:f8:77:f1:00:c6:88:01:34:68:7b:15:ec:fb:e9:24:8a:02:
91:ef:0c:f8:2c:fb:c0:35:d7:05:d8:66:62:40:52:10:1c:8d:
0a:d6:20:b8:72:14:94:3c:0d:f3:c3:00:71:a5:fc:53:59:41:
56:7f:04:34:32:96:fe:49:65:eb:35:c6:92:f0:b0:6e:8e:75:
3b:88:f8:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwE8mc+BAeVebjHXRHZEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYmEwNTQyMmQ0ZGQ0NzhjOGYyNGI3ZjQzMDIyMTNiZmY4
Mjc0ZjIwHhcNMjMwNzE3MTY0NzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGFiNTIxMmU3NDk4ZDhjNDlkODM3ZGY5NGIxZGRjZGQ3ZjE0OTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTYevGS7NWb7LdhOFl8C2qtJc4Fi
lMs2sdsR0NBkbnngllhr/LEbaNcJ2Pzsrxhs6n8+osRIAym0F5HuXInglCTraNr5
lhKE6KZIjiqCfrej1Ptq7dm58c7XG6ImMC0HG/ibLXbJTHEm6Ee1LZ+x1AoI3G+f
LiufwhkJeLBZ5d3Mnt+wupy7pPm37dZpp6qatB1khDJrwY+Mfy99GwRTbWDdmK0R
dJNfBNJpwcfZBHcb9Swv9sWErygydWvhOCGUzPapzBAUuDVKn9OGqKkBkKtM2t1f
br3C4VRFeA60MP3aM3fLfwDzw59T7NgBtvrhjM+wDh+msB9pId/TT4flAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDCrUhLnSY2MSdg335Sx3c3X8UlRMB8GA1UdIwQY
MBaAFA66BUItTdR4yPJLf0MCITv/gnTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJvRlFpMU4xSGpJOGt0X1F3SWhPXy1DZFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZjIxNDQtYmRlNC00NjUwLTk5MDMt
YTcyZjdhMjkyZmI1LzEvTUt0U0V1ZEpqWXhKMkRmZmxMSGR6ZGZ4U1ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84ZjIxNDQtYmRlNC00NjUwLTk5MDMtYTcyZjdhMjkyZmI1
LzEvRHJvRlFpMU4xSGpJOGt0X1F3SWhPXy1DZFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUESWMA0G
CSqGSIb3DQEBCwUAA4IBAQBAZ+OcppVIXGy3qRNlUo4tVlLByu4muHYqUwfMSKF0
m2uYdeOeffDhp1Whx76aan/3VkVXl/7gG0XsIRNmEhE8mimmZ26m9Ejq/7VOO6HI
TlDkUh9rMTez+ERMJpwRBGdog6sROgl7po7hq7J6KzpFQFJQpt2NK5W3d0ImPz4i
nnIkDTb5wm6VvHEPBlXDHYoX+4WWWwRlnp7JfnRBxmdhw+j499sv5bGXFlw1UycU
HtAfFp6f+HfxAMaIATRoexXs++kkigKR7wz4LPvANdcF2GZiQFIQHI0K1iC4chSU
PA3zwwBxpfxTWUFWfwQ0Mpb+SWXrNcaS8LBujnU7iPjv
-----END CERTIFICATE-----
Generated at Mon Apr 21 16:05:10 2025 by rpki-client