Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa
File: MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa (raw, json)
Hash identifier: ImO4oBWkVF+Qx8bpwB2w2UPJr50EG7WrYl+YWVWzFfk=
Subject key identifier: 31:A3:A5:BF:00:1B:79:6C:BD:F8:58:0E:B8:CC:4A:D6:37:18:57:B2
Certificate issuer: /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial: 01942444C4B81506BED9F7917244C03A77CF
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20882
IP address blocks: 80.75.224.0/20 maxlen: 20
80.75.224.0/24 maxlen: 24
80.75.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c4:b8:15:06:be:d9:f7:91:72:44:c0:3a:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31a3a5bf001b796cbdf8580eb8cc4ad6371857b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:06:e3:76:68:d9:a9:aa:34:f0:87:f2:d8:
46:31:3d:76:85:88:04:c1:e5:9b:32:35:c7:d9:ef:
70:8f:77:3d:e7:c4:43:ad:da:2d:b4:62:2c:95:88:
44:4d:f9:5b:51:17:0d:55:11:80:fc:db:f1:10:24:
a5:d9:e7:a9:45:9d:1e:d1:4d:27:3e:e4:65:8a:3b:
57:16:0b:2b:27:18:f1:41:a5:69:8c:3b:7b:e6:cc:
1c:89:7b:33:9e:6c:4d:f2:95:df:0b:6f:fd:9d:37:
ae:ba:79:3e:34:7d:a4:c2:33:f6:4f:22:e2:8b:3b:
a9:c5:a5:c8:1a:f4:27:fa:21:2a:13:69:fb:38:be:
1e:73:47:d6:93:3a:bd:23:ca:2a:1e:02:ae:84:82:
26:e2:c8:9e:fa:3d:9d:b8:43:e1:fb:63:8f:1b:cb:
8b:ce:b0:d2:eb:33:2b:cd:1e:1f:55:bb:22:41:89:
ef:79:81:fa:17:22:91:4c:4e:a0:00:b2:a1:60:e8:
c5:37:78:7e:24:41:ca:2e:5f:34:ca:0d:12:33:9b:
96:66:12:3b:5a:fd:7b:14:79:83:c2:42:c4:f6:f5:
bf:eb:1b:18:99:61:90:d1:36:51:7b:f4:1c:e7:2d:
eb:21:dc:96:5f:31:c6:fc:b3:23:06:fd:01:6d:35:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:A5:BF:00:1B:79:6C:BD:F8:58:0E:B8:CC:4A:D6:37:18:57:B2
X509v3 Authority Key Identifier:
keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/MaOlvwAbeWy9-FgOuMxK1jcYV7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.224.0/20
Signature Algorithm: sha256WithRSAEncryption
33:31:8b:05:4e:33:a8:fa:1f:cf:39:8a:b7:9f:2a:d6:84:4e:
0d:2e:ba:65:0e:7a:b5:75:71:a0:3e:d8:5a:92:53:aa:d3:e5:
8d:17:44:63:df:78:95:08:44:10:24:80:d5:9c:08:d2:9d:d7:
b2:9d:68:36:07:bf:7f:90:2a:b7:89:dd:84:79:91:3d:2d:b2:
a1:68:8e:2b:c6:3a:02:ab:9b:61:4c:21:8d:70:0a:39:5d:59:
c9:eb:44:52:0b:c8:5a:56:df:e0:b1:23:a8:bf:a5:11:ce:0f:
13:9b:d2:ce:cd:6f:68:62:56:86:2c:09:12:96:5b:af:81:e4:
79:88:aa:c9:be:aa:6f:63:19:80:db:8d:d6:da:c3:8d:97:c5:
b4:75:0e:ed:fe:f4:c6:25:07:06:1f:bd:37:fa:96:1f:ec:c4:
e5:50:8d:73:60:20:30:5f:69:ae:2c:2e:82:9f:55:84:4e:12:
5a:40:b3:90:75:c4:88:13:c1:45:20:27:fd:f6:25:4f:ab:a1:
8a:7a:58:88:aa:48:75:d4:20:9a:48:d8:c5:85:54:f2:de:27:
9d:1a:01:fe:2d:3f:4e:95:98:7e:8c:27:e1:b5:aa:d5:9e:49:
ae:08:03:f0:8a:64:41:4b:ff:97:07:f7:cd:d8:1e:b7:b3:7c:
35:34:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:04 2025 by rpki-client