Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa
File: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (raw, json)
Hash identifier: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=
Subject key identifier: 32:01:83:BF:12:CE:B4:C3:F0:5C:C6:D8:42:E8:7B:2B:A3:6E:E4:4D
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 01941FFAA9510C022E4C5BC818F77F9C4E55
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49242
IP address blocks: 80.68.224.0/21 maxlen: 21
80.68.232.0/21 maxlen: 21
89.35.144.0/22 maxlen: 22
93.158.232.0/22 maxlen: 22
185.21.148.0/22 maxlen: 22
188.121.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a9:51:0c:02:2e:4c:5b:c8:18:f7:7f:9c:4e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320183bf12ceb4c3f05cc6d842e87b2ba36ee44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:a8:a5:46:67:3c:4d:15:6a:3a:6d:2d:7c:
1f:87:09:6e:82:2c:7f:cb:2f:2e:3f:c6:35:cf:b8:
c6:4f:d6:a0:87:ec:b4:ef:27:fd:3b:73:b1:46:a1:
41:6a:ae:34:e3:6d:a0:78:6d:97:9d:c9:cf:c1:68:
64:a1:f1:5f:62:7f:02:ee:41:b0:9b:b7:2a:ab:df:
90:1a:1f:23:94:6d:bf:18:00:2a:fb:34:e9:4f:ed:
96:0c:62:25:0f:6e:5f:4a:7f:aa:3e:16:5e:b1:a0:
b4:7e:5c:87:82:5c:c3:0e:c4:88:8b:dc:74:c7:bb:
de:8c:c8:f2:85:4c:b4:e7:7c:4c:ed:59:0c:da:b6:
43:a1:d4:96:a1:c6:5e:48:0e:32:50:f5:9f:d7:ba:
5b:df:04:cd:1e:00:2e:d4:13:be:17:ed:2f:8c:f4:
8d:1a:cc:4d:50:27:86:5d:8d:ee:c9:03:01:6f:b7:
a4:9e:39:5a:d7:a1:c4:fc:1b:17:5a:02:dc:e9:fd:
88:ac:cd:cb:5f:8c:35:e3:1e:36:d2:c3:06:d8:a7:
7f:52:36:bc:a6:b1:ce:1b:8b:b6:5f:9d:28:c3:42:
fa:15:7b:06:c0:a2:99:6a:c0:bc:4c:48:d7:bf:db:
18:8f:38:34:5b:3b:32:8e:07:d8:be:bd:27:47:2a:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:01:83:BF:12:CE:B4:C3:F0:5C:C6:D8:42:E8:7B:2B:A3:6E:E4:4D
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.224.0/20
89.35.144.0/22
93.158.232.0/22
185.21.148.0/22
188.121.0.0/19
Signature Algorithm: sha256WithRSAEncryption
19:fd:59:44:52:42:45:64:75:f3:a2:39:ff:b7:97:32:80:83:
98:30:a5:06:ed:68:58:d3:4c:b5:f5:28:41:0a:a5:8d:a7:41:
5c:a1:c2:cd:fc:d0:89:c2:95:96:fa:ba:49:ff:ff:93:de:1c:
8a:d1:63:a9:bf:ab:4b:89:ca:ec:eb:5d:fc:7c:1c:e7:ab:3e:
fe:e5:0b:1b:08:07:49:d6:3e:76:aa:9e:16:f0:f8:cd:1f:b9:
94:54:88:e2:b8:02:04:df:64:d2:95:24:86:93:2e:37:7f:d7:
c9:ec:8c:95:40:48:36:22:dd:69:a3:16:80:42:e0:11:1e:34:
f5:b9:2d:e3:53:42:67:2c:d5:7f:aa:91:e6:7e:c7:0c:c5:ff:
82:bf:c6:e3:1d:0c:a9:07:7e:34:39:af:f9:37:65:eb:17:64:
66:28:23:ef:d5:72:26:9c:7a:c6:09:2c:fc:1f:bf:0e:f1:f3:
41:81:cf:78:45:c2:64:46:d2:ff:76:5e:c7:c3:72:f4:ba:53:
56:bc:df:86:4b:6b:1b:cf:43:b5:66:90:22:ab:f9:77:ca:53:
6a:30:db:af:ce:bc:43:8d:0e:3a:a6:8f:5e:6b:4f:2e:67:fa:
d9:36:62:f2:a1:43:66:e0:0c:10:8a:9a:ee:c7:99:23:b1:ca:
fd:8c:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:18 2025 by rpki-client