Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/mPk-UDvntYGJZDrrZisGVvHTcD8.roa
File: mPk-UDvntYGJZDrrZisGVvHTcD8.roa (raw, json)
Hash identifier: Ld7FEkLyaOdSCxYsdZKOXLiKBEzljs4pb53YDEIGlZo=
Subject key identifier: 98:F9:3E:50:3B:E7:B5:81:89:64:3A:EB:66:2B:06:56:F1:D3:70:3F
Certificate issuer: /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial: 019427484E49315298FE788C625A1F9CD0B0
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/mPk-UDvntYGJZDrrZisGVvHTcD8.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25151
IP address blocks: 80.85.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4e:49:31:52:98:fe:78:8c:62:5a:1f:9c:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98f93e503be7b58189643aeb662b0656f1d3703f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:38:93:79:33:21:39:c5:df:aa:2e:78:5e:
84:5e:6d:d7:39:00:ab:78:99:37:b7:d9:63:81:84:
2b:30:c7:70:79:be:4a:9b:78:93:db:a2:cd:8b:e7:
90:53:b6:15:01:9f:b1:2c:ae:ad:02:a9:45:3a:3a:
86:ce:50:ac:3a:3c:d2:7e:57:84:d6:62:ff:92:3f:
cf:60:a7:96:60:7d:0b:68:fb:d4:b2:77:bd:7e:7b:
43:7b:74:db:aa:96:61:89:15:99:c0:8e:99:18:e6:
86:a4:5b:bb:74:fa:e6:b3:c5:e2:56:d3:55:47:09:
ea:04:bd:32:9c:12:86:b7:20:1a:b8:f1:5d:dd:b4:
11:92:d4:7f:56:76:89:ec:3b:41:59:0c:96:ae:95:
97:ed:cf:5b:b8:a5:53:c9:59:32:63:07:d9:3c:18:
bb:b7:76:28:b2:dc:3a:21:f5:64:35:a6:95:a9:0a:
89:66:b3:9e:0b:8b:47:c9:b1:f0:1d:fb:12:88:a0:
5c:dc:d6:a6:bf:21:d6:46:54:ca:37:45:08:a1:ad:
75:1e:31:51:2b:61:8c:9a:0a:37:20:84:e9:15:a6:
5e:da:5c:7b:b8:c8:fa:fb:29:52:e2:f9:2d:42:4b:
0e:76:7d:07:91:4a:6f:f8:0c:16:24:9d:3d:c8:db:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F9:3E:50:3B:E7:B5:81:89:64:3A:EB:66:2B:06:56:F1:D3:70:3F
X509v3 Authority Key Identifier:
keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/mPk-UDvntYGJZDrrZisGVvHTcD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d3:e4:18:01:d8:7e:53:89:2c:50:0b:3e:3d:79:be:66:ce:
a7:c9:2a:b6:9b:61:69:a7:61:1f:06:ef:ff:42:59:ea:dc:ba:
4b:72:9c:fb:a9:ca:95:36:c3:18:25:fd:0a:9e:71:dc:13:30:
7b:00:9f:47:e6:d7:05:85:31:5f:e9:dd:c7:f0:9f:79:ad:10:
5c:13:9c:40:7e:0b:d7:8e:14:a6:fa:cb:85:ed:ea:c4:10:c5:
ab:7d:d8:55:73:7e:95:b0:60:78:50:09:60:12:b4:b2:9a:ff:
f7:1b:02:9b:7e:85:63:f8:7b:fe:45:8b:b2:e9:d1:b0:44:94:
2e:7e:ee:15:86:4e:ba:bc:73:57:db:a0:ab:e8:95:c6:61:cb:
04:fc:87:17:da:df:7b:3c:e2:31:61:93:c7:4b:fd:45:0b:33:
fd:79:a6:cd:d4:b6:01:77:24:56:67:61:e9:55:f3:27:52:19:
62:0a:2a:c3:83:e7:45:95:a9:de:0c:ed:db:11:c1:f6:47:da:
8f:ac:6e:d5:3f:a6:a8:2b:15:8c:cb:44:64:df:98:08:47:03:
8d:44:38:c3:ad:0d:13:e7:89:92:8e:b7:48:0e:99:81:f2:6f:
3d:8f:86:90:e8:01:aa:9b:2f:7e:ae:61:b9:2a:dd:9b:5d:19:
02:ad:09:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSE5JMVKY/niMYlofnNCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2FlODBjZWNiNTZmNWIzMDAzODgzYTk1ZTI2ZjQ0MWQ3
NDlmMmUwHhcNMjUwMTAyMTM1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGY5M2U1MDNiZTdiNTgxODk2NDNhZWI2NjJiMDY1NmYxZDM3MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+o4k3kzITnF36oueF6EXm3XOQCr
eJk3t9ljgYQrMMdweb5Km3iT26LNi+eQU7YVAZ+xLK6tAqlFOjqGzlCsOjzSfleE
1mL/kj/PYKeWYH0LaPvUsne9fntDe3TbqpZhiRWZwI6ZGOaGpFu7dPrms8XiVtNV
RwnqBL0ynBKGtyAauPFd3bQRktR/VnaJ7DtBWQyWrpWX7c9buKVTyVkyYwfZPBi7
t3Yostw6IfVkNaaVqQqJZrOeC4tHybHwHfsSiKBc3NamvyHWRlTKN0UIoa11HjFR
K2GMmgo3IITpFaZe2lx7uMj6+ylS4vktQksOdn0HkUpv+AwWJJ09yNsgWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJj5PlA757WBiWQ662YrBlbx03A/MB8GA1UdIwQY
MBaAFGs66AzstW9bMAOIOpXib0QddJ8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpyb0RPeTFiMXN3QTRnNmxlSnZSQjEwbnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi82MzczNzctY2FkYy00ZmQ0LWI2NmQt
YzlhNTZjNWQzZTkxLzEvbVBrLVVEdm50WUdKWkRyclppc0dWdkhUY0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi82MzczNzctY2FkYy00ZmQ0LWI2NmQtYzlhNTZjNWQzZTkx
LzEvYXpyb0RPeTFiMXN3QTRnNmxlSnZSQjEwbnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUFWgMA0G
CSqGSIb3DQEBCwUAA4IBAQAN0+QYAdh+U4ksUAs+PXm+Zs6nySq2m2Fpp2EfBu//
Qlnq3LpLcpz7qcqVNsMYJf0KnnHcEzB7AJ9H5tcFhTFf6d3H8J95rRBcE5xAfgvX
jhSm+suF7erEEMWrfdhVc36VsGB4UAlgErSymv/3GwKbfoVj+Hv+RYuy6dGwRJQu
fu4Vhk66vHNX26Cr6JXGYcsE/IcX2t97POIxYZPHS/1FCzP9eabN1LYBdyRWZ2Hp
VfMnUhliCirDg+dFlaneDO3bEcH2R9qPrG7VP6aoKxWMy0Rk35gIRwONRDjDrQ0T
54mSjrdIDpmB8m89j4aQ6AGqmy9+rmG5Kt2bXRkCrQlj
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:20 2025 by rpki-client