Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa
File: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (raw, json)
Hash identifier: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=
Subject key identifier: 33:EF:DC:75:C2:ED:0B:08:33:B5:40:2F:A3:A5:3A:C5:CD:0F:C3:B7
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 019424B387D93CD1503A5642C23BE2BE5D09
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15738
IP address blocks: 80.84.176.0/20 maxlen: 20
80.254.0.0/20 maxlen: 20
89.21.88.0/22 maxlen: 22
89.21.93.0/24 maxlen: 24
89.21.94.0/24 maxlen: 24
2a06:ff40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:87:d9:3c:d1:50:3a:56:42:c2:3b:e2:be:5d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33efdc75c2ed0b0833b5402fa3a53ac5cd0fc3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:32:c6:1e:0e:58:23:17:a8:d7:57:bf:2f:e3:
22:c8:d1:57:1f:0a:85:7c:6f:6b:17:85:f0:42:bd:
32:ce:0a:39:13:e4:98:7c:f5:13:2e:32:d6:95:55:
b0:d6:3e:5f:78:02:6a:e0:e7:be:04:e2:08:7a:54:
5a:db:72:51:f7:46:62:0a:2f:3c:db:8e:61:0b:eb:
d4:fd:e5:73:38:21:3c:27:04:8a:9e:fd:38:aa:cb:
8c:ef:76:a3:44:c8:9d:3b:7b:1e:e2:42:06:f8:69:
72:dc:57:e4:ca:bf:2d:23:f9:19:1c:31:ec:a6:4c:
58:7d:75:23:48:22:77:54:b2:94:7b:da:3c:04:9f:
97:b8:e5:8d:20:61:d0:d9:c8:87:13:82:ed:87:34:
c8:a3:18:98:06:0b:81:f5:4d:50:0c:3d:73:9a:9d:
e5:7f:84:6b:52:85:8a:e6:ea:fe:ba:2e:7e:3f:8c:
a9:65:83:64:34:98:8d:b4:8d:17:ad:bf:d3:7b:af:
c9:45:d9:49:19:86:31:da:59:a4:e1:25:4b:16:f5:
9c:9b:6a:93:a6:a4:6c:cb:13:f1:19:bb:e3:67:c5:
9c:d6:fe:58:f8:fc:8b:c9:f8:84:71:94:bf:90:4b:
15:a7:14:53:86:3a:c2:87:65:67:20:c6:8c:6a:cb:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:DC:75:C2:ED:0B:08:33:B5:40:2F:A3:A5:3A:C5:CD:0F:C3:B7
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.176.0/20
80.254.0.0/20
89.21.88.0/22
89.21.93.0-89.21.94.255
IPv6:
2a06:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:1a:2e:47:05:2f:08:be:4b:c1:d9:c9:8d:a2:af:ac:7c:83:
fc:15:9d:07:ea:91:d6:7c:0a:e3:d2:13:ad:10:21:81:63:56:
97:07:a7:01:df:49:b8:d0:da:b1:a3:06:ab:99:dd:bd:8c:84:
fc:0f:93:7f:8e:d6:b0:c9:fa:ef:5d:76:a7:81:e9:e1:30:02:
4a:d8:6a:0e:b9:28:da:33:54:59:6a:e3:5c:25:fa:55:e8:15:
c7:46:42:e9:75:46:cb:31:d1:83:fb:92:5a:f3:df:eb:19:65:
9c:7a:df:64:d3:5f:27:d3:25:7e:51:90:97:7a:ed:19:bf:74:
08:28:c2:18:c4:a2:0b:57:0a:84:08:9c:6d:4e:82:9a:c7:24:
7d:16:ec:52:99:7c:97:7f:da:89:e9:f4:6c:a8:9b:9a:ba:07:
97:46:cc:8d:a8:b3:ad:cd:0b:72:33:29:dd:d1:cc:36:af:90:
a9:a9:9d:e0:5a:a3:e0:31:5b:7d:0b:fc:3f:52:a5:3f:b5:f2:
92:8c:f8:ef:7d:11:f8:24:bb:49:9f:5b:65:8b:1e:50:96:d7:
b9:4d:c1:43:2e:6a:6e:80:ea:38:e5:e6:d0:55:85:54:11:08:
2b:ef:6e:4a:98:b0:6c:b8:dd:ec:5f:9a:aa:5c:98:95:41:4f:
6f:e9:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:51 2025 by rpki-client