Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/mIsCKSdHUxdZ0ggV47Rj6f305Ig.roa
File: mIsCKSdHUxdZ0ggV47Rj6f305Ig.roa (raw, json)
Hash identifier: Ngf+J1Z40O66NaIC0MZl0zOFwz7bh5eAuW3THMKuCYA=
Subject key identifier: 98:8B:02:29:27:47:53:17:59:D2:08:15:E3:B4:63:E9:FD:F4:E4:88
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D78769149F37055DA324E18C07E342
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/mIsCKSdHUxdZ0ggV47Rj6f305Ig.roa
Signing time: Wed 01 Jan 2025 21:48:34 +0000
ROA not before: Wed 01 Jan 2025 21:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197616
IP address blocks: 80.233.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:87:69:14:9f:37:05:5d:a3:24:e1:8c:07:e3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988b02292747531759d20815e3b463e9fdf4e488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:3e:26:ed:eb:95:dd:fc:64:c0:47:f6:62:
9d:01:eb:32:c3:62:8f:75:42:a0:32:45:38:3a:a8:
41:b2:b9:38:70:ee:bb:9f:e5:fc:2d:cd:96:39:c8:
ae:fd:aa:f6:1a:10:21:79:cd:8a:f8:56:ef:45:ce:
24:8b:e6:a8:ca:f8:20:03:66:0d:b7:4b:20:29:ec:
c5:9f:8a:3e:96:5d:28:0c:72:c4:86:ca:2c:ae:51:
5d:5a:10:64:50:dc:cf:14:c5:06:a8:e6:ac:4a:60:
b2:3e:7a:64:5e:03:95:94:a5:89:3b:db:51:34:e7:
40:ec:b5:f9:ff:5f:a3:3f:6c:d0:3b:e6:8c:7f:64:
1f:01:06:2d:d9:48:52:38:94:47:9e:79:30:47:56:
0b:6c:26:4f:a3:f5:7d:2f:f0:40:59:55:47:2b:b8:
33:1f:ba:c4:8e:e8:cf:31:1c:f5:91:a2:39:32:7c:
81:87:6c:8c:40:5f:c2:0b:99:dd:b4:d5:ed:94:7f:
09:89:4e:83:d7:a5:03:85:08:76:94:0d:96:c3:77:
8c:38:98:b7:e2:a0:ec:f2:bb:29:e7:4f:72:5a:6e:
e1:94:2d:e0:c2:72:10:55:4f:98:fb:3a:3b:44:5f:
25:5b:94:a1:9c:b6:97:b0:d0:12:09:8e:ad:8b:3b:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:02:29:27:47:53:17:59:D2:08:15:E3:B4:63:E9:FD:F4:E4:88
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/mIsCKSdHUxdZ0ggV47Rj6f305Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:1b:06:5b:2f:3e:a0:5d:f3:eb:2e:74:d3:2a:e9:91:35:47:
e1:41:95:05:a0:2e:0e:cf:39:bd:e9:4a:ef:41:64:8f:34:5e:
07:7b:ad:98:19:4d:2f:f1:ea:9f:bd:9a:2e:ae:26:35:58:aa:
a2:de:6d:7f:c8:b8:e5:26:ed:67:48:88:60:35:24:be:72:89:
ba:27:ae:d6:0c:44:39:04:57:28:fd:87:dd:02:16:8e:09:51:
36:9c:ed:b8:63:7b:a0:60:54:12:a1:9c:c1:7d:eb:d0:d2:24:
25:02:61:70:4a:95:52:f4:3a:94:35:93:dc:04:66:69:83:36:
f5:83:ce:70:d3:df:55:4d:d3:1c:e4:6f:8b:9a:8d:2b:17:7e:
c0:9b:70:58:9b:ef:c2:57:b5:bb:a0:3b:4b:c4:b0:ae:e0:f3:
fc:ae:71:d8:b9:8d:99:bd:a3:64:5b:53:c6:d8:7e:07:06:93:
d0:27:f9:4d:27:db:58:bb:b2:63:ae:69:02:d0:3e:3c:6c:e7:
86:f1:5b:80:66:a0:ad:26:3a:b9:ce:f2:fb:a7:17:15:bf:9b:
b2:1b:8b:91:92:b5:8b:a7:8c:d5:e2:fa:09:f5:55:e9:49:c7:
ed:fd:b2:89:19:4b:e4:96:99:03:c3:22:4a:b1:fd:12:58:17:
0e:0c:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:07 2025 by rpki-client