Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/m33s4sgep6-q8UmRmhXl2lkYj9Y.roa
File: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (raw, json)
Hash identifier: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=
Subject key identifier: 9B:7D:EC:E2:C8:1E:A7:AF:AA:F1:49:91:9A:15:E5:DA:59:18:8F:D6
Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial: 01942067DC3DF3F46060B7AC17CD56BCD285
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/m33s4sgep6-q8UmRmhXl2lkYj9Y.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200295
IP address blocks: 80.64.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dc:3d:f3:f4:60:60:b7:ac:17:cd:56:bc:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b7dece2c81ea7afaaf149919a15e5da59188fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:db:14:8a:d2:0c:b3:e4:b5:39:f4:7b:1e:
c5:e2:bc:9a:c1:e2:6d:fc:89:5a:29:ef:c6:4b:aa:
01:55:68:fe:92:f4:d4:6f:ee:3d:26:76:60:aa:bf:
65:6a:06:26:06:6b:0e:fa:98:71:8a:20:86:df:5c:
1d:39:97:d4:df:50:fa:4d:f9:d0:12:91:19:49:62:
6b:41:92:cf:1a:f6:97:46:4e:e1:67:bc:c3:10:61:
90:df:e7:73:87:df:9e:12:eb:aa:c6:3f:6d:09:b7:
96:93:57:63:cf:4e:fa:3b:3d:de:02:7b:64:29:60:
e0:d5:97:b8:b5:40:fb:31:01:cf:5f:89:6c:fa:56:
1a:a5:04:89:ee:d4:0a:94:f3:4e:8c:63:72:8e:75:
2f:1e:23:32:51:e9:8d:38:86:88:4a:13:a2:42:a1:
08:65:ca:f7:4e:8c:b5:3d:03:70:dc:85:c5:3c:e1:
b2:ce:c2:88:43:3e:fe:7f:37:cd:fd:e5:10:3e:61:
6b:09:3c:96:2e:b0:9c:15:e7:ce:a6:1d:80:89:e4:
9f:95:60:d4:59:0f:b8:a9:22:5e:60:a6:45:47:cc:
38:e3:5a:1e:48:ae:91:b8:85:f6:24:ee:c8:9c:65:
17:76:7d:3c:fd:15:95:bd:ff:f4:c0:97:2e:ca:78:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:EC:E2:C8:1E:A7:AF:AA:F1:49:91:9A:15:E5:DA:59:18:8F:D6
X509v3 Authority Key Identifier:
keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/m33s4sgep6-q8UmRmhXl2lkYj9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.208.0/22
Signature Algorithm: sha256WithRSAEncryption
19:af:49:3c:b9:a9:ee:0a:0b:2a:ee:3b:00:3d:27:ef:64:4c:
96:9b:2f:d4:46:c2:af:ff:b1:68:14:a8:c6:0b:ff:1e:3e:f5:
81:f6:a9:62:b6:13:17:84:17:b7:b8:ff:83:f8:42:ed:e9:12:
bb:41:db:4d:ba:5c:e6:c8:09:9b:a9:bc:38:7c:db:8a:78:c6:
7a:b2:9a:0c:6a:8a:81:80:25:45:8b:8c:87:c0:82:98:87:d8:
a9:72:31:44:fb:7c:bd:51:df:18:a0:46:83:c6:3d:b0:3d:71:
fe:7e:83:f2:2d:88:59:ac:58:91:7f:c9:37:ed:5d:e2:74:56:
0f:c6:e7:bf:ac:ee:99:9f:a5:ab:92:e8:15:8e:b0:d0:e5:c9:
f1:8f:ae:5d:64:23:96:1d:eb:7d:fc:b6:d5:66:0a:56:90:47:
d5:e1:9d:fc:f7:63:11:50:ef:39:5b:75:37:d6:94:50:38:95:
c8:ef:af:b5:87:80:c1:65:f8:14:c8:c3:0f:e1:4c:fb:3d:96:
2c:28:7d:58:b0:d9:ee:bf:15:85:4c:3e:af:bb:e7:f7:2e:0d:
2b:a2:18:cc:83:a6:cd:6e:85:c4:9f:47:f3:5c:b8:0e:e8:bc:
45:ba:8f:10:f7:81:ba:89:fc:07:f8:32:f6:c9:6e:e1:ad:3e:
b9:1b:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:58 2025 by rpki-client