Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/XMQgiqcPelkjm7gWjsFCVZhyYlw.roa
File: XMQgiqcPelkjm7gWjsFCVZhyYlw.roa (raw, json)
Hash identifier: MplIqGMTS4jdBDFbxET40RGJ8kb7EFW6T8B0/VgkIdM=
Subject key identifier: 5C:C4:20:8A:A7:0F:7A:59:23:9B:B8:16:8E:C1:42:55:98:72:62:5C
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 01942444B1A1C36273E434D3A658C5B6C15C
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/XMQgiqcPelkjm7gWjsFCVZhyYlw.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202803
IP address blocks: 80.64.212.0/22 maxlen: 22
80.64.212.0/23 maxlen: 23
80.64.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b1:a1:c3:62:73:e4:34:d3:a6:58:c5:b6:c1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cc4208aa70f7a59239bb8168ec142559872625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:a4:d6:0d:d8:07:9f:84:50:b3:db:db:96:
05:36:6c:2e:7b:b0:2b:e6:df:ea:25:92:27:71:5f:
db:11:71:a6:06:f1:d3:e2:0a:a2:37:14:c1:18:1f:
bf:90:eb:55:39:1b:43:2e:a3:82:ef:76:d8:5b:9c:
6d:51:2b:0b:49:99:f3:95:0c:92:e5:dd:8f:b7:86:
26:40:a6:12:29:dc:c9:28:18:3b:b3:e9:47:7d:2b:
16:a6:ae:a7:db:66:96:19:c9:ce:73:d2:f2:18:c6:
e3:d9:6c:63:83:48:4c:94:b1:79:e1:ec:dd:4c:6b:
ec:ec:3e:1e:cd:63:fe:17:2b:90:80:e3:73:c7:2d:
80:93:2e:fd:21:6a:e9:77:85:af:06:8c:cc:a0:66:
bf:0e:1b:14:b6:5f:a3:e8:70:41:26:7f:7b:f0:c0:
ea:0a:17:d7:d8:76:8d:44:75:5f:b5:fe:ab:05:a8:
31:f4:eb:d9:c7:17:e4:91:5f:33:71:a4:22:50:8c:
2e:37:ec:f9:a1:a1:b6:b4:24:84:57:78:1a:7b:44:
b3:d2:f9:09:3f:4c:e7:11:4f:16:97:d1:66:8c:ad:
8a:81:f6:a0:6e:2f:21:47:e8:cd:18:5d:cd:86:3d:
d5:76:29:66:38:c8:4f:49:1f:60:fb:8f:ea:2a:0b:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:20:8A:A7:0F:7A:59:23:9B:B8:16:8E:C1:42:55:98:72:62:5C
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/XMQgiqcPelkjm7gWjsFCVZhyYlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:88:11:83:f5:77:d6:2c:69:5a:85:9f:b8:0c:b9:c7:03:30:
e1:f7:3b:18:a0:b3:30:a4:fc:3e:12:94:51:05:e0:93:45:55:
6e:97:e9:dd:8a:23:9a:bb:ee:58:9d:47:1d:ff:b9:f1:1d:66:
eb:1f:3c:0e:1d:8a:96:8b:65:9c:be:c6:87:89:66:fd:ec:b7:
ac:50:25:ec:0b:de:25:42:0c:95:18:a6:73:74:b1:17:9e:b4:
bf:4a:b6:5b:05:90:49:bc:1b:40:ef:85:79:0e:f8:35:65:97:
08:ba:92:bf:d1:21:b8:8e:b4:05:a5:eb:82:8b:58:88:39:f3:
8b:a1:08:0b:87:a3:d0:21:c4:86:52:89:44:ec:98:c3:ab:7f:
1e:06:60:d3:91:16:64:1f:ea:48:84:38:5a:17:b4:e7:d4:fd:
5c:28:06:18:47:c4:27:74:47:38:99:02:b4:22:74:26:b9:99:
7d:53:e2:c2:5b:3a:52:60:c3:64:1f:a9:d6:b5:43:40:31:c4:
4e:6c:eb:0f:77:35:10:10:2b:2a:65:6e:9c:37:99:24:73:b6:
33:2d:02:62:aa:88:da:2e:9f:1e:9d:0a:f1:93:5e:d0:f0:e2:
e6:c1:95:87:42:18:8a:8f:c0:93:f4:a4:07:00:2c:9f:94:a6:
c5:31:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:38 2025 by rpki-client