Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/MfGfVoxcZRKcXeryJdrARrFNT30.roa
File: MfGfVoxcZRKcXeryJdrARrFNT30.roa (raw, json)
Hash identifier: NP17Awbv8VvBz7g9no++bSqGAeudeK0bPJQ8VG+ovrs=
Subject key identifier: 31:F1:9F:56:8C:5C:65:12:9C:5D:EA:F2:25:DA:C0:46:B1:4D:4F:7D
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 0194221FAF17A4E2DAEFEAD8970245137962
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/MfGfVoxcZRKcXeryJdrARrFNT30.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41820
IP address blocks: 213.109.80.0/24 maxlen: 24
213.109.82.0/24 maxlen: 24
213.109.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:af:17:a4:e2:da:ef:ea:d8:97:02:45:13:79:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31f19f568c5c65129c5deaf225dac046b14d4f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:da:20:5a:86:b1:8c:a7:57:73:c0:ca:c2:
fa:3a:9d:ca:77:23:47:e3:c6:3e:9a:d0:21:f8:ad:
1e:a4:15:52:2a:9f:88:68:3a:9a:16:af:db:24:d8:
6a:b2:46:8c:da:92:63:9c:d3:3b:a3:76:e6:7e:17:
7a:7d:eb:aa:0e:e6:a8:dc:77:1a:0a:e4:40:07:6d:
d4:56:16:be:f3:13:7c:d1:00:cf:2b:80:d8:27:a8:
fe:e5:ef:26:83:6a:10:d1:3f:14:2b:96:02:c8:f3:
fb:d4:9e:bb:61:12:ae:76:8e:f8:84:2a:c0:73:6d:
08:e6:e8:1c:be:18:ba:ec:45:27:ad:80:0d:8b:33:
2d:21:fb:c4:a6:df:11:00:e6:e8:f6:ed:ff:dd:3f:
cd:23:ad:ae:e8:51:86:96:85:2e:fb:db:d5:e8:af:
66:22:dc:b9:7b:5e:4e:cd:4b:bb:cb:a7:df:a4:0e:
e1:6f:be:eb:6a:d7:44:b6:d6:b7:67:e8:23:51:ff:
b3:38:24:a3:b7:34:da:f5:86:8b:d8:8d:36:0b:a9:
61:24:8c:06:04:ea:c6:3a:a3:2b:89:cd:f2:56:f1:
72:a2:a0:8e:fd:91:f4:fe:ea:9e:cf:5e:ca:c6:7d:
c5:e6:90:99:97:f0:6c:ed:8f:9b:b5:97:c0:3f:09:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F1:9F:56:8C:5C:65:12:9C:5D:EA:F2:25:DA:C0:46:B1:4D:4F:7D
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/MfGfVoxcZRKcXeryJdrARrFNT30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.80.0/24
213.109.82.0/23
Signature Algorithm: sha256WithRSAEncryption
31:1a:ac:ef:fb:01:66:d2:2c:f3:90:72:fe:1a:f6:6c:e6:95:
2d:ee:be:99:b8:ad:28:95:01:74:1d:24:7c:74:67:7d:90:8e:
33:76:67:cc:8f:ec:a1:d7:0b:0d:12:ee:88:68:c2:ec:93:61:
a0:0b:81:a9:86:48:19:f5:a6:c6:e5:aa:6f:00:eb:6f:45:0b:
28:7d:a1:0a:64:8c:63:89:2e:d7:a4:f0:1c:29:cf:8e:05:80:
2b:a5:90:ac:d5:e4:cf:5b:76:ff:27:fb:59:4b:37:db:b8:eb:
17:7a:3e:59:bb:b6:5c:26:2e:45:b4:a3:7f:40:a3:12:4c:44:
63:00:de:4d:da:07:a9:0d:19:9a:88:61:3f:32:e0:b6:60:6b:
79:35:84:94:74:08:95:d2:04:5f:68:9e:34:f2:ec:d3:d4:39:
3c:99:4a:20:49:5b:11:ed:7f:62:09:c8:74:a0:9c:4b:12:98:
79:51:73:63:87:90:9a:05:75:93:de:b4:85:fe:b0:a6:fd:ae:
f7:f2:3c:25:78:73:61:9f:86:aa:9b:0c:ac:5b:55:b2:1c:ab:
5c:0b:d6:44:40:c4:15:c6:ce:f8:c6:30:56:bb:76:f4:36:1b:
e7:86:90:a6:6a:1d:b5:9f:60:ed:0c:aa:8b:6c:eb:8a:40:24:
ec:74:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:49 2025 by rpki-client