Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa
File: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (raw, json)
Hash identifier: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=
Subject key identifier: 9B:37:63:5B:C7:75:83:64:53:6E:99:03:CA:27:82:45:BE:11:86:9E
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 019422FB9C5105CA70D7DAAE0188A3416F8C
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21171
IP address blocks: 80.91.32.0/20 maxlen: 20
185.227.124.0/22 maxlen: 22
2a01:9900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9c:51:05:ca:70:d7:da:ae:01:88:a3:41:6f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b37635bc7758364536e9903ca278245be11869e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:70:fe:e4:95:76:63:ef:04:8e:a0:37:22:
9a:49:cb:1e:1a:91:2e:30:c2:ca:1c:5d:87:6a:5e:
a9:b1:91:be:c3:69:87:f3:aa:ff:eb:49:89:13:dd:
bf:68:6b:8a:e0:ca:22:e0:a5:8f:ca:ae:70:c5:28:
9c:4f:1b:38:31:f6:7a:95:63:08:5b:75:67:d1:8a:
0e:bc:55:0c:d9:02:77:c5:d2:cb:8d:4e:5b:60:af:
51:9b:3d:4a:e5:1a:ec:4f:73:96:3e:f9:6f:9b:af:
bf:dd:d4:8b:52:88:95:dd:b6:cd:2b:47:bb:f1:d3:
0d:a9:d0:0f:4d:10:d4:de:ad:8c:fa:94:01:60:8c:
67:71:bd:0c:b4:b0:6d:15:16:64:84:d6:f1:c0:8e:
85:ec:5b:a7:a7:ff:8d:e8:fa:8b:33:b3:98:ec:82:
db:1b:a9:32:69:93:b6:a0:88:f4:b8:08:db:1b:2d:
bc:8c:f6:6c:c2:da:13:9f:1e:68:b8:ef:df:9b:22:
60:2c:c6:9f:08:05:ca:c1:f2:61:81:be:ad:0e:ec:
4e:f4:7a:c1:bc:c6:96:3c:ab:b9:5f:04:e7:2a:16:
66:9b:75:76:e4:e2:27:8c:c4:f8:17:34:a9:7c:c3:
6c:09:75:14:2d:1d:cd:9e:48:0a:57:9c:49:66:00:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:37:63:5B:C7:75:83:64:53:6E:99:03:CA:27:82:45:BE:11:86:9E
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.32.0/20
185.227.124.0/22
IPv6:
2a01:9900::/32
Signature Algorithm: sha256WithRSAEncryption
44:b7:84:8d:88:48:71:d2:28:ba:9c:4a:e9:2e:a8:29:33:78:
e4:12:a9:4f:5c:c6:cc:7c:20:f8:fe:f5:7c:e6:7a:0e:83:2e:
22:19:47:a6:85:ba:8f:05:29:b0:16:47:9b:61:d7:66:75:f0:
b2:87:68:e5:2b:3e:cc:87:48:de:d6:3f:de:65:30:0f:b7:ee:
ac:97:e6:a0:3b:39:b7:cc:5b:46:9f:f8:77:02:e1:e7:83:f8:
1e:d1:31:a5:36:2a:e5:f0:fb:2a:48:c8:ea:c6:0a:b2:cb:a3:
1b:3f:9c:b9:f3:4c:cd:3b:3e:98:9e:64:fe:99:e5:cd:bc:43:
78:e1:0b:4a:c7:54:21:04:fe:f2:c6:f8:01:04:6e:c9:17:2d:
0e:8b:71:3b:4a:fe:9b:e5:07:79:66:93:03:50:0d:a1:af:c3:
26:c0:b7:30:57:51:e4:ed:ea:81:2c:f8:5c:84:c7:ee:fd:a5:
3c:23:dd:9a:d6:66:ba:c8:65:8b:9f:20:57:3e:fc:35:68:08:
35:20:76:1a:9e:a2:fa:ff:55:4c:fd:67:20:b4:ed:2f:1b:29:
b8:91:33:81:83:3d:7a:f0:c8:84:49:45:fc:d6:55:43:ae:7a:
41:63:ce:1a:c4:b8:35:93:a7:2f:d6:58:62:aa:14:a4:28:eb:
05:17:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:44 2025 by rpki-client