Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/mblfFy3mNdc1SwdAwOx5WQVE19A.roa
File: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (raw, json)
Hash identifier: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=
Subject key identifier: 99:B9:5F:17:2D:E6:35:D7:35:4B:07:40:C0:EC:79:59:05:44:D7:D0
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0194206861CEA2C0A4CA1403AC59060B1DF4
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/mblfFy3mNdc1SwdAwOx5WQVE19A.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206112
IP address blocks: 80.92.237.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:61:ce:a2:c0:a4:ca:14:03:ac:59:06:0b:1d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99b95f172de635d7354b0740c0ec79590544d7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:8a:24:3f:5d:94:b5:a2:f8:95:52:55:c6:
c8:8e:b9:c1:d1:da:a2:66:56:22:69:c2:69:53:7c:
a4:0d:4c:37:c2:f2:22:91:76:e9:f6:32:a4:95:c1:
f0:15:b8:31:9d:60:97:37:01:ae:ee:4c:37:97:27:
b4:9f:1a:18:9e:31:f1:07:e6:f2:20:20:16:ee:63:
82:a9:7d:b6:33:f0:94:d8:24:15:f5:94:38:1f:94:
c0:19:dd:0c:eb:09:f3:99:3f:67:c4:8f:27:5b:ee:
db:6d:37:19:71:86:21:6b:6d:78:2e:25:e2:59:65:
0a:94:01:6d:bf:73:fe:e7:08:6d:c5:cc:22:34:20:
60:c7:c2:7f:7d:8e:2c:c4:d0:9b:0b:27:6c:41:79:
58:dd:23:b0:48:42:73:8e:c6:7f:bc:75:0b:a2:93:
ed:1c:15:d6:e4:74:6a:1d:e8:19:de:31:61:72:b3:
a9:eb:18:6d:33:4c:b8:b7:5a:f9:19:e9:be:69:1e:
ff:f5:52:c2:bc:8a:cb:7a:c9:0a:71:1a:68:ba:6b:
57:51:3f:7c:e3:04:31:72:f0:53:a3:84:e5:c6:36:
d7:ad:f4:6f:73:8c:2a:b7:de:e8:2f:6b:7d:56:0f:
05:27:79:5f:ab:6e:e7:0b:85:c2:fc:d8:4a:21:fc:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B9:5F:17:2D:E6:35:D7:35:4B:07:40:C0:EC:79:59:05:44:D7:D0
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/mblfFy3mNdc1SwdAwOx5WQVE19A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c7:67:5b:4d:6a:2d:8c:f7:22:f8:5e:95:a0:8f:08:cc:bc:
8d:33:d1:64:be:6e:ab:6a:52:b0:87:7f:cd:40:21:4d:02:09:
80:32:fd:14:8c:04:bd:1c:ab:02:3f:28:1a:ba:ff:66:f3:f8:
26:db:31:fa:36:6f:0a:8d:18:6e:db:09:1d:87:2a:c3:18:94:
c7:21:16:e9:08:0d:7f:b1:a3:1a:91:94:35:32:63:72:97:a3:
3c:3e:ef:23:87:b6:f8:25:4a:4c:59:8f:a3:da:31:2a:e8:82:
6f:27:8d:68:62:2c:d8:2a:af:ab:ae:ae:dc:92:d5:14:ab:f9:
f9:4f:f7:ec:2d:f9:76:2d:23:af:3b:38:36:bb:7d:ec:90:a5:
ab:42:da:f8:1c:dc:da:41:b4:d5:00:da:bc:92:1e:c6:37:f3:
f9:2f:2b:a6:5e:c7:08:f6:ca:a5:31:03:77:44:56:4c:9d:70:
f6:7b:53:32:57:3d:46:4f:89:13:ef:f9:b3:fe:65:1b:96:b4:
a9:36:d0:2f:10:85:d9:5b:68:aa:08:f0:b2:cc:5a:b7:0c:6f:
d4:77:b7:1c:88:f5:af:17:9d:af:05:a4:1e:55:a8:3c:18:81:
16:a7:31:8e:5b:74:6c:ef:07:00:f3:d6:9c:af:54:58:d4:48:
54:f8:21:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGHOosCkyhQDrFkGCx30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWI5NWYxNzJkZTYzNWQ3MzU0YjA3NDBjMGVjNzk1OTA1NDRkN2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP+KJD9dlLWi+JVSVcbIjrnB0dqi
ZlYiacJpU3ykDUw3wvIikXbp9jKklcHwFbgxnWCXNwGu7kw3lye0nxoYnjHxB+by
ICAW7mOCqX22M/CU2CQV9ZQ4H5TAGd0M6wnzmT9nxI8nW+7bbTcZcYYha214LiXi
WWUKlAFtv3P+5whtxcwiNCBgx8J/fY4sxNCbCydsQXlY3SOwSEJzjsZ/vHULopPt
HBXW5HRqHegZ3jFhcrOp6xhtM0y4t1r5Gem+aR7/9VLCvIrLeskKcRpoumtXUT98
4wQxcvBTo4TlxjbXrfRvc4wqt97oL2t9Vg8FJ3lfq27nC4XC/NhKIfwa8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJm5Xxct5jXXNUsHQMDseVkFRNfQMB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvbWJsZkZ5M21OZGMxU3dkQXdPeDVXUVZFMTlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFztMA0G
CSqGSIb3DQEBCwUAA4IBAQAvx2dbTWotjPci+F6VoI8IzLyNM9Fkvm6ralKwh3/N
QCFNAgmAMv0UjAS9HKsCPygauv9m8/gm2zH6Nm8KjRhu2wkdhyrDGJTHIRbpCA1/
saMakZQ1MmNyl6M8Pu8jh7b4JUpMWY+j2jEq6IJvJ41oYizYKq+rrq7cktUUq/n5
T/fsLfl2LSOvOzg2u33skKWrQtr4HNzaQbTVANq8kh7GN/P5LyumXscI9sqlMQN3
RFZMnXD2e1MyVz1GT4kT7/mz/mUblrSpNtAvEIXZW2iqCPCyzFq3DG/Ud7cciPWv
F52vBaQeVag8GIEWpzGOW3Rs7wcA89acr1RY1EhU+CFS
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:28 2025 by rpki-client