Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa
File: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (raw, json)
Hash identifier: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=
Subject key identifier: F0:C4:FF:EE:85:B0:C7:13:F5:0B:E6:18:93:F2:E4:0B:01:3D:84:6D
Certificate issuer: /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial: 01941F8C75DEA24487F10C35D4CCF9980BA3
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 80.91.58.0/23 maxlen: 24
80.91.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:75:de:a2:44:87:f1:0c:35:d4:cc:f9:98:0b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0c4ffee85b0c713f50be61893f2e40b013d846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:19:3d:04:e5:c6:57:1d:02:8b:29:e4:a7:
40:fb:6f:18:60:e2:a0:7d:84:84:95:0f:2c:44:2c:
4d:68:ad:6e:fe:86:65:93:71:45:df:2d:42:d6:2e:
d4:84:ed:b0:d8:78:03:d3:ab:97:c3:ee:f2:69:49:
b7:a4:31:61:13:01:b9:fd:30:45:a0:0a:98:ca:86:
66:72:fd:ca:8a:bf:29:45:c6:44:68:ff:a1:cf:29:
b4:96:29:6d:30:45:5c:00:6c:7d:21:50:81:c6:ea:
d1:16:fe:f6:8f:ac:75:44:7a:69:ec:d1:04:b3:25:
99:94:d5:f3:6c:64:54:bb:62:c3:66:f4:a6:d0:61:
23:a6:f1:f2:c7:75:da:3c:3a:b0:a9:06:49:ee:0c:
d4:27:4e:37:25:14:05:1d:66:ae:9c:59:02:ea:d3:
a3:e9:d1:82:96:86:d6:6b:1c:3f:08:b6:57:af:e1:
d6:fd:65:ed:da:10:94:fa:98:a4:85:88:af:61:fd:
40:f1:8c:f4:e3:63:74:8f:18:bb:70:24:7e:d6:3b:
85:17:21:92:63:d6:73:ed:71:b4:eb:37:32:ca:c0:
aa:e2:6d:6f:41:10:b3:fe:42:9c:03:b3:8c:5a:a0:
3c:67:45:4f:a3:93:93:da:63:7a:d6:5b:a6:f9:3a:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:FF:EE:85:B0:C7:13:F5:0B:E6:18:93:F2:E4:0B:01:3D:84:6D
X509v3 Authority Key Identifier:
keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.58.0/23
80.91.62.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:0d:ce:f3:5f:06:a3:68:e7:29:52:ea:e5:e3:d8:a4:0e:6b:
3b:a1:43:8c:f3:f3:d3:a2:1e:a7:08:f7:02:e3:13:8e:c2:a5:
3e:98:da:6a:fa:7b:af:1e:1e:e6:c9:fc:61:8a:ee:59:ba:fd:
86:4b:12:79:70:6f:87:3d:95:41:f3:8a:1c:45:82:be:2f:53:
fa:d7:d2:ec:14:ca:ef:13:54:b0:c1:bf:b6:19:d8:03:7c:25:
c7:1b:ab:71:b8:a7:af:27:9a:89:c0:28:3f:43:ef:ef:eb:bf:
1e:1f:5a:4f:0c:a8:54:52:8e:8a:98:c4:3e:82:20:cf:45:c9:
c8:b7:db:4c:92:9a:78:5b:a3:59:8e:1f:6b:ee:22:ae:4e:94:
04:b3:f8:7d:e5:38:64:9c:f9:86:75:31:ec:35:91:d6:64:22:
c1:78:64:cd:5a:97:cc:fc:a0:a1:9a:25:37:cd:6c:d2:95:a2:
b4:64:a9:3b:33:db:e1:4b:78:7c:08:4a:8d:78:af:82:70:3c:
1a:dc:5f:fc:31:79:ed:85:f0:35:4e:16:5a:bc:4f:4d:31:dd:
b4:52:8f:87:65:52:7e:13:24:f0:fc:5d:65:24:af:89:d4:13:
32:d7:5a:c9:65:7d:d4:c8:9d:f1:51:11:b5:40:a3:61:8c:ac:
62:68:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net