Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa
File: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (raw, json)
Hash identifier: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=
Subject key identifier: 53:66:08:B9:70:32:50:26:4E:B1:1E:02:C3:93:D2:3D:DC:1A:53:4B
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0194228DCD9AF08DC73C9ED11AB0CBBDA36E
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34086
IP address blocks: 80.158.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cd:9a:f0:8d:c7:3c:9e:d1:1a:b0:cb:bd:a3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=536608b9703250264eb11e02c393d23ddc1a534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:1e:81:7f:f7:92:84:14:5b:f3:42:b3:81:
43:cf:ae:8f:60:86:2a:01:76:17:ea:7d:31:3f:a8:
b2:1a:cf:aa:f0:bf:8d:cb:b8:5f:4a:3d:3f:73:ef:
35:2f:d7:68:c3:6f:ae:82:ba:f4:e4:48:7f:0b:e3:
67:62:be:cf:3e:1e:69:d5:45:b9:7a:16:8a:7d:0c:
5a:4d:db:9f:99:b0:0a:73:23:0a:1a:29:42:b8:c5:
f5:9c:6e:de:be:d8:00:c2:2e:ef:c0:62:0e:bd:ad:
33:ef:07:c6:82:e8:67:6b:84:cb:c5:a1:46:24:09:
4f:3c:42:a0:7c:ac:9d:49:e9:7b:8e:c0:27:95:2e:
bd:06:e8:ce:a5:3b:78:53:8a:be:4a:d4:c9:66:29:
58:0c:d5:3e:cd:60:8b:57:d2:66:89:6a:9a:c3:5b:
b0:cc:f6:cc:b9:51:31:d3:c4:0f:c6:e1:82:ec:ba:
f7:23:03:3f:85:9c:54:78:b1:02:56:6d:75:79:a0:
b9:28:ea:46:e9:e7:08:83:6b:15:1e:e7:89:ed:8c:
73:96:a8:8c:27:67:67:41:a0:e1:c6:69:c8:7d:b3:
cc:7b:7a:80:af:f6:e0:1d:08:95:83:8f:51:6b:42:
11:5b:0a:9b:9f:f3:22:8c:36:99:2e:44:ae:de:c9:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:66:08:B9:70:32:50:26:4E:B1:1E:02:C3:93:D2:3D:DC:1A:53:4B
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.158.0.0/17
Signature Algorithm: sha256WithRSAEncryption
81:23:50:eb:35:a9:85:12:8e:2c:24:7a:0b:2e:18:ca:67:e7:
f3:1c:9f:27:ce:52:a5:9f:9b:ff:de:0e:4a:f7:9f:d1:60:e3:
9a:ee:bb:f7:a3:cf:89:42:cf:aa:b1:3c:05:9d:95:33:b1:5e:
84:58:11:57:d2:7d:b1:37:39:10:ed:b9:1e:25:33:61:2d:a1:
d3:7d:9c:8e:69:27:65:8d:3d:4a:98:1f:0d:d5:db:88:cf:a1:
71:3f:b3:c8:48:54:c4:70:d4:1d:9d:f8:ad:c5:18:9f:06:ea:
86:51:2e:9f:e0:1e:5d:11:83:c2:1a:58:33:74:a7:72:27:6f:
61:64:52:88:0f:ea:e0:ed:d0:85:10:3c:4a:ce:c5:d2:ee:9f:
14:20:ce:c2:6d:76:29:b5:fb:bc:38:66:56:39:95:e9:be:cc:
d3:f6:36:0c:30:15:7f:3c:12:ea:70:5a:56:59:f6:f2:f0:bd:
bb:64:56:cc:ca:eb:4d:9a:42:57:5b:0a:69:45:60:c8:28:b5:
cf:d4:17:b9:a1:3f:fb:6c:bf:08:2d:4c:c2:5e:57:ac:7c:50:
cf:7c:dc:f2:2b:ba:94:76:f7:a9:5c:e6:88:42:e0:7a:8e:a0:
82:26:1a:61:08:4c:4b:da:5a:f8:9d:cb:49:ef:a1:63:cb:22:
22:53:7c:27
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijc2a8I3HPJ7RGrDLvaNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2
MDk4MmIwHhcNMjUwMTAxMTU0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzY2MDhiOTcwMzI1MDI2NGViMTFlMDJjMzkzZDIzZGRjMWE1MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt38egX/3koQUW/NCs4FDz66PYIYq
AXYX6n0xP6iyGs+q8L+Ny7hfSj0/c+81L9dow2+ugrr05Eh/C+NnYr7PPh5p1UW5
ehaKfQxaTdufmbAKcyMKGilCuMX1nG7evtgAwi7vwGIOva0z7wfGguhna4TLxaFG
JAlPPEKgfKydSel7jsAnlS69BujOpTt4U4q+StTJZilYDNU+zWCLV9JmiWqaw1uw
zPbMuVEx08QPxuGC7Lr3IwM/hZxUeLECVm11eaC5KOpG6ecIg2sVHueJ7YxzlqiM
J2dnQaDhxmnIfbPMe3qAr/bgHQiVg49Ra0IRWwqbn/MijDaZLkSu3slpHQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFNmCLlwMlAmTrEeAsOT0j3cGlNLMB8GA1UdIwQY
MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy
LTc2YjBkZGEyYmYzZS8xL1UyWUl1WEF5VUNaT3NSNEN3NVBTUGR3YVUwcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYz
ZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdQngAw
DQYJKoZIhvcNAQELBQADggEBAIEjUOs1qYUSjiwkegsuGMpn5/McnyfOUqWfm//e
Dkr3n9Fg45ruu/ejz4lCz6qxPAWdlTOxXoRYEVfSfbE3ORDtuR4lM2EtodN9nI5p
J2WNPUqYHw3V24jPoXE/s8hIVMRw1B2d+K3FGJ8G6oZRLp/gHl0Rg8IaWDN0p3In
b2FkUogP6uDt0IUQPErOxdLunxQgzsJtdim1+7w4ZlY5lem+zNP2NgwwFX88Eupw
WlZZ9vLwvbtkVszK602aQldbCmlFYMgotc/UF7mhP/tsvwgtTMJeV6x8UM983PIr
upR296lc5ohC4HqOoIImGmEITEvaWvidy0nvoWPLIiJTfCc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:33 2025 by rpki-client