Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa
File: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (raw, json)
Hash identifier: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=
Subject key identifier: A3:1A:A1:D1:59:6E:9D:CF:7F:8C:9C:EC:48:38:2D:8A:F6:7A:89:A2
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 01942747FB7ED545E8B654C2A2A70490AF30
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42543
IP address blocks: 83.166.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fb:7e:d5:45:e8:b6:54:c2:a2:a7:04:90:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a31aa1d1596e9dcf7f8c9cec48382d8af67a89a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:68:97:0c:b1:da:d9:d9:29:c9:75:52:9e:
db:78:0a:8c:a4:01:57:7e:25:b6:40:ae:dd:7e:6e:
0f:9e:7b:75:19:ce:14:25:d2:a7:37:96:1e:b1:cb:
d5:74:87:d1:df:99:e5:df:f2:19:2f:62:61:af:3a:
f0:b1:98:f8:1a:7a:5a:62:77:2f:ec:e4:e9:cc:16:
12:b0:ea:31:43:81:ac:35:38:06:a0:29:15:7e:e3:
2f:4d:e3:c7:5c:21:ab:2e:ab:a0:42:39:36:13:7f:
5e:0c:4a:59:aa:65:7a:d9:85:01:91:02:ae:3d:66:
b3:10:4e:4d:eb:ec:21:aa:a0:33:4d:9b:8d:6a:68:
4a:fd:47:2f:95:5b:d0:9e:3f:6e:d7:b5:cd:f4:f8:
fc:96:8b:fb:ec:6b:3f:ed:f6:60:aa:c8:76:f4:4c:
e9:0a:e5:2f:70:3c:bf:68:cf:d8:bd:62:9a:de:c3:
7e:27:e9:38:cf:3f:6d:ef:a5:8c:a3:84:c3:73:8b:
a1:76:4f:ac:06:2a:16:b4:08:20:ce:c3:88:7e:05:
f3:a1:6d:ec:4b:e8:6e:d7:86:61:8f:81:55:5f:42:
49:0b:25:44:6b:15:44:c4:e1:53:3a:db:6e:bc:df:
da:39:2e:0c:15:fd:7c:15:be:2a:10:f5:17:a0:6b:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1A:A1:D1:59:6E:9D:CF:7F:8C:9C:EC:48:38:2D:8A:F6:7A:89:A2
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.166.80.0/21
Signature Algorithm: sha256WithRSAEncryption
98:ec:db:1d:9e:99:a9:30:b2:70:d9:f3:94:ed:ef:aa:34:3f:
f6:6c:91:9b:67:5e:a7:29:0e:eb:b2:55:25:6c:9b:65:94:ca:
7b:9b:a5:d5:55:13:49:50:8f:fe:bc:a3:f7:96:b0:fd:bb:fd:
cb:e6:e1:72:ad:bc:d9:a6:dd:d7:02:39:58:48:2c:03:e2:8e:
f3:ca:72:8c:a9:94:52:85:a0:b4:48:55:c0:d7:c2:1e:8d:ef:
0d:27:b9:4b:82:b5:6d:10:23:fc:e9:ef:7a:31:d0:18:4b:76:
23:be:c1:6c:13:d9:f0:f7:e7:c3:c0:16:5b:30:35:3c:84:30:
52:75:b9:64:fb:5c:62:71:17:53:a3:e2:d9:ad:89:a5:26:61:
f7:fa:d6:1e:44:c5:6a:c5:f2:12:e6:29:d0:0a:39:36:03:3c:
73:16:a0:00:aa:88:71:99:34:df:88:26:e0:5b:a3:19:04:91:
ad:3b:27:e9:52:4d:96:2e:63:0a:0e:d1:01:11:eb:b7:b5:fa:
a3:69:36:1a:e0:37:3c:54:88:80:dd:07:b1:bf:2a:a5:46:35:
c1:4f:e0:c7:64:f3:58:13:00:ba:08:df:b9:21:52:5d:9a:6a:
dd:62:f9:74:11:96:70:43:ee:ed:11:4f:ea:4f:bc:68:5c:bd:
3e:c6:61:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/t+1UXotlTCoqcEkK8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1
Y2IxN2UwHhcNMjUwMTAyMTM1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzFhYTFkMTU5NmU5ZGNmN2Y4YzljZWM0ODM4MmQ4YWY2N2E4OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn15olwyx2tnZKcl1Up7beAqMpAFX
fiW2QK7dfm4Pnnt1Gc4UJdKnN5YescvVdIfR35nl3/IZL2JhrzrwsZj4GnpaYncv
7OTpzBYSsOoxQ4GsNTgGoCkVfuMvTePHXCGrLqugQjk2E39eDEpZqmV62YUBkQKu
PWazEE5N6+whqqAzTZuNamhK/UcvlVvQnj9u17XN9Pj8lov77Gs/7fZgqsh29Ezp
CuUvcDy/aM/YvWKa3sN+J+k4zz9t76WMo4TDc4uhdk+sBioWtAggzsOIfgXzoW3s
S+hu14Zhj4FVX0JJCyVEaxVExOFTOttuvN/aOS4MFf18Fb4qEPUXoGtRpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKMaodFZbp3Pf4yc7Eg4LYr2eomiMB8GA1UdIwQY
MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct
NGQxNmJlOWJhMTMyLzEvb3hxaDBWbHVuYzlfakp6c1NEZ3Rpdlo2aWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy
LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU6ZQMA0G
CSqGSIb3DQEBCwUAA4IBAQCY7NsdnpmpMLJw2fOU7e+qND/2bJGbZ16nKQ7rslUl
bJtllMp7m6XVVRNJUI/+vKP3lrD9u/3L5uFyrbzZpt3XAjlYSCwD4o7zynKMqZRS
haC0SFXA18Ieje8NJ7lLgrVtECP86e96MdAYS3YjvsFsE9nw9+fDwBZbMDU8hDBS
dblk+1xicRdTo+LZrYmlJmH3+tYeRMVqxfIS5inQCjk2AzxzFqAAqohxmTTfiCbg
W6MZBJGtOyfpUk2WLmMKDtEBEeu3tfqjaTYa4Dc8VIiA3QexvyqlRjXBT+DHZPNY
EwC6CN+5IVJdmmrdYvl0EZZwQ+7tEU/qT7xoXL0+xmFi
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:48 2025 by rpki-client