Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa
File: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (raw, json)
Hash identifier: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=
Subject key identifier: 3A:A4:9D:C8:36:61:E8:DA:8E:F3:EE:CD:F6:DE:F4:45:D8:3B:3F:F7
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019426D97BA38B9FA75F17F90E8909A2972B
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20751
IP address blocks: 80.64.128.0/21 maxlen: 21
80.64.131.0/24 maxlen: 24
80.64.136.0/22 maxlen: 22
83.216.208.0/20 maxlen: 20
83.216.208.0/21 maxlen: 21
83.216.216.0/22 maxlen: 22
83.216.220.0/22 maxlen: 22
185.136.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7b:a3:8b:9f:a7:5f:17:f9:0e:89:09:a2:97:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3aa49dc83661e8da8ef3eecdf6def445d83b3ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:f1:88:a9:19:16:f7:47:cc:c3:42:ba:dd:
40:62:8d:86:66:ee:c1:d8:fa:25:46:9b:20:98:d2:
e3:aa:10:61:d0:16:00:de:84:57:c6:67:78:7d:77:
6a:8c:10:0b:94:05:27:30:9c:7c:96:e4:c6:a9:32:
48:bc:e9:f5:b9:2d:20:68:3b:f6:96:c6:40:db:78:
71:43:b3:b4:2e:10:54:fa:6a:a4:40:bf:7e:4f:f8:
95:8a:d4:0d:f9:86:c1:14:63:e2:eb:c3:6d:0c:03:
ba:ff:54:20:d8:5b:58:cd:5e:d6:c0:cb:ab:88:b6:
6f:23:2f:9d:3d:dd:d4:5a:71:04:b8:40:a6:1e:13:
22:e7:96:e3:0a:8d:6a:84:f2:9d:8a:ec:06:b0:8a:
5d:34:2a:7f:fe:66:3d:71:10:c0:87:67:46:59:ee:
c8:7b:8a:a5:e8:32:aa:5f:6b:22:f4:21:e8:ce:95:
df:e0:a5:4f:59:51:80:54:a1:d7:d8:c4:57:b4:d0:
c9:b3:8c:5f:78:ec:c2:9b:b0:85:3f:51:a3:08:8f:
8d:98:07:6f:67:ee:39:4f:01:6a:26:6e:2a:70:3b:
e8:39:33:77:cf:5c:3c:9c:b4:57:89:1c:56:5c:15:
33:3b:fd:1b:93:40:da:d5:0f:1a:a6:50:fc:c0:83:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:9D:C8:36:61:E8:DA:8E:F3:EE:CD:F6:DE:F4:45:D8:3B:3F:F7
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.128.0-80.64.139.255
83.216.208.0/20
185.136.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:3b:28:d1:87:37:20:70:da:23:ca:f0:c1:f8:3f:0c:a5:7f:
6e:55:14:85:44:86:c7:3b:8a:b2:32:87:0c:c4:c9:be:b4:7a:
d4:3e:c5:af:35:9e:9f:c4:b1:40:80:cc:0a:0f:5b:ba:fe:53:
0a:d0:22:3d:7b:c1:48:05:21:60:3a:98:1b:e9:4c:17:48:d4:
e8:63:2a:84:80:67:0b:b6:a9:e7:99:21:5a:2c:0c:e1:8c:68:
05:02:dd:52:26:5c:5a:3d:a8:6c:96:97:36:88:79:1d:f7:b2:
a1:16:76:cc:be:ef:09:60:8c:a5:01:c0:7d:79:50:0d:d1:a9:
b3:f0:54:22:d7:67:e8:1f:11:77:9f:6f:2b:34:e5:ed:ae:9e:
ac:f5:ec:e8:c8:e2:c8:33:59:25:bb:cf:be:1d:7d:b1:53:33:
1c:5c:5a:66:12:74:bd:96:cd:f7:ba:a5:84:6a:09:30:7d:f4:
d2:0c:2d:12:b6:12:f5:f4:f4:f2:77:50:c5:34:54:79:c6:07:
c6:f6:a8:00:04:06:6f:51:1c:ef:a0:0b:b4:01:61:f3:cf:50:
d3:2e:2e:ae:b6:e4:9e:7f:02:6e:66:6a:93:6d:b4:19:94:ea:
91:98:df:53:40:2b:c8:94:d3:3d:61:61:fd:9a:2e:52:53:b1:
b4:29:c7:88
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQm2Xuji5+nXxf5DokJopcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjUwMTAyMTE0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWE0OWRjODM2NjFlOGRhOGVmM2VlY2RmNmRlZjQ0NWQ4M2IzZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSzxiKkZFvdHzMNCut1AYo2GZu7B
2PolRpsgmNLjqhBh0BYA3oRXxmd4fXdqjBALlAUnMJx8luTGqTJIvOn1uS0gaDv2
lsZA23hxQ7O0LhBU+mqkQL9+T/iVitQN+YbBFGPi68NtDAO6/1Qg2FtYzV7WwMur
iLZvIy+dPd3UWnEEuECmHhMi55bjCo1qhPKdiuwGsIpdNCp//mY9cRDAh2dGWe7I
e4ql6DKqX2si9CHozpXf4KVPWVGAVKHX2MRXtNDJs4xfeOzCm7CFP1GjCI+NmAdv
Z+45TwFqJm4qcDvoOTN3z1w8nLRXiRxWXBUzO/0bk0Da1Q8aplD8wIOA0wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDqkncg2YejajvPuzfbe9EXYOz/3MB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvT3FTZHlEWmg2TnFPOC03Tjl0NzBSZGc3UF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAdQQIAD
BAJQQIgDBART2NADBAK5iNQwDQYJKoZIhvcNAQELBQADggEBAEo7KNGHNyBw2iPK
8MH4Pwylf25VFIVEhsc7irIyhwzEyb60etQ+xa81np/EsUCAzAoPW7r+UwrQIj17
wUgFIWA6mBvpTBdI1OhjKoSAZwu2qeeZIVosDOGMaAUC3VImXFo9qGyWlzaIeR33
sqEWdsy+7wlgjKUBwH15UA3RqbPwVCLXZ+gfEXefbys05e2unqz17OjI4sgzWSW7
z74dfbFTMxxcWmYSdL2Wzfe6pYRqCTB99NIMLRK2EvX09PJ3UMU0VHnGB8b2qAAE
Bm9RHO+gC7QBYfPPUNMuLq625J5/Am5mapNttBmU6pGY31NAK8iU0z1hYf2aLlJT
sbQpx4g=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:44 2025 by rpki-client