Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/u8DCnmiwdvKh2XgFpOMuHJjylj4.roa
File: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (raw, json)
Hash identifier: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=
Subject key identifier: BB:C0:C2:9E:68:B0:76:F2:A1:D9:78:05:A4:E3:2E:1C:98:F2:96:3E
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 0194AC99C68D979CF6B0FCF0D46D8241C78C
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/u8DCnmiwdvKh2XgFpOMuHJjylj4.roa
Signing time: Tue 28 Jan 2025 11:09:06 +0000
ROA not before: Tue 28 Jan 2025 11:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200062
IP address blocks: 80.209.244.0/22 maxlen: 22
91.103.12.0/22 maxlen: 22
158.181.48.0/21 maxlen: 21
185.9.128.0/22 maxlen: 22
185.64.112.0/22 maxlen: 22
185.127.116.0/22 maxlen: 22
188.64.56.0/21 maxlen: 21
2a00:6140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:99:c6:8d:97:9c:f6:b0:fc:f0:d4:6d:82:41:c7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Jan 28 11:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbc0c29e68b076f2a1d97805a4e32e1c98f2963e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:80:2e:2c:af:ef:e9:65:c0:12:75:ce:30:
0f:96:38:aa:31:0b:19:56:07:04:39:5b:8b:13:c2:
6d:e4:ef:b7:ad:ac:48:31:9e:d3:42:70:f7:10:b5:
29:63:36:45:bd:af:60:40:0e:54:d7:6c:76:3e:36:
a9:9b:f4:28:9b:cf:f0:b7:7c:46:5f:c0:38:7d:eb:
8f:fc:fb:66:96:04:ff:9b:45:b3:61:f3:e4:5e:66:
7b:a7:74:eb:b8:89:da:fd:4d:dc:40:2a:9c:8b:e0:
12:07:93:b7:5b:3c:7c:1f:4b:10:3b:8f:33:80:9c:
7d:69:5f:ca:f1:97:f7:95:5f:57:71:fd:6c:4d:f8:
e5:eb:59:31:a3:3f:49:83:9a:5b:a7:da:62:62:3a:
81:7c:26:9a:9f:db:71:dc:d3:3f:7b:1b:dc:6e:0b:
82:de:74:b8:70:d9:8b:73:bd:08:0e:e4:b9:80:73:
9c:c5:d9:df:e6:a2:94:3c:84:5c:98:f9:56:32:88:
16:ca:6c:cb:e4:b7:06:ea:4f:33:85:ae:ba:df:38:
04:fb:81:ba:f5:9d:f2:c5:63:d5:ce:8f:3d:66:54:
8b:3e:de:9f:66:54:98:77:0d:18:73:97:52:91:5e:
ad:d9:93:44:1d:fc:5e:f3:18:1b:45:6d:f8:2a:dd:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C0:C2:9E:68:B0:76:F2:A1:D9:78:05:A4:E3:2E:1C:98:F2:96:3E
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/u8DCnmiwdvKh2XgFpOMuHJjylj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.209.244.0/22
91.103.12.0/22
158.181.48.0/21
185.9.128.0/22
185.64.112.0/22
185.127.116.0/22
188.64.56.0/21
IPv6:
2a00:6140::/32
Signature Algorithm: sha256WithRSAEncryption
7e:09:e7:07:04:e6:7d:7c:ac:1d:98:0e:f6:8b:7b:1a:2d:a3:
19:f5:1d:7f:e0:f3:aa:c9:82:3a:81:bc:c9:0a:65:e5:9d:6c:
bb:d6:e2:0a:6c:2a:f4:a7:a4:76:8a:2a:a5:43:6e:4e:38:94:
a2:b4:09:b1:ae:8b:d6:51:6f:81:b3:e8:94:af:69:7b:e4:ff:
3e:33:56:95:e8:e4:7c:85:76:6c:11:a6:dd:a6:46:5d:58:6c:
cd:0e:82:5c:9e:66:06:53:71:8b:c9:a9:3a:67:ec:95:8d:58:
57:72:88:c3:80:d5:60:90:20:73:2b:b0:8c:e2:33:ff:60:8d:
22:53:51:96:be:6d:e9:9a:70:73:8f:c7:bb:8b:08:13:eb:a2:
5c:18:36:a9:45:64:c8:46:46:ac:16:17:2d:5a:9b:bb:47:2e:
fa:e4:d2:12:a8:32:a8:2e:89:1c:0f:bf:e4:b5:62:8a:3a:a1:
38:f6:14:87:93:61:ae:26:9c:62:f8:b4:a4:91:47:de:c1:d4:
26:48:bf:29:01:ba:06:6b:1b:e6:c6:9e:91:36:a9:5d:04:c0:
c0:38:b8:95:7c:b3:6b:60:66:bf:11:22:94:18:af:c2:85:16:
1a:e6:45:5a:da:7a:a9:72:0c:97:dc:00:ac:9f:89:42:dd:77:
7e:74:b6:aa
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZSsmcaNl5z2sPzw1G2CQceMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZjZhNTdlYTJhOTAyZWI0OTEyZGU5MjdkZjgwMzA0YzM1
NWFiMTIwHhcNMjUwMTI4MTEwOTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmMwYzI5ZTY4YjA3NmYyYTFkOTc4MDVhNGUzMmUxYzk4ZjI5NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwaALiyv7+llwBJ1zjAPljiqMQsZ
VgcEOVuLE8Jt5O+3raxIMZ7TQnD3ELUpYzZFva9gQA5U12x2Pjapm/Qom8/wt3xG
X8A4feuP/PtmlgT/m0WzYfPkXmZ7p3TruIna/U3cQCqci+ASB5O3Wzx8H0sQO48z
gJx9aV/K8Zf3lV9Xcf1sTfjl61kxoz9Jg5pbp9piYjqBfCaan9tx3NM/exvcbguC
3nS4cNmLc70IDuS5gHOcxdnf5qKUPIRcmPlWMogWymzL5LcG6k8zha663zgE+4G6
9Z3yxWPVzo89ZlSLPt6fZlSYdw0Yc5dSkV6t2ZNEHfxe8xgbRW34Kt1H3wIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFLvAwp5osHbyodl4BaTjLhyY8pY+MB8GA1UdIwQY
MBaAFPP2pX6iqQLrSRLekn34AwTDVasSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMt
OTQwYzZiOGI1MDJhLzEvdThEQ25taXdkdktoMlhnRnBPTXVISmp5bGo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84YmYzODktODEzYy00OWJhLTg1MGMtOTQwYzZiOGI1MDJh
LzEvOF9hbGZxS3BBdXRKRXQ2U2ZmZ0RCTU5WcXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCUNH0AwQC
W2cMAwQDnrUwAwQCuQmAAwQCuUBwAwQCuX90AwQDvEA4MA0EAgACMAcDBQAqAGFA
MA0GCSqGSIb3DQEBCwUAA4IBAQB+CecHBOZ9fKwdmA72i3saLaMZ9R1/4POqyYI6
gbzJCmXlnWy71uIKbCr0p6R2iiqlQ25OOJSitAmxrovWUW+Bs+iUr2l75P8+M1aV
6OR8hXZsEabdpkZdWGzNDoJcnmYGU3GLyak6Z+yVjVhXcojDgNVgkCBzK7CM4jP/
YI0iU1GWvm3pmnBzj8e7iwgT66JcGDapRWTIRkasFhctWpu7Ry765NISqDKoLokc
D7/ktWKKOqE49hSHk2GuJpxi+LSkkUfewdQmSL8pAboGaxvmxp6RNqldBMDAOLiV
fLNrYGa/ESKUGK/ChRYa5kVa2nqpcgyX3ACsn4lC3Xd+dLaq
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:16 2025 by rpki-client