Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/Dt3_ZkBEBRp0R0_CDkNOquu1bQM.roa
File: Dt3_ZkBEBRp0R0_CDkNOquu1bQM.roa (raw, json)
Hash identifier: uiOI0uk8eYds16+TqWf+6h0vN+dm+2r3lmxvhrKa8Qc=
Subject key identifier: 0E:DD:FF:66:40:44:05:1A:74:47:4F:C2:0E:43:4E:AA:EB:B5:6D:03
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019420D643EE271B5AC779717BE367794D6B
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/Dt3_ZkBEBRp0R0_CDkNOquu1bQM.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41652
IP address blocks: 45.80.0.0/22 maxlen: 22
193.26.14.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
2a0e:3780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:43:ee:27:1b:5a:c7:79:71:7b:e3:67:79:4d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eddff664044051a74474fc20e434eaaebb56d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:75:9a:3e:10:5b:45:05:d4:55:ae:70:c0:23:
ed:14:bd:45:ab:29:de:a0:67:21:ce:c4:0d:a8:cc:
92:87:d7:a0:7e:b5:13:a9:c2:54:3f:2e:0d:cc:c6:
8f:f4:68:de:e2:12:22:b8:31:fb:af:a5:f2:80:61:
55:3b:10:a6:ac:47:b1:bd:6d:46:fb:c9:ec:40:f6:
de:87:ff:a3:04:8b:83:df:f7:52:de:cb:8d:39:9b:
66:af:6c:6c:a2:48:a6:0d:e4:9e:da:44:ea:a1:fe:
ba:70:56:6e:c6:90:a6:1a:e1:0f:01:d2:6f:55:cf:
1e:95:f9:ed:16:43:63:45:32:30:32:57:92:aa:3d:
a3:fa:d5:0a:b9:2d:98:85:ca:70:5c:1e:08:ce:07:
aa:19:8d:3b:d7:d7:e1:c7:66:44:bb:d1:b6:7c:17:
83:cd:bb:7b:3e:ee:33:d3:8a:73:c0:a1:e2:04:c8:
6d:ce:46:85:6a:2f:8c:94:85:b8:63:35:33:fa:d7:
41:d4:e9:bc:c6:db:95:c0:79:38:5e:3f:a0:cc:53:
45:6b:70:b5:23:d6:bb:d4:8c:f0:d4:1c:e9:7b:d6:
ef:21:64:ef:70:17:9a:03:2f:f7:21:bb:35:f7:b1:
1c:a4:6b:3e:34:08:20:c3:c8:3d:de:75:40:af:f3:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:FF:66:40:44:05:1A:74:47:4F:C2:0E:43:4E:AA:EB:B5:6D:03
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/Dt3_ZkBEBRp0R0_CDkNOquu1bQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.0.0/22
193.26.14.0/24
193.26.21.0-193.26.22.255
IPv6:
2a0e:3780::/29
Signature Algorithm: sha256WithRSAEncryption
9c:6c:e9:3c:cd:18:2b:1c:bd:8d:31:86:00:a5:a8:5d:5c:17:
f1:c3:e6:8f:73:75:a3:b7:f5:f8:58:bd:6d:01:83:e9:c4:9d:
df:56:cd:ff:20:b3:55:bd:74:8f:96:f6:84:45:43:0b:e1:6b:
90:84:7f:b7:55:36:f4:09:53:72:32:2f:22:6a:07:6e:ec:0b:
20:2a:b3:8c:a6:d7:14:95:90:be:85:a4:52:45:d1:6a:49:c4:
ae:c5:ab:40:7c:06:ac:1e:f3:c1:31:bc:b5:b6:bf:70:98:da:
c4:4d:62:3a:da:68:fd:c0:d6:1b:bb:09:6c:36:26:7c:f8:c0:
ee:89:60:ef:ab:eb:7b:e1:f6:b9:7c:b6:50:61:59:f6:1c:0a:
5d:ca:7a:f7:29:45:44:ed:b8:79:ec:cd:42:5a:8b:aa:79:74:
cf:f6:b1:52:a5:c8:1e:a9:97:a5:ba:f1:f7:ca:17:79:1b:d5:
37:cf:9c:c6:6c:63:cc:2b:31:65:eb:a9:ca:9d:56:35:19:53:
36:e9:f8:6e:02:41:94:a3:a9:d9:cb:a5:ea:81:8e:6f:ac:33:
88:6d:b1:eb:d5:b4:f1:0c:69:07:02:c7:d1:cf:97:56:74:74:
e8:73:3a:a9:61:24:9e:10:86:a4:6c:37:91:1d:88:3c:07:c1:
cb:04:a2:e0
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQg1kPuJxtax3lxe+NneU1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw
MjhlOTEwHhcNMjUwMTAxMDc0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWRkZmY2NjQwNDQwNTFhNzQ0NzRmYzIwZTQzNGVhYWViYjU2ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nWaPhBbRQXUVa5wwCPtFL1Fqyne
oGchzsQNqMySh9egfrUTqcJUPy4NzMaP9Gje4hIiuDH7r6XygGFVOxCmrEexvW1G
+8nsQPbeh/+jBIuD3/dS3suNOZtmr2xsokimDeSe2kTqof66cFZuxpCmGuEPAdJv
Vc8elfntFkNjRTIwMleSqj2j+tUKuS2YhcpwXB4IzgeqGY0719fhx2ZEu9G2fBeD
zbt7Pu4z04pzwKHiBMhtzkaFai+MlIW4YzUz+tdB1Om8xtuVwHk4Xj+gzFNFa3C1
I9a71Izw1Bzpe9bvIWTvcBeaAy/3Ibs197EcpGs+NAggw8g93nVAr/OiuwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFA7d/2ZARAUadEdPwg5DTqrrtW0DMB8GA1UdIwQY
MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt
ODg1NGM4MmI1NDVkLzEvRHQzX1prQkVCUnAwUjBfQ0RrTk9xdXUxYlFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk
LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQCLVAAAwQA
wRoOMAwDBADBGhUDBADBGhYwDQQCAAIwBwMFAyoON4AwDQYJKoZIhvcNAQELBQAD
ggEBAJxs6TzNGCscvY0xhgClqF1cF/HD5o9zdaO39fhYvW0Bg+nEnd9Wzf8gs1W9
dI+W9oRFQwvha5CEf7dVNvQJU3IyLyJqB27sCyAqs4ym1xSVkL6FpFJF0WpJxK7F
q0B8Bqwe88ExvLW2v3CY2sRNYjraaP3A1hu7CWw2Jnz4wO6JYO+r63vh9rl8tlBh
WfYcCl3KevcpRUTtuHnszUJai6p5dM/2sVKlyB6pl6W68ffKF3kb1TfPnMZsY8wr
MWXrqcqdVjUZUzbp+G4CQZSjqdnLpeqBjm+sM4htsevVtPEMaQcCx9HPl1Z0dOhz
OqlhJJ4QhqRsN5EdiDwHwcsEouA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:43 2025 by rpki-client