Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/b8jz-r7vQjjddqF3VDNwuYawYD8.roa
File: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (raw, json)
Hash identifier: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=
Subject key identifier: 6F:C8:F3:FA:BE:EF:42:38:DD:76:A1:77:54:33:70:B9:86:B0:60:3F
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 0194244487D6AC473533BF184C928D5B2938
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/b8jz-r7vQjjddqF3VDNwuYawYD8.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198551
IP address blocks: 130.93.180.0/22 maxlen: 22
130.93.184.0/22 maxlen: 22
130.93.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:87:d6:ac:47:35:33:bf:18:4c:92:8d:5b:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fc8f3fabeef4238dd76a177543370b986b0603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:0f:d9:41:e6:d3:5d:0d:4f:f4:1b:f2:9a:
32:1b:2c:ef:8c:ed:2d:8d:e9:ca:ce:ae:72:c4:48:
2d:1d:90:d1:b6:83:60:18:2f:17:1e:42:fc:5f:7c:
39:98:14:ec:57:21:c7:35:8e:1c:5d:b5:71:47:b0:
1c:ec:7d:6a:c8:a4:ae:af:91:ab:96:1f:00:e2:f2:
50:ed:e3:51:0d:f2:ff:7d:2b:cc:4e:32:27:ba:98:
59:5a:fa:8d:fa:95:22:57:c2:ca:8a:24:28:3f:d9:
ef:6e:45:00:18:76:70:91:91:5f:86:82:cc:a8:69:
6b:44:ba:36:ca:db:3a:26:10:1d:1b:73:eb:67:4b:
38:64:bb:f8:88:ab:b5:16:2a:49:75:49:cf:e3:d2:
f2:00:5c:d1:49:06:0f:27:f5:ad:6b:ef:89:6e:5c:
05:59:79:19:f6:4d:6f:ce:4a:9b:18:d3:00:32:ba:
60:27:5b:fb:72:da:cd:55:49:ae:23:7a:2b:99:37:
7f:03:ce:32:f3:48:7f:a9:cc:ac:7b:1a:f6:0e:7f:
18:1f:93:14:be:a1:8e:fc:e0:e2:14:0f:1e:cf:88:
8e:41:b8:aa:88:32:5d:64:d2:4e:d3:1a:60:e1:6a:
30:65:d8:b1:45:e8:92:24:85:7a:6b:f3:bd:6a:db:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C8:F3:FA:BE:EF:42:38:DD:76:A1:77:54:33:70:B9:86:B0:60:3F
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/b8jz-r7vQjjddqF3VDNwuYawYD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.93.180.0-130.93.191.255
Signature Algorithm: sha256WithRSAEncryption
37:e1:4c:fe:24:e8:82:fe:f3:ec:44:5a:3a:0f:f6:e7:c6:7f:
98:92:ba:79:eb:de:d8:57:fc:a9:1e:4a:87:5b:a6:86:e2:46:
22:1a:6a:5d:4a:eb:0c:23:ee:ad:ac:2d:17:cd:9b:96:3c:eb:
eb:b5:f3:87:da:9f:36:77:cf:fd:33:57:5a:f7:38:ca:a7:65:
b6:6d:69:fa:28:e5:2a:ea:71:ca:58:19:b6:d3:80:79:30:9e:
72:90:16:11:6b:b4:31:85:8a:73:33:85:1e:96:f9:cf:b2:d0:
3e:de:ae:98:45:72:4c:8d:3e:e6:a7:b6:29:bf:5b:b6:40:b9:
1f:83:e1:14:bf:26:da:9a:fa:4d:11:49:8e:aa:7b:c1:16:28:
a8:0f:fa:2f:ce:38:b9:55:c9:c7:28:dd:73:0b:b3:c9:38:50:
6b:73:e5:3b:8c:61:51:9d:af:6d:79:ec:e3:a3:4a:99:dd:35:
79:51:e6:d7:74:c2:42:03:1d:90:16:a6:28:aa:cb:06:5c:0a:
ea:99:63:c3:dd:5a:f8:11:00:6f:b1:d8:88:43:13:93:bc:46:
bf:d4:91:14:ab:d7:d0:1f:6a:87:3d:01:8e:aa:4f:54:61:a5:
28:45:58:e3:ac:0c:47:da:0b:67:c9:01:32:4a:e4:f5:98:96:
4a:cd:9d:23
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQkRIfWrEc1M78YTJKNWyk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw
NjcyMDgwHhcNMjUwMTAxMjM0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmM4ZjNmYWJlZWY0MjM4ZGQ3NmExNzc1NDMzNzBiOTg2YjA2MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTAP2UHm010NT/Qb8poyGyzvjO0t
jenKzq5yxEgtHZDRtoNgGC8XHkL8X3w5mBTsVyHHNY4cXbVxR7Ac7H1qyKSur5Gr
lh8A4vJQ7eNRDfL/fSvMTjInuphZWvqN+pUiV8LKiiQoP9nvbkUAGHZwkZFfhoLM
qGlrRLo2yts6JhAdG3PrZ0s4ZLv4iKu1FipJdUnP49LyAFzRSQYPJ/Wta++JblwF
WXkZ9k1vzkqbGNMAMrpgJ1v7ctrNVUmuI3ormTd/A84y80h/qcysexr2Dn8YH5MU
vqGO/ODiFA8ez4iOQbiqiDJdZNJO0xpg4WowZdixReiSJIV6a/O9atu7HwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG/I8/q+70I43Xahd1QzcLmGsGA/MB8GA1UdIwQY
MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt
YmM1NGIxMjExYjYwLzEvYjhqei1yN3ZRampkZHFGM1ZETnd1WWF3WUQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw
LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKCXbQD
BAaCXYAwDQYJKoZIhvcNAQELBQADggEBADfhTP4k6IL+8+xEWjoP9ufGf5iSunnr
3thX/KkeSodbpobiRiIaal1K6wwj7q2sLRfNm5Y86+u184fanzZ3z/0zV1r3OMqn
ZbZtafoo5SrqccpYGbbTgHkwnnKQFhFrtDGFinMzhR6W+c+y0D7erphFckyNPuan
tim/W7ZAuR+D4RS/Jtqa+k0RSY6qe8EWKKgP+i/OOLlVycco3XMLs8k4UGtz5TuM
YVGdr2157OOjSpndNXlR5td0wkIDHZAWpiiqywZcCuqZY8PdWvgRAG+x2IhDE5O8
Rr/UkRSr19Afaoc9AY6qT1RhpShFWOOsDEfaC2fJATJK5PWYlkrNnSM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:35 2025 by rpki-client