Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uOz3ZPu9mkDRmESjWH5YDZkuQQs.roa
File: uOz3ZPu9mkDRmESjWH5YDZkuQQs.roa (raw, json)
Hash identifier: YaTIWASEPmWDAICPUIETldUitxkMREiMSzeczjEss3M=
Subject key identifier: B8:EC:F7:64:FB:BD:9A:40:D1:98:44:A3:58:7E:58:0D:99:2E:41:0B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F94EE1EA4F334DD5635D7FAA44DD4
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uOz3ZPu9mkDRmESjWH5YDZkuQQs.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50089
IP address blocks: 80.242.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:94:ee:1e:a4:f3:34:dd:56:35:d7:fa:a4:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8ecf764fbbd9a40d19844a3587e580d992e410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8e:35:f3:35:29:75:65:85:35:fa:a2:f3:f4:
96:9e:cb:34:ee:03:5a:b7:56:2c:70:70:c2:4c:61:
de:97:57:fc:5c:57:f8:21:c8:83:00:7a:ec:b3:4c:
a0:c7:f7:3a:44:3e:87:1b:91:67:e0:5d:81:fb:a2:
f6:10:a7:35:dd:fc:ff:a9:12:fe:e3:f5:ae:9e:c2:
a5:fa:23:ec:4d:4c:86:c8:88:64:9d:dc:1f:c0:94:
06:92:b2:b9:a7:39:b1:5f:fa:87:86:fb:a3:f0:08:
81:4f:86:64:ac:4f:9d:5b:10:33:2c:c6:22:51:0c:
99:d0:e8:de:09:9e:6c:a2:53:8f:fc:46:ac:2b:17:
e7:ef:df:b5:15:d9:c9:d0:ec:63:cf:86:72:9d:91:
19:14:4b:d6:70:bc:12:48:7a:ee:36:46:af:9a:21:
40:24:70:6d:1a:e8:55:3d:60:82:d0:ec:95:b8:18:
f2:77:76:0e:0e:75:f3:ee:2f:fc:ad:69:dc:29:13:
9c:73:af:f3:e5:a5:a8:3d:b8:b6:27:dc:78:43:4b:
0a:9a:fd:b7:17:dd:56:ca:0f:18:8c:28:66:38:a1:
98:0f:52:b0:c7:9a:0f:49:5f:03:c6:19:56:99:86:
8c:6c:04:d9:c3:61:d2:06:54:ad:3c:d9:10:01:b6:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EC:F7:64:FB:BD:9A:40:D1:98:44:A3:58:7E:58:0D:99:2E:41:0B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/uOz3ZPu9mkDRmESjWH5YDZkuQQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.60.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c4:75:4b:75:72:d6:d8:22:97:7f:a4:e3:9f:6f:96:f3:06:
88:75:aa:96:b6:63:fb:e5:62:ad:81:08:78:e7:45:d0:ee:48:
01:ba:59:ff:ff:ee:80:a9:3b:5d:17:0b:f7:ef:b4:9a:1d:b6:
17:99:bd:20:06:91:10:20:45:eb:10:d2:06:ae:80:24:80:2e:
e3:b2:de:70:20:1a:0c:2f:99:ac:11:8e:0a:05:dc:66:6f:a3:
95:01:7a:4b:9d:c2:8d:25:df:13:61:41:88:b3:4b:be:90:1f:
9a:19:91:ca:5a:e5:04:1d:3a:69:ad:ce:5c:e6:ca:65:8f:63:
ca:1d:59:61:98:3b:c0:ca:ef:03:4c:ba:72:f2:88:d2:36:13:
c3:fa:0a:8a:24:29:80:8a:d8:58:db:09:08:37:7b:f6:ad:f2:
7d:56:98:a4:db:b9:80:f3:b2:61:34:06:fb:ae:5a:a2:79:91:
78:e2:2f:85:7b:cb:6e:15:c5:ca:c3:35:c7:4f:e7:25:12:69:
6d:b3:47:d8:99:5e:24:c8:9f:ce:f1:c6:68:0f:c7:bd:38:e2:
c8:6c:fc:f6:9f:94:1b:6e:97:bc:e4:9a:e2:b2:37:6e:ec:1e:
50:c7:56:03:62:ac:ee:8b:69:45:92:66:1a:89:f3:44:2e:1f:
0d:a8:cb:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5TuHqTzNN1WNdf6pE3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGVjZjc2NGZiYmQ5YTQwZDE5ODQ0YTM1ODdlNTgwZDk5MmU0MTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio418zUpdWWFNfqi8/SWnss07gNa
t1YscHDCTGHel1f8XFf4IciDAHrss0ygx/c6RD6HG5Fn4F2B+6L2EKc13fz/qRL+
4/WunsKl+iPsTUyGyIhkndwfwJQGkrK5pzmxX/qHhvuj8AiBT4ZkrE+dWxAzLMYi
UQyZ0OjeCZ5solOP/EasKxfn79+1FdnJ0Oxjz4ZynZEZFEvWcLwSSHruNkavmiFA
JHBtGuhVPWCC0OyVuBjyd3YODnXz7i/8rWncKROcc6/z5aWoPbi2J9x4Q0sKmv23
F91Wyg8YjChmOKGYD1Kwx5oPSV8DxhlWmYaMbATZw2HSBlStPNkQAbZRpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjs92T7vZpA0ZhEo1h+WA2ZLkELMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvdU96M1pQdTlta0RSbUVTaldINVlEWmt1UVFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPI8MA0G
CSqGSIb3DQEBCwUAA4IBAQCVxHVLdXLW2CKXf6Tjn2+W8waIdaqWtmP75WKtgQh4
50XQ7kgBuln//+6AqTtdFwv377SaHbYXmb0gBpEQIEXrENIGroAkgC7jst5wIBoM
L5msEY4KBdxmb6OVAXpLncKNJd8TYUGIs0u+kB+aGZHKWuUEHTpprc5c5splj2PK
HVlhmDvAyu8DTLpy8ojSNhPD+gqKJCmAithY2wkIN3v2rfJ9Vpik27mA87JhNAb7
rlqieZF44i+Fe8tuFcXKwzXHT+clEmlts0fYmV4kyJ/O8cZoD8e9OOLIbPz2n5Qb
bpe85Jrisjdu7B5Qx1YDYqzui2lFkmYaifNELh8NqMur
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:35:39 2025 by rpki-client