Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/6jjorFY8Pb7HVSQa1_oOW5Nqu1U.roa
File: 6jjorFY8Pb7HVSQa1_oOW5Nqu1U.roa (raw, json)
Hash identifier: Zc7y5i1RQ1Yd7VfMAmXXRhHU/VcHpFdmz3XWB9Gg4ew=
Subject key identifier: EA:38:E8:AC:56:3C:3D:BE:C7:55:24:1A:D7:FA:0E:5B:93:6A:BB:55
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018BAD619F503F88FF480A7DC7BDAB94D2AB
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/6jjorFY8Pb7HVSQa1_oOW5Nqu1U.roa
Signing time: Wed 08 Nov 2023 05:22:17 +0000
ROA not before: Wed 08 Nov 2023 05:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8331
IP address blocks: 195.54.192.0/19 maxlen: 19
80.90.240.0/20 maxlen: 20
80.90.252.0/24 maxlen: 24
80.90.250.0/24 maxlen: 24
195.54.198.0/24 maxlen: 24
195.54.195.0/24 maxlen: 24
195.54.196.0/24 maxlen: 24
80.90.254.0/24 maxlen: 24
195.54.202.0/24 maxlen: 24
195.54.202.0/23 maxlen: 23
195.54.203.0/24 maxlen: 24
86.62.105.0/24 maxlen: 24
86.62.64.0/24 maxlen: 24
86.62.64.0/18 maxlen: 18
80.90.240.0/24 maxlen: 24
195.91.128.0/17 maxlen: 17
2a00:14d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:61:9f:50:3f:88:ff:48:0a:7d:c7:bd:ab:94:d2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Nov 8 05:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea38e8ac563c3dbec755241ad7fa0e5b936abb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:33:ac:21:ab:4f:d9:d0:c3:18:58:71:e2:
65:5a:59:52:05:49:32:b2:08:c9:82:0d:3c:dd:7a:
d9:43:b5:99:40:94:fa:55:6e:65:e4:00:57:46:8a:
59:e7:68:31:2b:e5:eb:5a:46:8c:dd:06:c8:8c:d9:
f5:e8:0c:32:fe:30:7d:ac:5e:3a:09:42:a3:4b:3c:
af:d3:89:59:5d:b6:99:c1:fb:58:75:23:5e:cf:0b:
c8:ee:47:eb:b6:9e:66:c2:1d:9c:ea:2b:1d:0f:3d:
e5:01:4f:cf:21:e9:90:47:73:b4:8d:1b:74:d0:d6:
2e:0f:09:cb:22:1c:53:9a:8d:c5:b2:af:48:f9:a1:
62:89:92:0d:ae:12:87:ef:9a:b8:8d:6c:bd:22:e5:
f7:76:29:f9:e7:76:08:74:6c:82:38:86:66:ee:4e:
d7:2e:00:e1:47:14:2a:06:c2:06:58:43:e4:cd:05:
4d:ae:c0:91:81:1a:9d:09:f9:bd:20:f8:1d:5b:1a:
7a:d9:ae:9d:7e:31:d4:1f:a2:c0:b7:59:c8:10:a7:
8c:d6:4b:24:41:56:d9:43:d0:e5:5d:ff:0d:ef:bd:
14:38:29:5c:f1:dd:e2:ef:3e:92:b4:f3:65:c6:9c:
2e:ff:b1:44:2e:9a:fc:1b:a7:e5:05:31:ed:c4:f9:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:E8:AC:56:3C:3D:BE:C7:55:24:1A:D7:FA:0E:5B:93:6A:BB:55
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/6jjorFY8Pb7HVSQa1_oOW5Nqu1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.240.0/20
86.62.64.0/18
195.54.192.0/19
195.91.128.0/17
IPv6:
2a00:14d0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:b3:9a:d4:4c:77:21:83:cc:4c:2b:2f:03:89:10:97:24:f2:
58:7c:a4:a6:ff:5e:56:5f:25:e9:df:dd:95:a3:70:3f:41:0e:
73:fc:95:32:65:d5:13:05:b9:1b:2a:64:28:2f:cb:ae:ef:02:
bc:21:7f:b2:e5:0d:99:66:04:e6:1a:68:ab:e9:f8:6b:8e:5d:
4e:12:03:91:fc:dd:2a:79:b8:32:a3:08:14:7d:a3:ff:3d:9c:
58:d7:48:a7:16:04:b3:41:f4:44:8c:aa:fe:ec:39:31:65:a0:
82:74:d6:f3:40:2f:4f:3d:d9:47:9c:fa:3b:cf:bc:b6:ce:a1:
1b:12:c5:6e:37:0e:90:ce:de:5c:93:61:dc:b5:fb:bd:5b:2c:
4b:d1:a6:eb:5f:2f:a9:27:95:10:b2:d8:7c:a1:9c:f5:9a:37:
d1:6f:ad:29:36:35:de:22:c9:b0:92:74:5b:78:b2:1d:4c:8f:
ea:e0:9d:cf:c0:b6:15:49:f0:a7:c9:8c:6b:cc:12:12:90:fe:
94:a0:70:36:07:a0:7b:a5:ea:48:df:78:c3:e9:14:b9:2d:69:
09:c4:17:4e:0b:70:d6:24:d6:99:cd:42:06:61:6f:9a:84:72:
d2:d8:3b:1f:9b:36:f4:44:0e:78:0a:ee:40:1e:96:1a:df:80:
5a:94:ab:cf
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYutYZ9QP4j/SAp9x72rlNKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjMxMTA4MDUyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTM4ZThhYzU2M2MzZGJlYzc1NTI0MWFkN2ZhMGU1YjkzNmFiYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIQzrCGrT9nQwxhYceJlWllSBUky
sgjJgg083XrZQ7WZQJT6VW5l5ABXRopZ52gxK+XrWkaM3QbIjNn16Awy/jB9rF46
CUKjSzyv04lZXbaZwftYdSNezwvI7kfrtp5mwh2c6isdDz3lAU/PIemQR3O0jRt0
0NYuDwnLIhxTmo3Fsq9I+aFiiZINrhKH75q4jWy9IuX3din553YIdGyCOIZm7k7X
LgDhRxQqBsIGWEPkzQVNrsCRgRqdCfm9IPgdWxp62a6dfjHUH6LAt1nIEKeM1ksk
QVbZQ9DlXf8N770UOClc8d3i7z6StPNlxpwu/7FELpr8G6flBTHtxPkOqwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOo46KxWPD2+x1UkGtf6DluTartVMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvNmpqb3JGWThQYjdIVlNRYTFfb09XNU5xdTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUFrwAwQG
Vj5AAwQFwzbAAwQHw1uAMA0EAgACMAcDBQAqABTQMA0GCSqGSIb3DQEBCwUAA4IB
AQCis5rUTHchg8xMKy8DiRCXJPJYfKSm/15WXyXp392Vo3A/QQ5z/JUyZdUTBbkb
KmQoL8uu7wK8IX+y5Q2ZZgTmGmir6fhrjl1OEgOR/N0qebgyowgUfaP/PZxY10in
FgSzQfREjKr+7DkxZaCCdNbzQC9PPdlHnPo7z7y2zqEbEsVuNw6Qzt5ck2Hctfu9
WyxL0abrXy+pJ5UQsth8oZz1mjfRb60pNjXeIsmwknRbeLIdTI/q4J3PwLYVSfCn
yYxrzBISkP6UoHA2B6B7pepI33jD6RS5LWkJxBdOC3DWJNaZzUIGYW+ahHLS2Dsf
mzb0RA54Cu5AHpYa34BalKvP
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:52 2025 by rpki-client