Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa
File: yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa (raw, json)
Hash identifier: e8Eyw72rq0/GtFG8y5QenGef6gli7tTz0dJgGjM7CME=
Subject key identifier: C9:A0:47:86:09:6E:A4:66:1D:FC:9D:97:CB:57:56:FB:D0:60:EA:09
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C71B6A8CA866DB104212CEA3B8AAC
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60944
IP address blocks: 80.90.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:b6:a8:ca:86:6d:b1:04:21:2c:ea:3b:8a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9a04786096ea4661dfc9d97cb5756fbd060ea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:00:33:5e:a1:66:f0:55:18:57:92:3d:8a:
f8:19:5a:45:21:ea:f9:cf:42:c6:b2:d8:7b:e0:26:
8f:ab:2b:85:e5:5d:ab:79:6d:95:cc:8d:08:55:5f:
99:67:72:f9:7c:24:26:d5:90:6c:29:c9:03:27:7d:
c1:ad:8c:fb:42:5b:fb:26:82:f9:30:fa:86:a0:97:
d7:3e:61:ac:8b:4a:39:17:fa:9d:32:69:54:fb:78:
03:1d:9a:01:0a:84:36:f1:7f:56:bf:eb:a4:c9:a0:
96:e3:04:b3:0e:81:67:ba:73:98:9c:65:b9:01:36:
be:ca:b6:5b:c3:8d:0a:95:9e:13:87:a5:7c:be:d8:
8d:d9:4f:94:a5:a7:74:f1:98:a6:b4:4b:3f:78:a2:
5b:a2:74:1d:8a:62:50:48:f8:02:d5:41:41:f7:99:
38:4c:80:24:fe:0a:86:ec:4c:3b:db:79:4f:f2:9a:
ed:a1:cf:12:ca:4f:57:97:3e:48:4d:ba:97:84:f5:
46:43:ed:e4:ba:c7:ab:4e:9a:38:3c:5c:66:17:c8:
58:61:2a:53:ab:86:d6:47:7b:6c:f0:d3:bb:28:56:
f1:56:d9:3b:1e:73:8c:72:a1:3a:e1:4f:0e:20:ee:
4e:e8:ab:10:8f:43:10:37:63:d7:c9:9a:4c:03:3f:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:47:86:09:6E:A4:66:1D:FC:9D:97:CB:57:56:FB:D0:60:EA:09
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/yaBHhglupGYd_J2Xy1dW-9Bg6gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d0:a9:19:6a:43:19:e3:e2:4e:53:e0:91:33:a0:05:3e:7f:
1b:1c:dc:22:6e:30:bc:9d:03:10:02:b6:a6:61:48:32:6b:bd:
b3:19:53:09:a1:a8:aa:fa:8c:04:78:d9:ae:11:ee:36:89:c4:
d3:7f:7a:e8:77:98:91:65:42:b5:bf:19:5c:9a:61:41:e9:5b:
cf:55:69:5f:7e:37:5a:77:af:e4:97:0f:60:05:24:73:35:80:
19:54:cf:71:eb:7a:d9:fa:7b:be:40:6f:bb:63:be:66:b9:05:
c2:d1:3a:4a:0f:6f:cc:f7:8f:ac:91:e5:26:f3:9f:5c:e2:e4:
ea:77:7e:c4:fd:f4:ea:e5:66:29:9b:fd:bb:3b:7f:6b:81:c6:
cd:e2:27:e3:78:3b:af:c9:16:36:29:cb:41:30:7d:58:1e:3e:
61:9e:81:3e:2d:59:38:b4:9a:d3:7e:5b:fe:ac:ae:e5:83:fa:
9b:4d:2b:20:fc:57:44:b9:7f:be:11:f4:83:16:4a:fe:22:4c:
8e:b8:4b:8f:92:7d:53:71:e5:1e:1a:87:c7:36:67:64:0a:0e:
04:82:25:9b:92:e7:3b:6a:fa:af:2d:f7:49:d4:14:19:10:e3:
fa:13:d6:95:5f:9c:58:18:a7:cc:b4:1d:2f:44:d7:f4:b4:19:
63:35:d8:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjHG2qMqGbbEEISzqO4qsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWEwNDc4NjA5NmVhNDY2MWRmYzlkOTdjYjU3NTZmYmQwNjBlYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bwAM16hZvBVGFeSPYr4GVpFIer5
z0LGsth74CaPqyuF5V2reW2VzI0IVV+ZZ3L5fCQm1ZBsKckDJ33BrYz7Qlv7JoL5
MPqGoJfXPmGsi0o5F/qdMmlU+3gDHZoBCoQ28X9Wv+ukyaCW4wSzDoFnunOYnGW5
ATa+yrZbw40KlZ4Th6V8vtiN2U+Upad08ZimtEs/eKJbonQdimJQSPgC1UFB95k4
TIAk/gqG7Ew723lP8prtoc8Syk9Xlz5ITbqXhPVGQ+3kuserTpo4PFxmF8hYYSpT
q4bWR3ts8NO7KFbxVtk7HnOMcqE64U8OIO5O6KsQj0MQN2PXyZpMAz+OywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMmgR4YJbqRmHfydl8tXVvvQYOoJMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEveWFCSGhnbHVwR1lkX0oyWHkxZFctOUJnNmdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFrzMA0G
CSqGSIb3DQEBCwUAA4IBAQDF0KkZakMZ4+JOU+CRM6AFPn8bHNwibjC8nQMQAram
YUgya72zGVMJoaiq+owEeNmuEe42icTTf3rod5iRZUK1vxlcmmFB6VvPVWlffjda
d6/klw9gBSRzNYAZVM9x63rZ+nu+QG+7Y75muQXC0TpKD2/M94+skeUm859c4uTq
d37E/fTq5WYpm/27O39rgcbN4ifjeDuvyRY2KctBMH1YHj5hnoE+LVk4tJrTflv+
rK7lg/qbTSsg/FdEuX++EfSDFkr+IkyOuEuPkn1TceUeGofHNmdkCg4EgiWbkuc7
avqvLfdJ1BQZEOP6E9aVX5xYGKfMtB0vRNf0tBljNdiU
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:47 2025 by rpki-client