Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/BZv8sGCcNALUX5pRivC_EjiidAY.roa
File: BZv8sGCcNALUX5pRivC_EjiidAY.roa (raw, json)
Hash identifier: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=
Subject key identifier: 05:9B:FC:B0:60:9C:34:02:D4:5F:9A:51:8A:F0:BF:12:38:A2:74:06
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019426D9C961E6477796D785F35065FE4FB1
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/BZv8sGCcNALUX5pRivC_EjiidAY.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201073
IP address blocks: 82.80.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c9:61:e6:47:77:96:d7:85:f3:50:65:fe:4f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=059bfcb0609c3402d45f9a518af0bf1238a27406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:14:fa:db:52:eb:2e:02:3d:2d:e9:eb:b5:
62:61:05:37:ff:50:d0:2f:b8:7d:ed:f9:2f:6c:51:
75:ff:33:44:de:a4:d8:b8:66:3e:42:8d:d7:73:7a:
98:68:53:4e:b9:13:22:ae:6c:59:35:02:9d:f7:7e:
df:35:07:22:f8:a9:38:6c:b4:0f:b3:e0:45:6f:86:
0d:aa:2f:ff:d6:bf:0a:0f:45:b5:b6:a1:65:ad:85:
da:33:40:c5:43:8c:72:ed:d9:80:17:68:6a:23:e5:
a6:4d:af:23:0e:4d:77:46:99:57:04:c0:fd:02:25:
49:e2:fb:06:d0:7f:5c:09:24:f0:e6:90:86:25:21:
b6:ac:ab:68:51:26:3b:cd:af:a4:f2:cd:de:e5:e1:
43:e8:5a:85:66:84:aa:cc:8b:87:b9:ef:82:fa:72:
eb:ba:f8:b5:8b:ad:c9:42:e0:32:68:64:a2:16:d9:
6a:21:92:90:86:c0:58:93:2b:27:14:b0:6f:8c:1d:
ac:14:4d:70:99:32:fb:af:28:28:e8:4c:2d:b1:4f:
78:10:01:96:14:19:ed:84:59:08:7c:2f:e8:24:8f:
c5:46:b5:2b:fa:b1:5e:59:54:24:b2:e6:fc:aa:11:
b4:60:51:97:74:01:d2:6b:2e:7b:7a:62:ee:7c:f1:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9B:FC:B0:60:9C:34:02:D4:5F:9A:51:8A:F0:BF:12:38:A2:74:06
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/BZv8sGCcNALUX5pRivC_EjiidAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.80.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b9:7f:4e:b2:93:c2:e8:18:a7:2c:2e:15:5a:1f:b0:9f:4b:
6c:62:1c:9a:35:57:d2:37:9a:a6:5e:10:2d:4f:3d:21:dd:8c:
3a:e6:0b:b1:f0:a5:4a:a2:00:c1:8f:eb:d6:d5:c2:ce:5d:99:
6a:28:d5:f7:81:be:28:05:26:77:34:7e:0a:a4:b8:fb:94:5a:
7a:a2:61:f7:ed:5b:4c:ab:4f:b7:2a:7c:5e:8e:be:fe:34:d3:
68:1a:06:40:9a:87:70:cd:72:c1:70:67:83:c2:7c:5d:aa:52:
92:a2:ab:d4:27:f0:a4:cf:f6:26:b9:e3:c0:f1:06:61:e5:4b:
3d:fe:3a:47:29:9d:96:24:16:25:26:3f:c1:ef:2c:ff:e6:fc:
2b:f4:af:fe:0f:f7:03:19:82:62:86:0f:a0:6e:e4:ca:5a:ad:
9a:25:13:de:5a:f6:af:e0:5b:30:11:46:a2:2d:9e:90:19:e6:
1f:88:71:ed:ab:67:3e:2b:f4:d8:7f:1e:b0:cc:1b:57:58:21:
43:1e:6e:6b:ce:81:7e:e6:38:a0:e9:03:95:02:02:8a:1a:2e:
9a:19:cd:25:39:c6:71:17:47:f6:46:ec:b6:a0:47:c3:5c:0a:
29:8e:85:85:e9:90:b6:9d:68:38:39:4b:f8:45:93:ec:b1:23:
28:2c:21:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2clh5kd3lteF81Bl/k+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjUwMTAyMTE0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTliZmNiMDYwOWMzNDAyZDQ1ZjlhNTE4YWYwYmYxMjM4YTI3NDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dIU+ttS6y4CPS3p67ViYQU3/1DQ
L7h97fkvbFF1/zNE3qTYuGY+Qo3Xc3qYaFNOuRMirmxZNQKd937fNQci+Kk4bLQP
s+BFb4YNqi//1r8KD0W1tqFlrYXaM0DFQ4xy7dmAF2hqI+WmTa8jDk13RplXBMD9
AiVJ4vsG0H9cCSTw5pCGJSG2rKtoUSY7za+k8s3e5eFD6FqFZoSqzIuHue+C+nLr
uvi1i63JQuAyaGSiFtlqIZKQhsBYkysnFLBvjB2sFE1wmTL7rygo6EwtsU94EAGW
FBnthFkIfC/oJI/FRrUr+rFeWVQksub8qhG0YFGXdAHSay57emLufPGLiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAWb/LBgnDQC1F+aUYrwvxI4onQGMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvQlp2OHNHQ2NOQUxVWDVwUml2Q19FamlpZEFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUlANMA0G
CSqGSIb3DQEBCwUAA4IBAQCbuX9OspPC6BinLC4VWh+wn0tsYhyaNVfSN5qmXhAt
Tz0h3Yw65gux8KVKogDBj+vW1cLOXZlqKNX3gb4oBSZ3NH4KpLj7lFp6omH37VtM
q0+3Knxejr7+NNNoGgZAmodwzXLBcGeDwnxdqlKSoqvUJ/Ckz/YmuePA8QZh5Us9
/jpHKZ2WJBYlJj/B7yz/5vwr9K/+D/cDGYJihg+gbuTKWq2aJRPeWvav4FswEUai
LZ6QGeYfiHHtq2c+K/TYfx6wzBtXWCFDHm5rzoF+5jig6QOVAgKKGi6aGc0lOcZx
F0f2Ruy2oEfDXAopjoWF6ZC2nWg4OUv4RZPssSMoLCGd
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:42 2025 by rpki-client