Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/DYIFuct-2BnZ9wQ73g807IIiSi4.roa
File: DYIFuct-2BnZ9wQ73g807IIiSi4.roa (raw, json)
Hash identifier: YeaL3IRC1hsEqVtV32IrKDpaLIysaMpz7ERviZ/KWuI=
Subject key identifier: 0D:82:05:B9:CB:7E:D8:19:D9:F7:04:3B:DE:0F:34:EC:82:22:4A:2E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019542E203FB69F3255F3619A97C2EA9B374
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/DYIFuct-2BnZ9wQ73g807IIiSi4.roa
Signing time: Wed 26 Feb 2025 15:31:02 +0000
ROA not before: Wed 26 Feb 2025 15:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208091
IP address blocks: 80.66.76.0/24 maxlen: 24
80.66.88.0/24 maxlen: 24
87.251.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:e2:03:fb:69:f3:25:5f:36:19:a9:7c:2e:a9:b3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 26 15:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d8205b9cb7ed819d9f7043bde0f34ec82224a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:ee:66:f7:86:4f:f2:23:69:0d:55:9c:f4:
88:10:21:2b:b3:87:57:ac:dc:7e:83:37:45:6a:a1:
df:41:5b:7e:39:7e:cd:90:71:21:71:eb:f8:b0:c9:
2c:c0:17:c3:46:ed:b6:e5:46:02:72:06:af:0c:c4:
5a:e2:74:74:b3:1f:2a:c9:4c:78:6a:2b:9e:31:47:
5a:1b:a3:b2:0d:9e:1c:29:a7:fa:9e:01:e9:a4:dd:
68:c9:57:95:28:57:64:a3:b1:47:70:c3:30:12:d7:
31:92:e3:56:ca:90:94:87:33:78:24:52:3f:15:02:
a2:81:83:cb:6b:49:58:b2:ba:ac:81:8b:1b:22:97:
44:37:e0:43:98:e3:11:20:ea:51:01:cb:f0:c1:ac:
a7:ed:8a:8e:e2:83:43:2a:22:b2:a8:ec:69:c9:13:
57:b0:9c:44:8e:84:01:fa:cd:fb:fd:3c:45:13:5c:
b3:cd:67:2c:e5:28:05:e4:b8:52:fe:60:2f:96:73:
2f:ee:fa:06:f8:29:cd:48:69:15:d8:f2:f0:25:7d:
94:bc:4c:06:66:06:b2:b3:10:72:7a:8a:0a:da:be:
1c:4f:e8:e9:f5:87:00:f9:12:19:99:f4:b5:68:e7:
ac:56:ae:a2:45:cc:b3:ae:48:76:24:f4:42:74:d6:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:82:05:B9:CB:7E:D8:19:D9:F7:04:3B:DE:0F:34:EC:82:22:4A:2E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/DYIFuct-2BnZ9wQ73g807IIiSi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.76.0/24
80.66.88.0/24
87.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
26:77:29:47:6a:3c:73:5a:b9:99:fb:f5:03:df:75:c9:f6:a5:
90:3d:18:34:40:06:35:d3:c9:73:b8:93:dd:3e:10:94:0d:00:
d9:d0:8b:10:96:08:84:a1:84:0c:ed:f0:d0:a0:77:e8:30:80:
a2:16:fb:98:62:96:fb:58:b6:7e:e4:b4:d2:44:55:e7:a9:1c:
74:f9:d8:71:5f:2e:e4:a4:96:c9:71:97:ac:0c:04:0f:e0:f1:
ff:b4:c1:49:31:01:d6:3f:c9:a8:99:f3:e9:e3:bc:6a:c2:fa:
c9:f2:39:d3:31:cc:c4:d6:64:8d:33:c6:34:70:ae:bd:fd:ae:
b5:65:88:c2:23:11:e9:b8:e8:9e:22:a0:1c:f1:e7:2d:89:4f:
65:a5:6e:2e:9a:04:8f:72:f4:2d:9b:dc:85:f6:14:b0:eb:49:
a6:23:66:4b:76:de:ed:65:11:81:0f:82:69:7b:ae:4a:f5:1d:
4b:8c:af:ab:d6:00:be:70:82:41:5d:30:66:0f:3c:2c:cc:3a:
47:33:b5:57:a3:eb:54:dc:0c:08:29:f9:25:85:40:ad:21:5d:
f3:bc:9a:3a:36:7b:9a:7c:d8:76:91:8f:3f:8b:cd:19:02:17:
a9:d6:49:00:8e:f1:71:5b:5c:0d:58:69:9c:6f:52:1b:6b:72:
f9:45:41:b8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVC4gP7afMlXzYZqXwuqbN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjUwMjI2MTUzMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDgyMDViOWNiN2VkODE5ZDlmNzA0M2JkZTBmMzRlYzgyMjI0YTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZTuZveGT/IjaQ1VnPSIECErs4dX
rNx+gzdFaqHfQVt+OX7NkHEhcev4sMkswBfDRu225UYCcgavDMRa4nR0sx8qyUx4
aiueMUdaG6OyDZ4cKaf6ngHppN1oyVeVKFdko7FHcMMwEtcxkuNWypCUhzN4JFI/
FQKigYPLa0lYsrqsgYsbIpdEN+BDmOMRIOpRAcvwwayn7YqO4oNDKiKyqOxpyRNX
sJxEjoQB+s37/TxFE1yzzWcs5SgF5LhS/mAvlnMv7voG+CnNSGkV2PLwJX2UvEwG
ZgaysxByeooK2r4cT+jp9YcA+RIZmfS1aOesVq6iRcyzrkh2JPRCdNZ65wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA2CBbnLftgZ2fcEO94PNOyCIkouMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvRFlJRnVjdC0yQm5aOXdRNzNnODA3SUlpU2k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEJMAwQA
UEJYAwQAV/tLMA0GCSqGSIb3DQEBCwUAA4IBAQAmdylHajxzWrmZ+/UD33XJ9qWQ
PRg0QAY108lzuJPdPhCUDQDZ0IsQlgiEoYQM7fDQoHfoMICiFvuYYpb7WLZ+5LTS
RFXnqRx0+dhxXy7kpJbJcZesDAQP4PH/tMFJMQHWP8momfPp47xqwvrJ8jnTMczE
1mSNM8Y0cK69/a61ZYjCIxHpuOieIqAc8ectiU9lpW4umgSPcvQtm9yF9hSw60mm
I2ZLdt7tZRGBD4Jpe65K9R1LjK+r1gC+cIJBXTBmDzwszDpHM7VXo+tU3AwIKfkl
hUCtIV3zvJo6NnuafNh2kY8/i80ZAhep1kkAjvFxW1wNWGmcb1Iba3L5RUG4
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:15 2025 by rpki-client