Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/PZs9vVU-kQOQfjuSGWK8Veyjebs.roa
File: PZs9vVU-kQOQfjuSGWK8Veyjebs.roa (raw, json)
Hash identifier: Ex5pWflFGMN/nqA9fQXqwLhhlI/56Oq7RB+bzu6KvzI=
Subject key identifier: 3D:9B:3D:BD:55:3E:91:03:90:7E:3B:92:19:62:BC:55:EC:A3:79:BB
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 01864407D03099675B37034D75C1EAAC223F
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/PZs9vVU-kQOQfjuSGWK8Veyjebs.roa
Signing time: Sun 12 Feb 2023 05:10:07 +0000
ROA not before: Sun 12 Feb 2023 05:10:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25003
IP address blocks: 80.74.108.0/23 maxlen: 23
2a02:23b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:07:d0:30:99:67:5b:37:03:4d:75:c1:ea:ac:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 12 05:10:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d9b3dbd553e9103907e3b921962bc55eca379bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:71:2b:61:85:dd:5e:d7:b2:cd:6a:ac:81:
b1:8d:e4:d3:ba:ad:6d:8a:fd:0f:68:ca:5c:bd:33:
7c:c3:6a:ba:9e:78:04:d9:6a:44:68:4e:79:4c:7c:
27:c3:8c:b1:0f:dd:47:1f:55:2c:42:2d:74:fd:29:
68:2d:14:5c:87:11:56:17:13:98:9c:97:fc:f3:14:
6c:53:7d:35:51:5f:a6:aa:82:19:0c:07:00:b1:87:
4f:bf:04:2b:c1:0a:a5:52:50:07:b4:ad:52:56:11:
58:a0:b9:91:b6:5f:a3:96:eb:7d:06:23:a4:21:69:
a1:16:33:49:75:66:f5:1d:8e:a5:96:c4:f5:3e:c5:
80:75:92:87:0b:0f:b5:b7:29:e4:5c:80:6e:47:c6:
95:aa:a4:7f:fa:09:b5:30:97:55:43:3a:54:a6:ba:
97:31:bc:b3:1a:da:75:1a:ce:a2:9c:73:f9:8c:57:
c6:72:a6:b8:f5:3a:13:78:74:a1:d2:14:90:d0:bb:
a6:a4:52:5a:a2:59:eb:b9:95:bd:d9:1c:24:5b:8c:
ed:ae:b9:f5:61:19:d4:86:ae:fe:8c:27:1a:62:97:
8d:5c:f5:c9:cc:8c:a3:6a:d3:ef:02:d4:4a:6f:2e:
28:52:cc:54:86:f3:57:0c:68:98:da:c8:17:13:79:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:3D:BD:55:3E:91:03:90:7E:3B:92:19:62:BC:55:EC:A3:79:BB
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/PZs9vVU-kQOQfjuSGWK8Veyjebs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.108.0/23
IPv6:
2a02:23b8::/32
Signature Algorithm: sha256WithRSAEncryption
4e:98:61:14:56:40:a8:da:08:4d:e7:c0:5f:a0:e8:65:5e:5b:
fc:bb:0b:fc:ca:69:ac:fb:a0:46:52:71:59:05:01:c8:8c:64:
e3:d9:62:61:ca:45:c2:07:8a:ab:c0:29:8c:c2:a4:d1:85:36:
b9:cc:0f:57:5a:6f:b2:91:d3:68:dc:cb:f4:3d:64:0b:4a:93:
61:ca:e8:a0:a7:10:6c:3b:85:53:b4:12:32:2c:46:48:d3:07:
d2:c8:d0:8a:ac:81:01:ba:c3:a8:00:3e:50:0c:bd:7a:40:3a:
19:27:48:1a:2a:11:58:da:fe:06:06:98:5a:12:da:98:e9:ac:
c5:e5:bc:a2:9d:55:6c:fe:7d:ca:ff:f1:98:5d:fb:b3:08:f3:
6f:c1:69:26:14:02:5c:4c:f3:2b:c4:4c:da:83:93:a4:c6:99:
3d:57:6f:8b:d4:9f:b6:01:0e:52:13:30:e4:5e:36:02:01:8d:
21:d9:62:21:5f:54:b8:4f:23:7c:f9:a4:9b:11:76:07:dd:93:
8f:0b:cf:23:1a:99:87:1a:36:ba:23:d7:a9:c5:b8:ac:d1:41:
e8:cd:f5:9c:4f:7a:5d:df:b2:cf:71:cb:08:34:02:18:76:c3:
61:88:50:5d:df:88:b4:75:11:f7:55:f0:3a:b1:a5:1b:ad:d6:
be:9b:69:6a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYZEB9AwmWdbNwNNdcHqrCI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5
YTBkODYwHhcNMjMwMjEyMDUxMDA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDliM2RiZDU1M2U5MTAzOTA3ZTNiOTIxOTYyYmM1NWVjYTM3OWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4JxK2GF3V7Xss1qrIGxjeTTuq1t
iv0PaMpcvTN8w2q6nngE2WpEaE55THwnw4yxD91HH1UsQi10/SloLRRchxFWFxOY
nJf88xRsU301UV+mqoIZDAcAsYdPvwQrwQqlUlAHtK1SVhFYoLmRtl+jlut9BiOk
IWmhFjNJdWb1HY6llsT1PsWAdZKHCw+1tynkXIBuR8aVqqR/+gm1MJdVQzpUprqX
MbyzGtp1Gs6inHP5jFfGcqa49ToTeHSh0hSQ0LumpFJaolnruZW92RwkW4ztrrn1
YRnUhq7+jCcaYpeNXPXJzIyjatPvAtRKby4oUsxUhvNXDGiY2sgXE3nXOQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD2bPb1VPpEDkH47khlivFXso3m7MB8GA1UdIwQY
MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt
NDIxZTZiYzdlMmU4LzEvUFpzOXZWVS1rUU9RZmp1U0dXSzhWZXlqZWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4
LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBUEpsMA0E
AgACMAcDBQAqAiO4MA0GCSqGSIb3DQEBCwUAA4IBAQBOmGEUVkCo2ghN58BfoOhl
Xlv8uwv8ymms+6BGUnFZBQHIjGTj2WJhykXCB4qrwCmMwqTRhTa5zA9XWm+ykdNo
3Mv0PWQLSpNhyuigpxBsO4VTtBIyLEZI0wfSyNCKrIEBusOoAD5QDL16QDoZJ0ga
KhFY2v4GBphaEtqY6azF5byinVVs/n3K//GYXfuzCPNvwWkmFAJcTPMrxEzag5Ok
xpk9V2+L1J+2AQ5SEzDkXjYCAY0h2WIhX1S4TyN8+aSbEXYH3ZOPC88jGpmHGja6
I9epxbis0UHozfWcT3pd37LPccsINAIYdsNhiFBd34i0dRH3VfA6saUbrda+m2lq
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:47 2025 by rpki-client