Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/G515026DKfgBNHAqQpq-0B-szRA.roa
File: G515026DKfgBNHAqQpq-0B-szRA.roa (raw, json)
Hash identifier: Eoh2cGv6H0J4hg27jJ62ooZ9us9UUYNi3UX50aazNqY=
Subject key identifier: 1B:9D:79:D3:6E:83:29:F8:01:34:70:2A:42:9A:BE:D0:1F:AC:CD:10
Certificate issuer: /CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Certificate serial: 0186605A03FF759C623E9862BDEBAC653A04
Authority key identifier: D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/G515026DKfgBNHAqQpq-0B-szRA.roa
Signing time: Fri 17 Feb 2023 17:09:17 +0000
ROA not before: Fri 17 Feb 2023 17:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 80.208.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:5a:03:ff:75:9c:62:3e:98:62:bd:eb:ac:65:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Validity
Not Before: Feb 17 17:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b9d79d36e8329f80134702a429abed01faccd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:3a:e7:e6:c6:a9:ec:43:73:58:ee:a5:ff:
75:73:ea:8a:e9:7b:4e:8d:de:fd:0f:d8:36:11:16:
b9:ad:f0:76:58:e6:62:8d:1b:ea:b5:e1:49:86:f8:
e7:69:fa:30:8c:f1:70:48:81:4b:5b:42:0c:d9:a4:
65:30:d2:9b:35:58:6c:14:48:a8:46:25:61:9b:cb:
b7:5a:2d:72:9d:d3:8d:80:ad:08:f4:74:e7:bc:01:
af:40:c2:ee:0b:e3:45:45:6a:4c:38:f9:86:5c:e0:
81:1f:c5:48:98:db:4d:b1:27:d5:16:08:f0:64:31:
cf:bc:0e:7a:84:a0:d6:21:fa:6f:4e:06:72:d0:75:
43:3f:05:cd:5e:7f:80:75:34:63:3c:97:9f:1a:5f:
84:5c:f9:99:9f:9a:71:1c:e1:ee:5a:55:1a:71:79:
ca:4a:c7:3a:f5:02:50:b9:e5:6f:f0:86:00:47:51:
0d:47:53:43:7d:5d:f2:0c:07:a3:f6:b0:a9:f9:3e:
80:16:e1:0d:81:2e:ab:2b:a3:af:52:15:5d:3d:3f:
29:82:13:4b:40:79:f7:52:7e:74:07:2b:81:bb:e2:
f7:60:fa:fe:b8:0a:8e:5f:ae:34:4d:57:80:db:e1:
f1:7c:74:e2:43:4d:e3:01:9a:a7:52:84:fe:96:d4:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:79:D3:6E:83:29:F8:01:34:70:2A:42:9A:BE:D0:1F:AC:CD:10
X509v3 Authority Key Identifier:
keyid:D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/G515026DKfgBNHAqQpq-0B-szRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.208.221.0/24
Signature Algorithm: sha256WithRSAEncryption
51:eb:2a:78:9d:3c:f9:07:64:44:dd:6b:a6:25:18:55:73:cf:
05:03:e5:d9:ea:ac:b6:70:49:42:2f:8e:9f:b1:a7:ed:20:ee:
f0:8e:eb:11:a2:ea:35:b5:31:83:51:51:ee:ab:fb:49:06:be:
1a:5a:f0:ff:a1:9b:0e:0b:e6:4e:d7:7b:23:83:ea:f5:9c:00:
0f:09:a9:05:e2:eb:53:e8:77:26:fc:77:1b:38:fe:00:20:f5:
69:0d:59:af:20:e6:66:c9:33:66:82:2a:0a:01:8e:57:b3:fa:
48:61:f5:8e:e8:89:08:45:60:51:0f:a1:99:cb:27:03:bb:8a:
9c:bb:c6:46:ec:97:75:6a:3c:a4:cb:ef:3f:e1:ec:36:34:58:
c5:a1:37:f6:50:1e:f7:6a:32:18:b1:2b:27:7e:76:c9:70:f7:
11:8e:76:d5:75:02:2b:8b:05:d0:6f:d7:7c:60:b0:84:3a:fa:
f1:2d:3b:49:3b:e7:f1:79:13:a3:f2:ab:0b:1e:46:76:12:3c:
1e:5d:5b:df:bd:08:03:39:f3:c9:9e:76:66:49:42:b0:4d:94:
28:a9:ab:66:6d:4e:c7:5a:d1:44:e7:dd:6a:ee:3a:08:9b:a5:
68:55:a7:60:cc:4d:3d:c1:d7:c5:8d:8b:51:71:48:f7:e9:9d:
00:7c:c9:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZgWgP/dZxiPphiveusZToEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODFhNjI3MDE3ZDFhMDZjZWRkMGI0OGU0ZmM2ZmNmZjU4
NmRkOTQwHhcNMjMwMjE3MTcwOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjlkNzlkMzZlODMyOWY4MDEzNDcwMmE0MjlhYmVkMDFmYWNjZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP865+bGqexDc1jupf91c+qK6XtO
jd79D9g2ERa5rfB2WOZijRvqteFJhvjnafowjPFwSIFLW0IM2aRlMNKbNVhsFEio
RiVhm8u3Wi1yndONgK0I9HTnvAGvQMLuC+NFRWpMOPmGXOCBH8VImNtNsSfVFgjw
ZDHPvA56hKDWIfpvTgZy0HVDPwXNXn+AdTRjPJefGl+EXPmZn5pxHOHuWlUacXnK
Ssc69QJQueVv8IYAR1ENR1NDfV3yDAej9rCp+T6AFuENgS6rK6OvUhVdPT8pghNL
QHn3Un50ByuBu+L3YPr+uAqOX640TVeA2+HxfHTiQ03jAZqnUoT+ltSd5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBudedNugyn4ATRwKkKavtAfrM0QMB8GA1UdIwQY
MBaAFNSBpicBfRoGzt0LSOT8b8/1ht2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlHbUp3RjlHZ2JPM1F0STVQeHZ6X1dHM1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mZjYzZDgtZmVjYS00M2NkLTkwNGQt
NzJiMzJkOTUxOTUzLzEvRzUxNTAyNkRLZmdCTkhBcVFwcS0wQi1zelJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mZjYzZDgtZmVjYS00M2NkLTkwNGQtNzJiMzJkOTUxOTUz
LzEvMUlHbUp3RjlHZ2JPM1F0STVQeHZ6X1dHM1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUNDdMA0G
CSqGSIb3DQEBCwUAA4IBAQBR6yp4nTz5B2RE3WumJRhVc88FA+XZ6qy2cElCL46f
saftIO7wjusRouo1tTGDUVHuq/tJBr4aWvD/oZsOC+ZO13sjg+r1nAAPCakF4utT
6Hcm/HcbOP4AIPVpDVmvIOZmyTNmgioKAY5Xs/pIYfWO6IkIRWBRD6GZyycDu4qc
u8ZG7Jd1ajyky+8/4ew2NFjFoTf2UB73ajIYsSsnfnbJcPcRjnbVdQIriwXQb9d8
YLCEOvrxLTtJO+fxeROj8qsLHkZ2EjweXVvfvQgDOfPJnnZmSUKwTZQoqatmbU7H
WtFE591q7joIm6VoVadgzE09wdfFjYtRcUj36Z0AfMnB
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:27 2025 by rpki-client