Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa
File: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (raw, json)
Hash identifier: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=
Subject key identifier: 57:FF:B2:7E:A5:C3:DF:14:B3:BB:10:6E:4E:54:D4:D6:B5:6F:33:62
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 01942826FA797788469177D0B55ABEE8DDB2
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa
Signing time: Thu 02 Jan 2025 17:53:50 +0000
ROA not before: Thu 02 Jan 2025 17:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15659
IP address blocks: 80.202.0.0/16 maxlen: 16
84.48.0.0/18 maxlen: 18
84.49.128.0/17 maxlen: 17
89.10.0.0/16 maxlen: 16
89.11.0.0/17 maxlen: 17
213.145.160.0/19 maxlen: 19
213.187.160.0/19 maxlen: 19
213.187.190.0/24 maxlen: 24
217.13.0.0/19 maxlen: 19
2a04:980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:fa:79:77:88:46:91:77:d0:b5:5a:be:e8:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Jan 2 17:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ffb27ea5c3df14b3bb106e4e54d4d6b56f3362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:df:f2:58:0b:d4:28:ee:c6:4c:09:71:60:2e:
2b:78:94:de:59:03:96:25:02:ba:8b:6e:92:0d:d9:
73:ea:71:99:b3:cf:4d:1f:c3:dd:0b:97:a4:98:bd:
6c:31:3e:98:2f:2c:66:ae:02:8d:63:16:4c:0e:3d:
3c:c0:44:ee:08:e4:d3:a3:a7:d7:46:bc:42:ec:ec:
0e:a1:9d:b3:b0:d2:dc:a4:b9:38:7a:23:06:86:e9:
f5:97:47:ee:9c:83:ab:d2:9c:7e:e6:a6:d1:79:83:
03:12:ae:3e:6d:02:ca:01:22:7b:2e:4e:8a:9e:9b:
b4:08:65:71:22:13:a3:65:f0:30:c2:99:1e:f1:56:
e4:0b:ed:fa:4a:77:72:55:e1:fe:11:96:c6:b0:f1:
91:0c:0a:d4:32:1e:d6:b2:ba:4e:ec:08:d5:19:7f:
a5:76:85:84:af:2d:7e:dc:46:33:75:0e:4b:ca:a5:
f5:a2:41:cf:9c:11:70:73:b4:ae:5b:70:69:52:b8:
1a:39:31:64:94:ac:32:15:58:15:e8:fe:37:b9:bc:
a8:b7:66:65:7e:64:d8:5c:26:f5:55:73:f9:4e:13:
64:e6:c0:27:14:19:27:34:85:a3:ab:d8:89:ea:d9:
5a:fc:a9:0c:df:8c:c1:24:f9:d4:e1:34:fb:14:85:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FF:B2:7E:A5:C3:DF:14:B3:BB:10:6E:4E:54:D4:D6:B5:6F:33:62
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.202.0.0/16
84.48.0.0/18
84.49.128.0/17
89.10.0.0-89.11.127.255
213.145.160.0/19
213.187.160.0/19
217.13.0.0/19
IPv6:
2a04:980::/29
Signature Algorithm: sha256WithRSAEncryption
67:b8:d4:34:d3:84:fd:5e:69:74:42:f8:5e:88:ce:fb:77:6e:
5f:26:d1:a4:a3:90:e5:94:8b:12:d0:57:67:52:c7:4c:af:65:
73:3d:72:76:50:82:10:41:77:5a:28:4d:aa:2a:45:71:66:15:
d2:07:ac:3d:c7:be:bc:96:45:16:f8:35:d2:9b:88:80:ab:4c:
dd:e1:32:c8:02:35:4b:9a:17:c3:01:6a:12:fd:97:54:92:6b:
76:2d:29:27:63:87:e6:33:3b:25:e6:48:32:33:26:2e:6d:df:
5a:87:97:8d:3a:f1:af:2b:16:5f:14:0f:9d:c0:bb:39:a5:c1:
1b:ac:5d:26:e7:06:f1:44:63:d5:28:d3:84:71:42:fa:e0:0f:
06:e1:23:13:e0:de:32:d1:e6:65:f5:f6:5e:1f:85:9a:9e:7a:
46:9f:6a:f0:8f:7c:cc:8f:9b:61:86:b9:db:7a:80:ec:67:f7:
5c:5d:fc:72:00:e1:bb:2f:fc:1b:03:a7:d6:ee:93:a2:47:62:
94:ae:53:62:f9:ec:cd:71:f3:d6:0d:1d:6c:e7:d8:cd:00:47:
9f:93:05:7a:7e:20:75:ad:1a:ac:3c:8b:ac:3f:50:55:ca:25:
de:80:a8:98:d1:07:54:93:69:72:c7:81:8c:f6:29:79:a4:76:
94:9f:c8:bd
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZQoJvp5d4hGkXfQtVq+6N2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjUwMTAyMTc1MzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2ZmYjI3ZWE1YzNkZjE0YjNiYjEwNmU0ZTU0ZDRkNmI1NmYzMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9d/yWAvUKO7GTAlxYC4reJTeWQOW
JQK6i26SDdlz6nGZs89NH8PdC5ekmL1sMT6YLyxmrgKNYxZMDj08wETuCOTTo6fX
RrxC7OwOoZ2zsNLcpLk4eiMGhun1l0funIOr0px+5qbReYMDEq4+bQLKASJ7Lk6K
npu0CGVxIhOjZfAwwpke8VbkC+36SndyVeH+EZbGsPGRDArUMh7WsrpO7AjVGX+l
doWEry1+3EYzdQ5LyqX1okHPnBFwc7SuW3BpUrgaOTFklKwyFVgV6P43ubyot2Zl
fmTYXCb1VXP5ThNk5sAnFBknNIWjq9iJ6tla/KkM34zBJPnU4TT7FIU3XwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFFf/sn6lw98Us7sQbk5U1Na1bzNiMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEvVl8teWZxWEQzeFN6dXhCdVRsVFUxclZ2TTJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwMAUMoDBAZU
MAADBAdUMYAwCwMDAVkKAwQHWQsAAwQF1ZGgAwQF1bugAwQF2Q0AMA0EAgACMAcD
BQMqBAmAMA0GCSqGSIb3DQEBCwUAA4IBAQBnuNQ004T9Xml0QvheiM77d25fJtGk
o5DllIsS0FdnUsdMr2VzPXJ2UIIQQXdaKE2qKkVxZhXSB6w9x768lkUW+DXSm4iA
q0zd4TLIAjVLmhfDAWoS/ZdUkmt2LSknY4fmMzsl5kgyMyYubd9ah5eNOvGvKxZf
FA+dwLs5pcEbrF0m5wbxRGPVKNOEcUL64A8G4SMT4N4y0eZl9fZeH4WannpGn2rw
j3zMj5thhrnbeoDsZ/dcXfxyAOG7L/wbA6fW7pOiR2KUrlNi+ezNcfPWDR1s59jN
AEefkwV6fiB1rRqsPIusP1BVyiXegKiY0QdUk2lyx4GM9il5pHaUn8i9
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:35 2025 by rpki-client