Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa
File: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (raw, json)
Hash identifier: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=
Subject key identifier: D2:F0:CC:04:26:56:14:E2:A1:FA:AF:97:19:4C:2E:D8:9A:F7:CF:B6
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01942825A89F2A5BE5A5216386FA5C70A282
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa
Signing time: Thu 02 Jan 2025 17:52:24 +0000
ROA not before: Thu 02 Jan 2025 17:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4648
IP address blocks: 80.83.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a8:9f:2a:5b:e5:a5:21:63:86:fa:5c:70:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 17:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f0cc04265614e2a1faaf97194c2ed89af7cfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:d1:9f:d1:3b:86:4c:6e:ab:ab:43:33:28:
39:50:a8:4e:32:45:ef:15:c6:ef:7d:7f:5b:87:a7:
b9:09:18:2e:9b:95:94:93:c7:93:d4:41:b7:45:c6:
ad:68:fc:5b:9b:97:28:67:ef:33:09:19:74:d2:e8:
07:c7:47:24:5f:5c:a1:6b:cc:1d:3a:55:3d:81:e8:
a1:84:c4:7f:d8:c9:f0:8d:e6:e8:7d:23:c4:04:bb:
6f:09:7c:ae:9f:ed:3c:a2:7b:7a:94:74:b8:1f:43:
30:17:49:aa:ae:41:1f:4a:4a:da:16:99:e8:b1:2d:
f7:a1:44:9d:cd:26:b8:fc:85:39:f9:cc:76:54:dd:
21:98:3a:86:65:30:e9:3d:4c:fb:57:85:9c:46:9d:
74:54:63:a1:83:9f:e4:d8:19:81:19:07:cb:8e:e7:
de:d9:d7:5c:37:6b:01:7f:da:8b:20:03:a8:4f:90:
23:e8:c5:ed:7d:67:a8:60:85:ea:8e:a0:01:3a:a9:
ba:8f:b6:07:9d:57:1d:26:5b:0a:22:41:5b:b5:1a:
cb:65:0e:7d:28:96:70:e3:4b:86:63:6e:22:93:b2:
68:73:8e:62:e2:f3:a1:d7:24:40:83:80:66:5f:b3:
93:06:34:05:7a:36:19:ad:d3:ee:ac:ae:f2:3b:40:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:CC:04:26:56:14:E2:A1:FA:AF:97:19:4C:2E:D8:9A:F7:CF:B6
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.92.0/22
Signature Algorithm: sha256WithRSAEncryption
12:33:65:6e:98:61:a4:f9:57:12:20:4e:7e:2f:25:79:e8:05:
5c:6f:62:66:31:5e:56:23:53:16:4c:79:b8:d5:7e:87:ac:72:
ea:a7:6a:73:e6:2d:f4:5c:ca:86:94:f5:8f:6d:65:b2:aa:c8:
0b:98:76:39:54:c2:34:f1:a7:78:35:93:93:6d:47:73:5f:15:
38:c6:fb:91:c3:78:1a:0c:de:63:00:95:0d:55:66:16:d9:2f:
f3:ae:21:1e:97:06:5b:d6:6b:dd:da:f6:16:e3:81:3b:5c:d1:
52:be:53:dc:d9:b6:73:6d:8b:f1:e4:e4:8f:ec:aa:18:de:31:
85:7e:1e:f0:55:e7:48:d7:f0:a3:e8:d7:2f:f0:16:ab:79:2e:
d3:d8:f4:08:8a:95:24:9c:78:ee:77:8e:59:cb:88:6a:9f:a4:
aa:b4:7b:cb:6f:c5:d8:1e:fb:81:3a:b0:d3:3c:cb:8c:ff:b7:
a2:b1:af:88:cf:f0:ef:d5:07:98:93:4a:1c:f9:12:80:98:97:
fa:80:29:00:02:c0:0a:e2:e0:64:4b:ab:d2:93:79:38:09:6c:
a5:37:2c:b6:f8:7c:56:59:7d:64:09:a8:2d:b8:92:e4:61:09:
fb:d2:e0:b8:57:0b:8c:58:ec:ef:76:7f:30:60:38:8c:16:c1:
85:ab:31:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJaifKlvlpSFjhvpccKKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjUwMTAyMTc1MjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmYwY2MwNDI2NTYxNGUyYTFmYWFmOTcxOTRjMmVkODlhZjdjZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KXRn9E7hkxuq6tDMyg5UKhOMkXv
FcbvfX9bh6e5CRgum5WUk8eT1EG3RcataPxbm5coZ+8zCRl00ugHx0ckX1yha8wd
OlU9geihhMR/2MnwjebofSPEBLtvCXyun+08ont6lHS4H0MwF0mqrkEfSkraFpno
sS33oUSdzSa4/IU5+cx2VN0hmDqGZTDpPUz7V4WcRp10VGOhg5/k2BmBGQfLjufe
2ddcN2sBf9qLIAOoT5Aj6MXtfWeoYIXqjqABOqm6j7YHnVcdJlsKIkFbtRrLZQ59
KJZw40uGY24ik7Joc45i4vOh1yRAg4BmX7OTBjQFejYZrdPurK7yO0BIKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLwzAQmVhTiofqvlxlMLtia98+2MB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvMHZETUJDWldGT0toLXEtWEdVd3UySnIzejdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUFNcMA0G
CSqGSIb3DQEBCwUAA4IBAQASM2VumGGk+VcSIE5+LyV56AVcb2JmMV5WI1MWTHm4
1X6HrHLqp2pz5i30XMqGlPWPbWWyqsgLmHY5VMI08ad4NZOTbUdzXxU4xvuRw3ga
DN5jAJUNVWYW2S/zriEelwZb1mvd2vYW44E7XNFSvlPc2bZzbYvx5OSP7KoY3jGF
fh7wVedI1/Cj6Ncv8BareS7T2PQIipUknHjud45Zy4hqn6SqtHvLb8XYHvuBOrDT
PMuM/7eisa+Iz/Dv1QeYk0oc+RKAmJf6gCkAAsAK4uBkS6vSk3k4CWylNyy2+HxW
WX1kCagtuJLkYQn70uC4VwuMWOzvdn8wYDiMFsGFqzGY
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:25 2025 by rpki-client