Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/eL97ct3zq6TVsXqsm_lH3Bbmhag.roa
File: eL97ct3zq6TVsXqsm_lH3Bbmhag.roa (raw, json)
Hash identifier: lU3q1Bg78D4eXPO6TJ7nPcg82PdCzYKhbHO7kJienoQ=
Subject key identifier: 78:BF:7B:72:DD:F3:AB:A4:D5:B1:7A:AC:9B:F9:47:DC:16:E6:85:A8
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01942825AB35979BDA85D4C00A06260A2B5F
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/eL97ct3zq6TVsXqsm_lH3Bbmhag.roa
Signing time: Thu 02 Jan 2025 17:52:24 +0000
ROA not before: Thu 02 Jan 2025 17:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138997
IP address blocks: 80.83.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ab:35:97:9b:da:85:d4:c0:0a:06:26:0a:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 17:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78bf7b72ddf3aba4d5b17aac9bf947dc16e685a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:d0:a6:95:c4:e9:e8:01:8e:89:eb:a3:6c:
3e:c8:65:7c:69:40:64:9c:63:69:bf:d2:4c:1f:ff:
f4:7c:cb:cc:42:a0:39:24:5f:e4:0a:01:6c:c0:7f:
e2:42:a9:1d:e9:ad:3d:aa:06:92:ee:ea:c2:90:ef:
a5:48:c9:d4:63:f3:9a:f0:13:0d:1d:fb:e6:ac:85:
df:d4:98:d8:5e:fd:7d:4b:87:09:dc:0e:f8:ec:f2:
31:a4:d1:cf:f7:f0:07:99:0a:84:63:a9:8a:a6:c1:
c7:e7:58:6e:05:ff:c4:26:cd:c0:bb:d4:c0:c3:8c:
a8:b8:87:6c:2a:05:98:0e:69:d8:ea:00:8d:75:26:
ab:0e:e4:db:ef:00:f6:4c:00:c9:95:4a:43:6c:b2:
fe:21:cc:a9:74:4e:59:5d:32:cd:b9:49:76:de:57:
38:ad:57:74:7e:2c:72:75:de:2e:57:82:ee:1f:c1:
1f:ef:87:1b:c1:dd:0b:ab:c1:f0:3c:73:d9:da:d0:
59:6a:08:fc:50:da:46:1f:6b:fa:70:2e:70:10:9e:
69:ba:da:92:c6:eb:d0:6d:46:ad:6a:df:53:59:36:
1f:c5:82:8b:9f:73:12:19:64:8e:b0:b5:0c:da:d4:
68:5e:86:33:0d:6a:6d:e5:a6:ed:58:b6:c5:e1:ea:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:7B:72:DD:F3:AB:A4:D5:B1:7A:AC:9B:F9:47:DC:16:E6:85:A8
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/eL97ct3zq6TVsXqsm_lH3Bbmhag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.88.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:f7:3c:fe:20:04:6c:2e:e2:92:24:3d:1d:9d:b7:2b:45:0a:
e7:52:65:13:42:75:ec:72:e3:f1:bc:ad:97:aa:8d:66:34:4f:
b5:0d:da:f1:30:64:74:a9:95:29:b1:39:32:e7:97:65:0b:d0:
1f:11:1e:99:ff:0c:dd:d2:f0:3e:7a:12:7e:f0:42:fa:44:46:
e4:9e:d7:82:5a:e2:25:14:d2:25:c5:ec:6d:ba:c7:2f:88:74:
8a:ad:2e:85:4d:7e:c6:c4:c3:3f:ba:75:cc:87:4d:26:1c:24:
a2:1b:72:e6:3d:b4:c7:c8:22:25:46:11:47:28:28:08:43:df:
a0:0b:0d:0f:06:8e:3c:5f:a4:7b:ec:e8:89:94:38:b8:48:4f:
f1:73:69:70:b5:37:f9:32:21:5f:3d:7b:a0:ed:ac:1d:1b:03:
95:6c:90:07:93:7e:3f:6c:6d:39:e7:19:dd:51:d1:94:80:9d:
22:d2:65:ed:90:b0:a3:18:2f:c9:12:00:20:1c:e8:8a:b2:cb:
59:7d:d9:bb:93:61:11:5b:6a:c3:1b:21:78:af:12:3d:47:cf:
56:e0:ab:9d:65:cf:05:7c:f5:f0:3e:d4:da:e2:92:97:29:29:
4c:0d:72:a0:bf:fe:21:8d:f7:9d:5f:97:d3:57:43:68:b5:92:
44:3f:73:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJas1l5vahdTACgYmCitfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjUwMTAyMTc1MjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGJmN2I3MmRkZjNhYmE0ZDViMTdhYWM5YmY5NDdkYzE2ZTY4NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OjQppXE6egBjonro2w+yGV8aUBk
nGNpv9JMH//0fMvMQqA5JF/kCgFswH/iQqkd6a09qgaS7urCkO+lSMnUY/Oa8BMN
HfvmrIXf1JjYXv19S4cJ3A747PIxpNHP9/AHmQqEY6mKpsHH51huBf/EJs3Au9TA
w4youIdsKgWYDmnY6gCNdSarDuTb7wD2TADJlUpDbLL+IcypdE5ZXTLNuUl23lc4
rVd0fixydd4uV4LuH8Ef74cbwd0Lq8HwPHPZ2tBZagj8UNpGH2v6cC5wEJ5putqS
xuvQbUatat9TWTYfxYKLn3MSGWSOsLUM2tRoXoYzDWpt5abtWLbF4erSMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHi/e3Ld86uk1bF6rJv5R9wW5oWoMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvZUw5N2N0M3pxNlRWc1hxc21fbEgzQmJtaGFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUFNYMA0G
CSqGSIb3DQEBCwUAA4IBAQAb9zz+IARsLuKSJD0dnbcrRQrnUmUTQnXscuPxvK2X
qo1mNE+1DdrxMGR0qZUpsTky55dlC9AfER6Z/wzd0vA+ehJ+8EL6REbknteCWuIl
FNIlxextuscviHSKrS6FTX7GxMM/unXMh00mHCSiG3LmPbTHyCIlRhFHKCgIQ9+g
Cw0PBo48X6R77OiJlDi4SE/xc2lwtTf5MiFfPXug7awdGwOVbJAHk34/bG055xnd
UdGUgJ0i0mXtkLCjGC/JEgAgHOiKsstZfdm7k2ERW2rDGyF4rxI9R89W4KudZc8F
fPXwPtTa4pKXKSlMDXKgv/4hjfedX5fTV0NotZJEP3OO
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:48:58 2025 by rpki-client