Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/_SYNXIvjdO9xuUnpTOnDFvL_jQM.roa
File: _SYNXIvjdO9xuUnpTOnDFvL_jQM.roa (raw, json)
Hash identifier: oikaIEjNfswzEXNeUei5c7vTRmHaWJDpA7/8rXnSDJY=
Subject key identifier: FD:26:0D:5C:8B:E3:74:EF:71:B9:49:E9:4C:E9:C3:16:F2:FF:8D:03
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 01889B468D8906BB8B1832D618AEA6844AED
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/_SYNXIvjdO9xuUnpTOnDFvL_jQM.roa
Signing time: Thu 08 Jun 2023 13:51:12 +0000
ROA not before: Thu 08 Jun 2023 13:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 80.91.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:46:8d:89:06:bb:8b:18:32:d6:18:ae:a6:84:4a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: Jun 8 13:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd260d5c8be374ef71b949e94ce9c316f2ff8d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:a6:cd:e4:f0:4a:24:c6:b3:a4:54:b3:2c:
16:b8:41:5b:72:38:79:78:a1:97:d0:1f:15:e3:dd:
ea:63:20:83:bf:64:e6:f9:b1:d8:46:1f:f1:f5:33:
00:bb:78:e6:79:c0:cd:56:cf:1a:3d:51:3d:0f:a5:
b9:65:a7:8d:de:bd:2f:b7:4c:8b:ba:c7:d0:b2:df:
e7:7e:90:05:ed:91:3d:99:31:cb:b7:c1:84:cc:c6:
b4:53:2a:cd:81:32:e8:78:4d:38:24:76:1c:7e:9e:
8d:10:b8:bd:7f:31:ac:7a:b4:a5:87:b5:07:78:66:
31:8c:91:19:1d:f8:c3:91:48:4d:3f:ca:a3:af:0a:
19:85:0b:94:0f:d9:d8:5a:08:bd:61:62:3b:0d:c0:
30:ee:3b:12:3f:e8:83:69:b2:9e:62:5d:39:d1:80:
22:05:2c:64:28:25:f2:63:52:60:3d:81:ca:8c:ad:
fe:c8:ef:60:ee:1f:12:67:04:54:54:03:37:f6:a8:
cd:4b:1d:cd:c0:72:df:ab:54:97:b4:fe:2c:99:62:
c7:a7:2f:c0:86:df:49:9a:6d:e1:54:fb:82:45:c6:
16:b9:c1:56:59:f2:03:18:a2:70:fc:74:da:c1:d5:
1a:d8:15:11:c7:ce:59:78:bc:2f:e4:a4:90:8c:df:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:26:0D:5C:8B:E3:74:EF:71:B9:49:E9:4C:E9:C3:16:F2:FF:8D:03
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/_SYNXIvjdO9xuUnpTOnDFvL_jQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9f:e4:a6:0f:54:4e:02:92:5d:53:21:b9:0f:43:76:a7:14:
83:7e:cb:77:e7:42:a8:29:29:8a:aa:48:f6:7a:1b:fa:20:e3:
52:b0:56:22:59:2d:c6:8c:f7:8e:6c:cf:26:17:e8:f0:1a:25:
16:1f:32:c4:4d:e3:57:d7:81:a8:f3:80:96:91:e3:1a:3c:c7:
dd:0e:d2:ac:c8:62:01:9a:0a:29:21:a1:a1:b9:76:5c:ec:ad:
91:b1:eb:34:26:c0:a3:8c:c0:cf:7d:15:9f:04:70:9d:40:bc:
54:a3:7e:61:b1:c8:d0:da:a2:cc:59:33:b3:43:f0:5c:eb:9d:
88:9e:4a:cb:11:ad:f4:ff:05:a1:ab:ba:78:21:32:75:ab:31:
83:77:45:52:bf:85:8f:ab:6d:02:55:43:1a:bf:a1:4f:43:40:
51:20:90:84:c0:40:8f:9f:8f:92:c6:14:4c:85:a3:41:fd:9a:
ab:ba:28:0d:be:c8:b3:f5:bd:7a:04:38:86:a0:13:a1:55:fb:
4a:3c:41:e0:8c:10:2c:fd:e5:3b:ec:f6:fe:fa:51:5a:ef:89:
a7:b8:1b:70:8d:15:cb:1f:c6:e7:a1:fd:5b:bc:3f:37:f6:36:
94:4d:7e:b2:f5:7d:dd:e1:7d:30:4b:99:3a:d9:1e:a6:aa:ca:
df:a6:68:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYibRo2JBruLGDLWGK6mhErtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMWY0NjgxZThjN2U3OTZkMWJjNWFkOTg2NzA1ZDk5OGE4
YWQ0ZWYwHhcNMjMwNjA4MTM1MTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDI2MGQ1YzhiZTM3NGVmNzFiOTQ5ZTk0Y2U5YzMxNmYyZmY4ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqmzeTwSiTGs6RUsywWuEFbcjh5
eKGX0B8V493qYyCDv2Tm+bHYRh/x9TMAu3jmecDNVs8aPVE9D6W5ZaeN3r0vt0yL
usfQst/nfpAF7ZE9mTHLt8GEzMa0UyrNgTLoeE04JHYcfp6NELi9fzGserSlh7UH
eGYxjJEZHfjDkUhNP8qjrwoZhQuUD9nYWgi9YWI7DcAw7jsSP+iDabKeYl050YAi
BSxkKCXyY1JgPYHKjK3+yO9g7h8SZwRUVAM39qjNSx3NwHLfq1SXtP4smWLHpy/A
ht9Jmm3hVPuCRcYWucFWWfIDGKJw/HTawdUa2BURx85ZeLwv5KSQjN8FuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP0mDVyL43TvcblJ6Uzpwxby/40DMB8GA1UdIwQY
MBaAFGwfRoHox+eW0bxa2YZwXZmKitTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkI5R2dlakg1NWJSdkZyWmhuQmRtWXFLMU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNjI4MzItZTlmYi00ZjM2LWIyMDYt
MDI3YmQ3M2E1MTA0LzEvX1NZTlhJdmpkTzl4dVVucFRPbkRGdkxfalFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xNjI4MzItZTlmYi00ZjM2LWIyMDYtMDI3YmQ3M2E1MTA0
LzEvYkI5R2dlakg1NWJSdkZyWmhuQmRtWXFLMU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFvdMA0G
CSqGSIb3DQEBCwUAA4IBAQCUn+SmD1ROApJdUyG5D0N2pxSDfst350KoKSmKqkj2
ehv6IONSsFYiWS3GjPeObM8mF+jwGiUWHzLETeNX14Go84CWkeMaPMfdDtKsyGIB
mgopIaGhuXZc7K2Rses0JsCjjMDPfRWfBHCdQLxUo35hscjQ2qLMWTOzQ/Bc652I
nkrLEa30/wWhq7p4ITJ1qzGDd0VSv4WPq20CVUMav6FPQ0BRIJCEwECPn4+SxhRM
haNB/ZqruigNvsiz9b16BDiGoBOhVftKPEHgjBAs/eU77Pb++lFa74mnuBtwjRXL
H8bnof1bvD839jaUTX6y9X3d4X0wS5k62R6mqsrfpmiD
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:14 2025 by rpki-client