Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/V30JXSTwCvMQbqRFqhemlITS5yI.roa
File: V30JXSTwCvMQbqRFqhemlITS5yI.roa (raw, json)
Hash identifier: MiIdeWVjQ/VodXANph+J9yQekOJ2MrUPBDNctMB5WZg=
Subject key identifier: 57:7D:09:5D:24:F0:0A:F3:10:6E:A4:45:AA:17:A6:94:84:D2:E7:22
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 019427B553F59BC7F5320AEACDCFFB487DC4
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/V30JXSTwCvMQbqRFqhemlITS5yI.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214722
IP address blocks: 80.73.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:53:f5:9b:c7:f5:32:0a:ea:cd:cf:fb:48:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=577d095d24f00af3106ea445aa17a69484d2e722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:04:60:1c:ff:64:e7:51:7c:d1:89:91:f0:
4f:f4:1d:db:91:fa:82:d9:14:3d:c3:e1:2b:95:78:
07:47:f2:dd:f4:73:a4:68:3d:e5:06:b4:fe:d0:e4:
33:ef:1b:dc:00:22:49:5c:e7:23:49:87:01:55:5a:
72:4d:57:ee:47:da:fc:b4:86:2e:45:4d:76:59:b7:
92:42:73:31:8b:68:a3:8c:b8:57:f0:60:9a:f5:6a:
4b:9d:ea:be:fb:fe:61:10:13:99:04:10:7e:87:15:
ec:20:9b:d3:37:09:8c:db:46:e4:bf:fa:20:18:0f:
f3:02:cf:19:a5:70:20:d5:bf:bb:99:cd:46:24:ac:
0c:98:cc:03:41:23:3e:19:cf:75:01:6f:82:d4:7a:
c8:e0:e5:e4:b7:0c:cf:f0:33:90:92:3a:35:96:f7:
02:17:63:a5:48:e6:f2:57:06:92:90:ef:d0:50:67:
08:26:1f:99:34:c2:bf:5c:cb:41:61:6b:2a:9c:0d:
00:ed:fa:a5:6f:8d:ca:92:c3:0b:23:35:15:08:90:
f3:71:32:1d:79:9b:cb:7c:3f:0d:30:85:a2:4c:c1:
84:75:9f:de:11:c3:a7:01:3f:29:06:1c:1b:e8:07:
e4:8b:c1:cc:c9:5a:23:5c:fd:32:a6:89:79:d1:7b:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:09:5D:24:F0:0A:F3:10:6E:A4:45:AA:17:A6:94:84:D2:E7:22
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/V30JXSTwCvMQbqRFqhemlITS5yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:8c:c4:40:8a:b1:3a:a1:be:94:11:94:89:5e:f8:73:7d:74:
32:65:e9:07:67:a4:81:ee:81:69:f7:92:6b:ee:cb:dd:74:e4:
00:30:82:94:bb:77:06:72:d5:05:49:81:a4:c6:92:8e:b5:c6:
6a:45:9d:11:31:8b:5d:55:35:1a:19:70:9b:8a:78:7f:c8:20:
52:67:ba:10:5d:db:00:11:ee:15:2b:09:5b:cf:29:dd:57:46:
e8:39:08:ea:34:ea:90:17:80:11:84:e5:9d:be:38:ad:bf:da:
96:59:ff:65:93:19:fa:3e:cb:47:48:d3:f3:86:00:65:00:82:
ec:bc:4a:ae:25:f0:b9:ad:da:a6:0e:cb:e4:9f:66:27:dc:e8:
ca:a0:fd:42:4e:7f:b6:3c:26:5b:64:a4:c9:c8:d9:4f:9c:46:
f0:05:bf:0a:95:64:3f:41:db:a1:32:79:db:6b:5c:43:37:8f:
96:02:a7:ff:1b:fa:56:45:d2:c8:28:78:c2:e9:65:19:45:7f:
5f:3e:cb:dd:a3:33:bf:bc:d9:8f:db:8a:62:1d:45:34:5e:e9:
53:97:33:4b:f2:8a:c7:38:4f:25:3e:d3:5f:e7:1b:59:2a:ac:
3e:30:d7:66:d0:fc:27:30:80:8f:bf:46:66:c2:47:f1:91:5f:
2d:35:a4:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntVP1m8f1Mgrqzc/7SH3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjUwMTAyMTU0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzdkMDk1ZDI0ZjAwYWYzMTA2ZWE0NDVhYTE3YTY5NDg0ZDJlNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniYEYBz/ZOdRfNGJkfBP9B3bkfqC
2RQ9w+ErlXgHR/Ld9HOkaD3lBrT+0OQz7xvcACJJXOcjSYcBVVpyTVfuR9r8tIYu
RU12WbeSQnMxi2ijjLhX8GCa9WpLneq++/5hEBOZBBB+hxXsIJvTNwmM20bkv/og
GA/zAs8ZpXAg1b+7mc1GJKwMmMwDQSM+Gc91AW+C1HrI4OXktwzP8DOQkjo1lvcC
F2OlSObyVwaSkO/QUGcIJh+ZNMK/XMtBYWsqnA0A7fqlb43KksMLIzUVCJDzcTId
eZvLfD8NMIWiTMGEdZ/eEcOnAT8pBhwb6Afki8HMyVojXP0ypol50Xvj9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFd9CV0k8ArzEG6kRaoXppSE0uciMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvVjMwSlhTVHdDdk1RYnFSRnFoZW1sSVRTNXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUEloMA0G
CSqGSIb3DQEBCwUAA4IBAQBOjMRAirE6ob6UEZSJXvhzfXQyZekHZ6SB7oFp95Jr
7svddOQAMIKUu3cGctUFSYGkxpKOtcZqRZ0RMYtdVTUaGXCbinh/yCBSZ7oQXdsA
Ee4VKwlbzyndV0boOQjqNOqQF4ARhOWdvjitv9qWWf9lkxn6PstHSNPzhgBlAILs
vEquJfC5rdqmDsvkn2Yn3OjKoP1CTn+2PCZbZKTJyNlPnEbwBb8KlWQ/QduhMnnb
a1xDN4+WAqf/G/pWRdLIKHjC6WUZRX9fPsvdozO/vNmP24piHUU0XulTlzNL8orH
OE8lPtNf5xtZKqw+MNdm0PwnMICPv0ZmwkfxkV8tNaSD
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:55 2025 by rpki-client