Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E_KcjvsO-iSsZA55dsmDUCViApc.roa
File: E_KcjvsO-iSsZA55dsmDUCViApc.roa (raw, json)
Hash identifier: MrnTAXk/SWD5rFb2Zi88aM26juIL6m7KhqZXwHGfhhQ=
Subject key identifier: 13:F2:9C:8E:FB:0E:FA:24:AC:64:0E:79:76:C9:83:50:25:62:02:97
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01938B355B194022E959303DD90C43E1A58A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E_KcjvsO-iSsZA55dsmDUCViApc.roa
Signing time: Tue 03 Dec 2024 06:29:10 +0000
ROA not before: Tue 03 Dec 2024 06:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6854
IP address blocks: 80.253.0.0/20 maxlen: 20
83.222.192.0/19 maxlen: 19
83.229.128.0/17 maxlen: 17
195.230.64.0/19 maxlen: 19
213.243.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:35:5b:19:40:22:e9:59:30:3d:d9:0c:43:e1:a5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 3 06:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13f29c8efb0efa24ac640e7976c9835025620297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:6d:82:1d:1b:55:02:e6:e6:15:26:20:9e:
90:57:85:e4:f8:b6:93:de:39:c0:9d:1c:10:45:51:
1d:42:65:5b:d5:74:f9:53:74:bc:01:af:a5:a5:56:
6d:37:b1:33:9d:30:37:4b:f3:dd:5b:10:02:f4:4c:
a3:de:70:da:93:97:86:8e:2d:73:02:64:09:88:93:
26:2e:4b:da:95:81:f3:a6:3b:9c:0c:3d:fb:4c:b7:
e2:d9:ef:3f:e3:55:a7:2c:37:66:01:f2:ad:08:a2:
06:b1:51:44:00:72:75:8e:37:44:1a:b9:b1:5a:67:
77:a8:b7:b2:f4:50:86:12:75:6f:56:dc:8d:dc:37:
52:ca:df:27:db:a6:2b:fe:b8:d4:32:82:be:2a:7c:
f1:c5:ad:73:3d:d7:86:6d:f8:02:0a:1a:03:bf:b1:
e6:71:4f:24:f5:d1:bf:f6:2f:d3:8b:2f:da:6e:e7:
c0:27:52:e4:70:29:3f:6b:51:18:10:1e:9d:91:48:
cc:e7:6d:b7:69:d5:9f:4a:12:ed:e2:c8:79:4a:69:
48:15:97:8d:8e:b2:4a:dd:b0:65:5b:d4:5e:47:b8:
4e:63:a6:e7:69:0f:01:3b:1d:75:7d:65:c4:32:ed:
14:73:57:7a:07:65:13:4f:9e:a5:41:83:81:e4:77:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F2:9C:8E:FB:0E:FA:24:AC:64:0E:79:76:C9:83:50:25:62:02:97
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/E_KcjvsO-iSsZA55dsmDUCViApc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
195.230.64.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
03:1a:e7:b2:8e:51:a3:c4:b6:84:47:38:48:8a:23:76:1b:e3:
3e:c1:f4:03:a1:50:d5:c0:e0:8b:4b:54:9d:af:7f:a5:86:81:
76:39:99:89:c6:50:f7:78:4c:f0:b8:a8:51:74:1b:7c:61:a7:
1f:db:65:78:0a:62:df:b5:a4:3b:cc:df:4a:88:da:3d:be:20:
01:b4:e3:93:b1:b5:97:7e:8b:95:70:7c:d6:ea:6a:a4:53:c0:
c0:a4:48:de:fe:8b:90:a6:df:ec:ae:36:8c:9d:c4:19:01:3d:
dc:18:ec:e5:ff:b8:29:4b:0d:96:cf:ab:ad:03:c4:b5:a0:62:
1e:0d:fb:6d:8b:39:e0:fc:5d:63:2b:7b:b9:95:b1:c3:35:1a:
5d:a1:5e:35:e2:b9:35:d4:00:d2:a2:47:58:49:17:be:b7:22:
56:85:82:5e:3f:7e:1e:43:b7:bd:71:ac:e7:14:96:35:82:62:
6d:50:11:e0:bb:0a:7b:14:90:8c:fe:94:ba:f7:b8:18:58:4e:
f3:a2:09:54:bd:81:a2:6b:4b:83:c1:e1:d4:91:4c:d1:ef:78:
f7:c8:4e:76:bc:5b:f8:e0:99:ff:34:06:fe:54:12:6d:82:4d:
c4:a3:5c:5c:dc:c7:89:99:9c:b8:53:b5:32:0c:af:65:50:03:
10:80:ab:13
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZOLNVsZQCLpWTA92QxD4aWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQxMjAzMDYyOTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2YyOWM4ZWZiMGVmYTI0YWM2NDBlNzk3NmM5ODM1MDI1NjIwMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJNtgh0bVQLm5hUmIJ6QV4Xk+LaT
3jnAnRwQRVEdQmVb1XT5U3S8Aa+lpVZtN7EznTA3S/PdWxAC9Eyj3nDak5eGji1z
AmQJiJMmLkvalYHzpjucDD37TLfi2e8/41WnLDdmAfKtCKIGsVFEAHJ1jjdEGrmx
Wmd3qLey9FCGEnVvVtyN3DdSyt8n26Yr/rjUMoK+Knzxxa1zPdeGbfgCChoDv7Hm
cU8k9dG/9i/Tiy/abufAJ1LkcCk/a1EYEB6dkUjM5223adWfShLt4sh5SmlIFZeN
jrJK3bBlW9ReR7hOY6bnaQ8BOx11fWXEMu0Uc1d6B2UTT56lQYOB5HeE0QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBPynI77DvokrGQOeXbJg1AlYgKXMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvRV9LY2p2c08taVNzWkE1NWRzbURVQ1ZpQXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEUP0AAwQF
U97AAwQHU+WAAwQFw+ZAAwQG1fNAMA0GCSqGSIb3DQEBCwUAA4IBAQADGueyjlGj
xLaERzhIiiN2G+M+wfQDoVDVwOCLS1Sdr3+lhoF2OZmJxlD3eEzwuKhRdBt8Yacf
22V4CmLftaQ7zN9KiNo9viABtOOTsbWXfouVcHzW6mqkU8DApEje/ouQpt/srjaM
ncQZAT3cGOzl/7gpSw2Wz6utA8S1oGIeDfttizng/F1jK3u5lbHDNRpdoV414rk1
1ADSokdYSRe+tyJWhYJeP34eQ7e9caznFJY1gmJtUBHguwp7FJCM/pS697gYWE7z
oglUvYGia0uDweHUkUzR73j3yE52vFv44Jn/NAb+VBJtgk3Eo1xc3MeJmZy4U7Uy
DK9lUAMQgKsT
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:31 2025 by rpki-client