Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/qLkt693aVmyKYJQGNdNxcAXdJ9w.roa
File: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (raw, json)
Hash identifier: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=
Subject key identifier: A8:B9:2D:EB:DD:DA:56:6C:8A:60:94:06:35:D3:71:70:05:DD:27:DC
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 019427B5DAE3F55619A14995B4DAE56FF86A
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/qLkt693aVmyKYJQGNdNxcAXdJ9w.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34500
IP address blocks: 80.73.16.0/20 maxlen: 20
80.73.16.0/21 maxlen: 21
80.73.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:da:e3:f5:56:19:a1:49:95:b4:da:e5:6f:f8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b92debddda566c8a60940635d3717005dd27dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:38:b6:0a:0e:43:9d:e9:43:c1:aa:7b:d5:
63:da:95:26:c6:31:5b:8e:cb:b1:d5:05:3a:2a:f2:
01:a7:79:ec:71:85:36:56:83:f1:fb:f5:d5:ec:62:
ae:23:d5:da:9b:fe:d6:24:53:e9:39:df:ff:85:00:
e6:0c:97:df:3c:62:d4:a5:8a:91:b8:5a:26:66:ac:
c6:05:cf:7c:75:5a:70:15:27:53:2b:06:da:83:72:
e4:63:c3:a6:ec:66:b6:75:59:a4:5d:4b:ef:01:89:
d0:33:1e:cf:27:fa:c1:3e:e6:49:5c:ab:be:06:76:
49:53:55:94:32:8c:88:1e:b8:e3:2e:4f:45:4c:3c:
51:87:6d:7c:64:a2:21:d4:de:02:5b:94:3a:42:14:
14:b0:6f:8e:ab:06:19:b6:ae:12:22:dd:80:62:86:
26:73:56:a5:c7:b3:21:fb:78:6f:c4:3c:18:53:8d:
63:28:23:d9:60:3c:5b:68:d7:2f:c6:3a:5f:e9:d4:
82:27:5a:f8:87:c9:27:2a:87:33:cf:dd:12:ed:70:
7d:a5:a4:83:be:e8:e0:43:b2:f1:e3:e2:da:a9:80:
6b:71:55:fe:95:77:12:49:cd:fb:f9:7c:61:4c:12:
b8:52:02:91:2f:42:a4:ea:7c:d8:27:7d:65:c0:10:
f7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:2D:EB:DD:DA:56:6C:8A:60:94:06:35:D3:71:70:05:DD:27:DC
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/qLkt693aVmyKYJQGNdNxcAXdJ9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:29:b0:da:57:c2:98:ca:65:15:2e:4c:e4:74:9b:af:e2:22:
6b:80:3c:21:91:60:49:1d:58:49:75:cf:f4:cc:e0:a3:bd:96:
7d:3f:e4:76:61:5f:83:cc:c3:38:4f:99:0e:f0:30:1c:b4:ac:
c4:3a:92:da:b7:1f:6b:32:99:83:86:51:64:ee:73:24:2c:96:
e4:26:e7:30:fa:9e:34:07:90:57:f4:3f:15:12:f9:03:0f:47:
ff:9e:96:ca:e9:2e:f6:02:49:00:68:e9:07:e2:b8:f8:be:2d:
00:0d:6d:01:df:5b:d9:4a:22:b1:64:4d:53:b3:3d:67:c5:b0:
13:3b:35:51:2d:bc:a0:c1:55:20:a0:1f:30:9e:01:3e:b2:79:
e4:3d:ae:0f:f4:85:90:57:2d:7d:f1:89:71:28:5b:29:3f:70:
de:2f:18:77:e5:9b:51:8c:f0:27:dd:9c:91:a9:a6:ba:eb:7e:
b5:ec:5b:53:11:60:11:ee:6d:02:7c:5a:48:7e:7c:69:cc:5d:
b6:b0:1a:a7:72:81:79:af:ed:a0:17:43:ee:80:b2:d4:66:13:
89:0d:8b:f6:ef:ae:91:8a:c2:fb:9e:9b:fd:39:6f:32:17:79:
7f:be:9a:4e:b1:cb:6d:a1:87:d5:fd:51:c8:ec:12:75:05:5f:
aa:71:51:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntdrj9VYZoUmVtNrlb/hqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjgyYzhlZmRlMzRiZDk5ZTQ0ZWFmMDczMWI2YzUyNWI0
NTRhMTkwHhcNMjUwMTAyMTU1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGI5MmRlYmRkZGE1NjZjOGE2MDk0MDYzNWQzNzE3MDA1ZGQyN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL84tgoOQ53pQ8Gqe9Vj2pUmxjFb
jsux1QU6KvIBp3nscYU2VoPx+/XV7GKuI9Xam/7WJFPpOd//hQDmDJffPGLUpYqR
uFomZqzGBc98dVpwFSdTKwbag3LkY8Om7Ga2dVmkXUvvAYnQMx7PJ/rBPuZJXKu+
BnZJU1WUMoyIHrjjLk9FTDxRh218ZKIh1N4CW5Q6QhQUsG+OqwYZtq4SIt2AYoYm
c1alx7Mh+3hvxDwYU41jKCPZYDxbaNcvxjpf6dSCJ1r4h8knKoczz90S7XB9paSD
vujgQ7Lx4+LaqYBrcVX+lXcSSc37+XxhTBK4UgKRL0Kk6nzYJ31lwBD3FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKi5Levd2lZsimCUBjXTcXAF3SfcMB8GA1UdIwQY
MBaAFLT4LI7940vZnkTq8HMbbFJbRUoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEt
ZDI0NDFlOGY2YzdhLzEvcUxrdDY5M2FWbXlLWUpRR05kTnhjQVhkSjl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82MDhmZGItYTQwNi00Yjg1LWIxNGEtZDI0NDFlOGY2Yzdh
LzEvdFBnc2p2M2pTOW1lUk9yd2N4dHNVbHRGU2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUEkQMA0G
CSqGSIb3DQEBCwUAA4IBAQAaKbDaV8KYymUVLkzkdJuv4iJrgDwhkWBJHVhJdc/0
zOCjvZZ9P+R2YV+DzMM4T5kO8DActKzEOpLatx9rMpmDhlFk7nMkLJbkJucw+p40
B5BX9D8VEvkDD0f/npbK6S72AkkAaOkH4rj4vi0ADW0B31vZSiKxZE1Tsz1nxbAT
OzVRLbygwVUgoB8wngE+snnkPa4P9IWQVy198YlxKFspP3DeLxh35ZtRjPAn3ZyR
qaa663617FtTEWAR7m0CfFpIfnxpzF22sBqncoF5r+2gF0PugLLUZhOJDYv2766R
isL7npv9OW8yF3l/vppOscttoYfV/VHI7BJ1BV+qcVHA
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:03 2025 by rpki-client