Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1-OyzxMJDU1IqDmmQeWG5dcDFOfk.roa
File: 1-OyzxMJDU1IqDmmQeWG5dcDFOfk.roa (raw, json)
Hash identifier: 6cyAWQi0D0n3oD39QzcttsjbcGQTNqesi/cS/4bc8T4=
Subject key identifier: F8:EC:B3:C4:C2:43:53:52:2A:0E:69:90:79:61:B9:75:C0:C5:39:F9
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194CB7C45DAD4D27397C45B23CE8DB335CE
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1-OyzxMJDU1IqDmmQeWG5dcDFOfk.roa
Signing time: Mon 03 Feb 2025 11:05:06 +0000
ROA not before: Mon 03 Feb 2025 11:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
80.93.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:7c:45:da:d4:d2:73:97:c4:5b:23:ce:8d:b3:35:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Feb 3 11:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8ecb3c4c24353522a0e69907961b975c0c539f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:6a:bc:6e:80:7f:f5:b9:d2:54:cf:79:05:
f4:b2:44:ca:5b:a4:dc:58:cc:2c:9e:fe:e0:81:80:
a6:32:d7:8d:5e:60:1a:5a:69:49:8b:20:d1:c0:b0:
65:ca:17:cc:9b:8d:36:06:d4:55:75:a6:50:13:f8:
e7:7c:2f:19:db:10:2a:a6:58:17:d8:07:9d:8a:13:
8f:f5:7a:bd:eb:8d:c4:54:aa:90:a3:93:e0:af:72:
e3:80:f4:e7:5d:96:2f:80:a4:62:d8:60:66:8c:7b:
22:22:68:d8:a2:26:15:04:5f:c5:d8:ac:c3:fa:79:
33:b4:b3:41:a1:a4:89:ef:84:96:9e:99:5d:ac:ee:
db:4e:98:b9:96:26:aa:5f:5e:8d:ac:af:3f:91:cd:
9d:b9:6b:ac:22:9d:9c:c8:1d:b8:7f:4e:49:d0:dd:
a1:03:3b:00:53:d9:04:10:60:7a:b7:d0:36:00:77:
8d:68:26:60:38:94:df:be:be:72:a6:5b:fb:29:c5:
b0:e3:89:80:75:04:da:c6:b7:4a:00:a8:77:27:da:
86:4e:33:6b:f5:cd:4f:bd:b1:11:5d:5b:dd:13:70:
d9:07:6e:59:02:83:10:88:95:93:4a:cc:2a:b5:4b:
9c:20:80:7f:3e:72:76:ba:98:4d:64:63:6d:d4:fd:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:B3:C4:C2:43:53:52:2A:0E:69:90:79:61:B9:75:C0:C5:39:F9
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1-OyzxMJDU1IqDmmQeWG5dcDFOfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.206.0/23
Signature Algorithm: sha256WithRSAEncryption
41:70:58:70:05:6e:f9:3f:0c:2e:28:7b:0f:dc:0b:03:a9:20:
57:6e:1a:78:a1:cd:37:47:00:43:43:8b:70:94:c0:25:48:50:
3c:14:bb:89:dd:59:b8:46:a2:20:61:08:2f:b7:a2:aa:cf:c4:
2b:a6:cf:59:3c:e4:f3:f3:83:15:c2:f2:e4:db:7b:56:2e:f4:
b7:94:9c:e3:e9:fa:75:c1:c7:8a:89:ee:2c:6f:2e:a6:f1:71:
0c:2a:7f:8f:dc:b0:2f:af:18:c9:b2:4c:e1:9d:84:26:e2:3a:
ba:e7:fe:56:1b:28:86:03:71:f9:fd:82:0f:cc:af:71:14:9c:
49:cd:06:f1:01:35:8d:41:9e:eb:aa:55:ac:16:21:a8:95:f8:
94:55:da:70:9c:da:b3:91:3a:bc:65:64:de:9b:87:d6:a0:0a:
d8:fa:e8:1d:9c:d8:a8:08:4b:14:b5:56:f0:1f:f4:3b:9a:5c:
14:75:c4:ec:4e:5e:0e:97:58:8d:64:81:85:21:b6:4d:18:46:
c8:38:a8:3b:b1:cd:2d:5a:24:54:7d:5a:51:27:81:a4:e3:1f:
19:1e:af:01:03:5b:2e:e6:00:73:af:e0:20:be:19:48:51:bc:
69:71:f8:96:86:6b:9f:00:00:c6:ee:6a:ab:16:20:77:6a:48:
7e:d8:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:04:28 2025 by rpki-client