Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KTJiAlSBiVe09MeXCaerrxRsmrw.roa
File: KTJiAlSBiVe09MeXCaerrxRsmrw.roa (raw, json)
Hash identifier: yG7gqWTv/uTed2vMY6cmV10rTVzZYey9H3K7bUq6UKM=
Subject key identifier: 29:32:62:02:54:81:89:57:B4:F4:C7:97:09:A7:AB:AF:14:6C:9A:BC
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 018911307CC0302D2BCCF9B255DD78F4A0CA
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KTJiAlSBiVe09MeXCaerrxRsmrw.roa
Signing time: Sat 01 Jul 2023 11:22:17 +0000
ROA not before: Sat 01 Jul 2023 11:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 80.93.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:11:30:7c:c0:30:2d:2b:cc:f9:b2:55:dd:78:f4:a0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jul 1 11:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2932620254818957b4f4c79709a7abaf146c9abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:80:f6:7a:31:7b:4d:ef:d9:48:8b:a5:c4:
dc:3a:8e:0c:61:da:9f:a6:d5:86:a0:84:bf:14:b3:
ed:1b:ab:c0:88:77:38:6f:fa:28:f5:ff:26:d8:3d:
78:2b:7c:11:33:ad:b1:c3:66:c7:6a:79:e7:d5:45:
35:fb:8a:32:c2:c5:f6:8a:34:22:94:57:77:61:f2:
62:44:85:fd:be:4c:82:9c:50:56:a7:bd:7d:4e:4b:
1b:a3:a3:41:c7:b4:3f:8a:40:b0:cb:ca:15:49:0f:
09:1a:76:39:f0:e9:d9:e8:f4:3d:91:41:92:fd:a3:
a9:94:8e:0c:3c:d5:ea:74:c3:23:72:eb:46:38:b9:
25:4b:2e:73:82:42:31:7c:94:ff:68:71:78:51:36:
41:6f:fc:22:70:b3:cc:4e:1e:85:56:17:73:22:86:
84:57:f8:18:28:d9:cb:c5:a8:f6:89:dd:a0:8f:2d:
06:91:01:64:17:a9:93:41:ab:09:65:30:49:fa:47:
35:21:d0:46:eb:44:84:f3:a1:c2:68:d4:af:c4:e0:
2e:39:13:38:2a:9a:cc:a6:79:b9:34:ff:20:25:bb:
af:94:bc:f1:3b:ce:cb:90:d0:d9:57:7a:c8:c9:32:
cf:17:d0:d9:55:a7:cc:3c:ad:0d:e4:04:55:e3:b3:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:62:02:54:81:89:57:B4:F4:C7:97:09:A7:AB:AF:14:6C:9A:BC
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/KTJiAlSBiVe09MeXCaerrxRsmrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ea:91:c6:e5:17:83:04:d7:44:64:7d:09:32:7f:c7:2c:d7:
ca:c7:4f:84:b6:d8:4f:a6:f9:54:a1:32:57:d8:b6:18:6a:41:
b6:69:a7:55:5e:db:d4:a1:0d:46:1d:33:b2:bc:59:48:18:a0:
8e:7c:c8:28:3f:7d:07:a3:48:62:c4:6f:16:87:69:20:34:2e:
92:be:a2:9e:db:a8:53:b1:d1:87:4a:13:ea:56:73:47:ac:40:
56:34:b6:ae:93:e4:8a:af:44:e5:2c:5d:df:6f:58:12:7e:43:
57:57:09:04:a1:c8:a8:a3:66:5d:9f:4b:26:ec:3a:8b:31:e7:
f2:b9:62:c1:3d:31:b9:7e:16:8c:3c:d9:dd:d1:0d:af:c2:c3:
2b:c0:3d:9b:cb:3e:db:d1:e3:c4:e8:8b:ae:80:ba:ac:b3:c4:
32:0f:6e:f4:3c:3f:68:43:79:78:3d:59:43:fe:97:64:f0:d4:
7f:c7:cb:f0:7c:fe:3b:f9:8c:17:e1:62:ea:d9:70:d1:07:b1:
9a:80:29:ed:89:2c:1c:99:2d:c0:b1:b0:64:cf:c9:c9:4b:29:
6a:b0:e7:e9:60:46:5e:58:8e:1f:8e:19:ad:e8:55:b7:1c:21:
72:96:ec:cb:8f:9c:90:07:2e:f0:44:eb:d9:61:24:b9:b0:ed:
98:6f:0b:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkRMHzAMC0rzPmyVd149KDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjMwNzAxMTEyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTMyNjIwMjU0ODE4OTU3YjRmNGM3OTcwOWE3YWJhZjE0NmM5YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+A9noxe03v2UiLpcTcOo4MYdqf
ptWGoIS/FLPtG6vAiHc4b/oo9f8m2D14K3wRM62xw2bHannn1UU1+4oywsX2ijQi
lFd3YfJiRIX9vkyCnFBWp719Tksbo6NBx7Q/ikCwy8oVSQ8JGnY58OnZ6PQ9kUGS
/aOplI4MPNXqdMMjcutGOLklSy5zgkIxfJT/aHF4UTZBb/wicLPMTh6FVhdzIoaE
V/gYKNnLxaj2id2gjy0GkQFkF6mTQasJZTBJ+kc1IdBG60SE86HCaNSvxOAuORM4
KprMpnm5NP8gJbuvlLzxO87LkNDZV3rIyTLPF9DZVafMPK0N5ARV47N8bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkyYgJUgYlXtPTHlwmnq68UbJq8MB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvS1RKaUFsU0JpVmUwOU1lWENhZXJyeFJzbXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3KMA0G
CSqGSIb3DQEBCwUAA4IBAQAN6pHG5ReDBNdEZH0JMn/HLNfKx0+EtthPpvlUoTJX
2LYYakG2aadVXtvUoQ1GHTOyvFlIGKCOfMgoP30Ho0hixG8Wh2kgNC6SvqKe26hT
sdGHShPqVnNHrEBWNLauk+SKr0TlLF3fb1gSfkNXVwkEocioo2Zdn0sm7DqLMefy
uWLBPTG5fhaMPNnd0Q2vwsMrwD2byz7b0ePE6IuugLqss8QyD270PD9oQ3l4PVlD
/pdk8NR/x8vwfP47+YwX4WLq2XDRB7GagCntiSwcmS3AsbBkz8nJSylqsOfpYEZe
WI4fjhmt6FW3HCFyluzLj5yQBy7wROvZYSS5sO2Ybwux
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:07 2025 by rpki-client