Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/uPzUNOf7fgMFhTyy3oHJj5hMc4E.roa
File: uPzUNOf7fgMFhTyy3oHJj5hMc4E.roa (raw, json)
Hash identifier: 00pRVcF7iDUR5e+5DKjrZfNQtRV9oTtn8PjPjTQeZs0=
Subject key identifier: B8:FC:D4:34:E7:FB:7E:03:05:85:3C:B2:DE:81:C9:8F:98:4C:73:81
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01939BF62DEA8B145BC3A64306725D8E607C
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/uPzUNOf7fgMFhTyy3oHJj5hMc4E.roa
Signing time: Fri 06 Dec 2024 12:33:42 +0000
ROA not before: Fri 06 Dec 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 80.93.192.0/24 maxlen: 24
80.93.202.0/24 maxlen: 24
80.93.204.0/24 maxlen: 24
80.93.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:f6:2d:ea:8b:14:5b:c3:a6:43:06:72:5d:8e:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Dec 6 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8fcd434e7fb7e0305853cb2de81c98f984c7381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:49:f1:ac:fe:19:8a:aa:0f:e8:24:fd:2f:db:
23:9f:12:32:92:cf:69:c4:bb:ad:5a:75:c6:d6:0c:
d4:92:04:c9:86:b3:38:76:41:bd:24:69:07:75:32:
53:85:90:e6:a7:58:74:5b:e6:52:33:f0:28:f6:3e:
c3:ac:f4:65:8a:fd:8f:a6:aa:97:ae:60:a4:cc:68:
00:c1:9c:96:9d:04:28:9c:9b:29:8e:2f:13:aa:42:
8d:f5:d2:86:bc:d4:e5:19:93:5d:64:a4:37:cd:30:
8f:d0:2b:34:5f:ba:55:2d:95:bf:0e:df:c0:ef:72:
a5:f2:5c:77:ed:57:f6:91:b0:53:c5:80:2e:20:ed:
36:ef:a7:57:2c:a3:29:e4:31:53:4f:ed:b9:70:b3:
b7:4b:9a:ee:cd:22:67:55:69:24:1f:ca:53:e9:dc:
d1:ef:37:ae:e1:ed:7d:e4:c2:c3:e2:80:8c:b6:60:
cc:c2:bc:4f:b0:02:d3:19:8f:ce:43:cc:f5:d1:3b:
07:f6:49:8a:bf:93:54:70:4e:c1:22:b9:97:ec:e2:
44:b9:15:af:db:69:f4:5e:ef:b8:8e:47:1c:dc:6a:
cf:1e:40:71:10:a0:7d:74:38:d7:a9:89:5f:26:d7:
d8:2f:46:e7:fb:59:aa:49:a3:09:cc:1f:b3:30:c7:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:D4:34:E7:FB:7E:03:05:85:3C:B2:DE:81:C9:8F:98:4C:73:81
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/uPzUNOf7fgMFhTyy3oHJj5hMc4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.192.0/24
80.93.202.0/24
80.93.204.0/24
80.93.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1c:cb:61:b7:6a:ae:fe:1a:fd:ec:84:0a:ce:9c:f0:77:5d:
b0:99:46:5c:74:fe:d7:70:13:70:b3:32:0b:94:b3:d1:74:9b:
b2:06:2c:42:b2:17:77:25:e7:01:1f:7c:9e:5c:86:8d:f0:29:
55:73:d1:c8:1e:79:d6:90:97:f9:49:4e:69:30:ac:5e:a6:d5:
8e:2c:a1:6b:34:f8:dd:d7:f6:4e:cf:67:b5:8e:bb:2f:47:eb:
39:19:f1:31:0c:82:6e:4f:ee:37:a4:8d:66:27:ec:f6:e4:78:
ec:d0:9f:32:f6:7d:96:39:72:9f:5f:ae:93:e7:0b:c4:77:1a:
33:95:27:83:b0:d8:bd:9d:e0:61:d2:de:10:24:d8:44:ff:b5:
fa:8c:93:3d:26:63:5b:4b:63:78:a8:1a:76:c4:93:f0:85:b3:
c2:de:eb:16:20:7e:6d:9d:a2:5c:18:18:34:34:5d:ba:d6:61:
73:84:28:fb:46:b6:68:c3:7d:fa:97:7d:88:bb:d9:5b:00:fa:
79:4e:11:c3:bc:0f:c9:48:ea:2d:87:1b:3b:01:b0:cd:14:37:
ee:39:0d:95:cd:74:0a:47:7b:d3:15:07:ee:0f:30:0f:15:e8:
a1:47:65:2a:a5:3a:2c:db:bd:a1:18:ad:e0:f4:ec:23:2b:e8:
e8:5d:82:54
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZOb9i3qixRbw6ZDBnJdjmB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjQxMjA2MTIzMzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGZjZDQzNGU3ZmI3ZTAzMDU4NTNjYjJkZTgxYzk4Zjk4NGM3MzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UnxrP4ZiqoP6CT9L9sjnxIyks9p
xLutWnXG1gzUkgTJhrM4dkG9JGkHdTJThZDmp1h0W+ZSM/Ao9j7DrPRliv2PpqqX
rmCkzGgAwZyWnQQonJspji8TqkKN9dKGvNTlGZNdZKQ3zTCP0Cs0X7pVLZW/Dt/A
73Kl8lx37Vf2kbBTxYAuIO0276dXLKMp5DFTT+25cLO3S5ruzSJnVWkkH8pT6dzR
7zeu4e195MLD4oCMtmDMwrxPsALTGY/OQ8z10TsH9kmKv5NUcE7BIrmX7OJEuRWv
22n0Xu+4jkcc3GrPHkBxEKB9dDjXqYlfJtfYL0bn+1mqSaMJzB+zMMez8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLj81DTn+34DBYU8st6ByY+YTHOBMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvdVB6VU5PZjdmZ01GaFR5eTNvSEpqNWhNYzRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUF3AAwQA
UF3KAwQAUF3MAwQAUF3OMA0GCSqGSIb3DQEBCwUAA4IBAQA/HMtht2qu/hr97IQK
zpzwd12wmUZcdP7XcBNwszILlLPRdJuyBixCshd3JecBH3yeXIaN8ClVc9HIHnnW
kJf5SU5pMKxeptWOLKFrNPjd1/ZOz2e1jrsvR+s5GfExDIJuT+43pI1mJ+z25Hjs
0J8y9n2WOXKfX66T5wvEdxozlSeDsNi9neBh0t4QJNhE/7X6jJM9JmNbS2N4qBp2
xJPwhbPC3usWIH5tnaJcGBg0NF261mFzhCj7RrZow336l32Iu9lbAPp5ThHDvA/J
SOothxs7AbDNFDfuOQ2VzXQKR3vTFQfuDzAPFeihR2UqpTos272hGK3g9OwjK+jo
XYJU
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:54 2025 by rpki-client