Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa
File: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (raw, json)
Hash identifier: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=
Subject key identifier: 75:40:15:28:49:BC:1B:24:5D:DE:E9:32:2B:F7:C3:34:95:DF:71:D5
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 0194266BD3B85A921785B77D3EF5C3557FA5
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24978
IP address blocks: 80.79.224.0/20 maxlen: 20
80.79.232.0/22 maxlen: 22
185.133.104.0/22 maxlen: 22
2a03:89c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d3:b8:5a:92:17:85:b7:7d:3e:f5:c3:55:7f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7540152849bc1b245ddee9322bf7c33495df71d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:c0:24:d0:d3:d2:17:62:75:3c:47:09:87:
75:7c:b8:81:49:44:2e:a2:06:b3:db:1f:67:13:7e:
cd:6b:ae:da:5a:9f:af:1b:31:91:4f:ea:ba:cf:a0:
22:99:fb:3d:e5:71:84:d1:03:95:eb:98:d0:92:76:
0f:d5:58:d2:2d:6d:1b:93:98:db:75:31:ba:93:e7:
24:d8:5d:2c:81:d8:37:58:8b:2e:a0:d8:2f:bd:a3:
a8:fe:f0:0c:0e:40:f5:85:15:74:26:ea:67:f8:ef:
45:fc:11:f2:c1:95:fc:23:50:ec:a8:91:f9:9b:4f:
43:4a:86:b2:15:56:a4:ea:eb:e5:fd:3d:64:1b:95:
7e:44:48:98:1d:76:7f:6f:33:c5:52:fc:de:1e:8a:
52:80:55:3f:97:6a:d1:b4:42:34:a1:ae:63:2a:c1:
72:e7:1c:d9:70:90:a2:0f:30:30:f2:7d:78:43:1d:
66:35:6e:7c:a8:ec:9e:39:ec:fc:05:63:ef:f8:c2:
56:1f:8c:60:bc:2f:51:5b:c9:b4:8a:a5:a8:07:09:
b2:6a:61:e3:c0:62:35:c6:b3:37:8f:f3:b5:7c:16:
69:fd:f3:9c:c3:77:dc:4e:cb:1e:87:be:15:14:94:
32:93:0d:55:9c:9a:4e:a9:66:e6:a2:a5:65:2d:54:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:40:15:28:49:BC:1B:24:5D:DE:E9:32:2B:F7:C3:34:95:DF:71:D5
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.224.0/20
185.133.104.0/22
IPv6:
2a03:89c0::/32
Signature Algorithm: sha256WithRSAEncryption
74:31:65:4b:c1:c0:6a:fc:37:f4:ca:15:6b:db:94:a8:7a:2c:
83:01:26:79:c4:02:92:68:ef:e9:3a:6c:0e:4e:08:ba:c6:55:
4b:11:fa:e7:00:72:6d:60:b0:7f:7d:31:a1:3a:da:cd:5f:1f:
85:42:74:bd:1e:11:72:7c:74:05:46:d8:4b:7a:cb:b1:e7:9e:
4c:65:67:bb:47:3c:b1:9c:1b:51:b5:f4:11:65:9b:11:c9:04:
8a:8e:f7:6c:cd:b0:3d:02:75:28:65:4c:0a:4b:f8:30:8b:63:
bd:9f:b2:a5:61:16:72:1c:0c:28:ba:45:cc:1a:8b:23:4f:cb:
fa:fe:ff:46:ae:ba:28:aa:23:d3:e2:d2:0d:2f:75:f7:c9:dc:
64:1e:83:6d:7b:65:c6:44:79:96:68:a8:ef:1c:0b:ca:b9:c1:
b5:0e:1b:01:3d:cd:b0:f0:b3:07:e3:82:4b:c3:51:33:3e:d8:
d6:36:87:26:21:54:1d:2e:59:b7:5c:42:bf:c0:7d:d8:a9:91:
89:ee:8e:50:34:78:76:18:22:64:a0:bd:d4:62:4b:47:64:8a:
2a:26:16:05:e2:81:88:7a:e8:e8:da:f8:f3:d7:e0:f8:90:17:
ac:86:43:f4:13:37:a7:c6:e4:8f:45:0e:d8:43:1d:83:e9:ed:
ba:51:9b:3e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQma9O4WpIXhbd9PvXDVX+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWU5ODk0N2ZjOTQ4ZDViNjJkZmI4NWE3Y2IzYTcyYTA2
NzI2NTYwHhcNMjUwMTAyMDk0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTQwMTUyODQ5YmMxYjI0NWRkZWU5MzIyYmY3YzMzNDk1ZGY3MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EDAJNDT0hdidTxHCYd1fLiBSUQu
ogaz2x9nE37Na67aWp+vGzGRT+q6z6Aimfs95XGE0QOV65jQknYP1VjSLW0bk5jb
dTG6k+ck2F0sgdg3WIsuoNgvvaOo/vAMDkD1hRV0Jupn+O9F/BHywZX8I1DsqJH5
m09DSoayFVak6uvl/T1kG5V+REiYHXZ/bzPFUvzeHopSgFU/l2rRtEI0oa5jKsFy
5xzZcJCiDzAw8n14Qx1mNW58qOyeOez8BWPv+MJWH4xgvC9RW8m0iqWoBwmyamHj
wGI1xrM3j/O1fBZp/fOcw3fcTsseh74VFJQykw1VnJpOqWbmoqVlLVSzOwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHVAFShJvBskXd7pMiv3wzSV33HVMB8GA1UdIwQY
MBaAFDJemJR/yUjVti37hafLOnKgZyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2It
NGNhZWM5N2Y3ZDkyLzEvZFVBVktFbThHeVJkM3VreUtfZkROSlhmY2RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNmY4YTktZDZjNy00ZDUyLTkxY2ItNGNhZWM5N2Y3ZDky
LzEvTWw2WWxIX0pTTlcyTGZ1RnA4czZjcUJuSmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUE/gAwQC
uYVoMA0EAgACMAcDBQAqA4nAMA0GCSqGSIb3DQEBCwUAA4IBAQB0MWVLwcBq/Df0
yhVr25SoeiyDASZ5xAKSaO/pOmwOTgi6xlVLEfrnAHJtYLB/fTGhOtrNXx+FQnS9
HhFyfHQFRthLesux555MZWe7RzyxnBtRtfQRZZsRyQSKjvdszbA9AnUoZUwKS/gw
i2O9n7KlYRZyHAwoukXMGosjT8v6/v9GrrooqiPT4tINL3X3ydxkHoNte2XGRHmW
aKjvHAvKucG1DhsBPc2w8LMH44JLw1EzPtjWNocmIVQdLlm3XEK/wH3YqZGJ7o5Q
NHh2GCJkoL3UYktHZIoqJhYF4oGIeujo2vjz1+D4kBeshkP0EzenxuSPRQ7YQx2D
6e26UZs+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net