Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/f-vg02HpReXjcRCHCnuRFWno74c.roa
File: f-vg02HpReXjcRCHCnuRFWno74c.roa (raw, json)
Hash identifier: NkCDR8DJVgOIturlqfX7bbNHy0aLhC+5p7VwdPkOrrQ=
Subject key identifier: 7F:EB:E0:D3:61:E9:45:E5:E3:71:10:87:0A:7B:91:15:69:E8:EF:87
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0194C64DAB7A05C2CDDA088D9A7A00D674E6
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/f-vg02HpReXjcRCHCnuRFWno74c.roa
Signing time: Sun 02 Feb 2025 10:56:06 +0000
ROA not before: Sun 02 Feb 2025 10:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35214
IP address blocks: 80.87.176.0/20 maxlen: 20
80.90.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:4d:ab:7a:05:c2:cd:da:08:8d:9a:7a:00:d6:74:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 2 10:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7febe0d361e945e5e37110870a7b911569e8ef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:8d:aa:d0:19:6d:c0:c6:0e:02:d2:a7:86:
ae:48:0c:35:02:18:80:94:35:89:7e:87:5a:d7:ef:
f9:6f:b0:2f:ae:c7:9d:a7:86:50:7f:c5:24:ef:80:
47:f1:c3:16:0c:2f:d2:4c:57:93:82:cf:f9:84:99:
d4:95:76:ff:8f:47:76:3a:10:79:b5:80:68:ee:0e:
c3:52:4f:80:2f:22:e0:88:4f:bb:55:c7:37:74:eb:
ca:94:cc:03:91:2f:c1:84:28:29:04:be:00:78:85:
e5:4f:4c:28:2d:98:2f:bd:ef:ba:65:39:3d:9d:0a:
73:7b:10:b6:d1:3b:bc:2d:dd:16:66:77:f7:af:5b:
1e:50:f2:c9:5c:e8:b3:76:47:22:4e:e2:34:5d:41:
9f:f7:73:e2:f1:c9:02:56:6b:e9:19:24:6d:dc:b6:
2c:99:ff:47:28:72:ca:bc:25:8c:5e:26:38:e1:5a:
9f:ab:c7:4a:df:5c:0d:fd:76:62:0d:b4:af:df:2c:
53:8b:86:98:fe:32:31:05:6a:fd:af:d0:da:a7:e6:
3d:53:17:7f:2c:51:3c:b3:9e:07:a3:f0:f6:de:a6:
1b:06:fa:9c:7d:9c:6d:d4:02:d8:57:52:12:1f:1c:
3c:93:d8:d4:45:ff:e0:fb:54:51:c2:33:f5:93:f2:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EB:E0:D3:61:E9:45:E5:E3:71:10:87:0A:7B:91:15:69:E8:EF:87
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/f-vg02HpReXjcRCHCnuRFWno74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.176.0/20
80.90.128.0/20
Signature Algorithm: sha256WithRSAEncryption
45:d1:da:80:e0:b4:93:41:81:97:16:79:92:87:e4:b0:32:22:
46:bb:eb:4d:dc:4c:8f:a3:ea:3a:97:79:ce:46:f3:2e:f4:e0:
38:1b:6d:8b:b3:63:fa:da:33:c9:ea:e2:c6:55:b1:7f:26:e5:
3c:bb:26:58:37:a5:9b:84:41:5f:4d:bd:79:97:5a:6c:8b:1b:
33:0d:34:2b:e6:7e:1c:5e:b3:1a:5a:fc:19:5d:fe:ff:f1:a0:
3e:a3:0c:f4:a3:2d:83:bc:ab:51:30:a4:b7:45:52:e7:32:15:
8f:07:e5:7d:31:62:ab:3e:5a:ea:92:14:ff:05:bc:6f:93:d2:
55:8f:ee:63:ce:3d:ab:d1:47:01:bb:56:f3:ef:64:8c:fb:a4:
98:02:3a:30:72:9e:62:12:a7:53:fe:2b:e3:ca:99:6d:15:5f:
dc:f2:31:dc:40:c5:a9:c4:96:fe:f5:f1:70:9a:37:81:f7:b1:
8c:65:2f:a8:aa:21:09:da:6b:72:f6:88:f3:22:dd:ef:2f:f7:
3c:32:d0:44:05:a3:ec:39:dd:2c:59:70:d2:78:e1:1d:0e:f2:
07:f8:59:84:5f:3e:3a:f7:57:03:e5:64:ad:60:3e:af:5b:c7:
18:e2:86:87:18:57:b4:44:b2:ff:97:ae:60:1f:db:b5:f1:9a:
62:89:03:6a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTGTat6BcLN2giNmnoA1nTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzlkMTViZDJmY2M4NDc3MWJhNmFhMjlhYTU0NDI4YjIx
Y2VmNjAwHhcNMjUwMjAyMTA1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmViZTBkMzYxZTk0NWU1ZTM3MTEwODcwYTdiOTExNTY5ZThlZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvSNqtAZbcDGDgLSp4auSAw1AhiA
lDWJfoda1+/5b7Avrsedp4ZQf8Uk74BH8cMWDC/STFeTgs/5hJnUlXb/j0d2OhB5
tYBo7g7DUk+ALyLgiE+7Vcc3dOvKlMwDkS/BhCgpBL4AeIXlT0woLZgvve+6ZTk9
nQpzexC20Tu8Ld0WZnf3r1seUPLJXOizdkciTuI0XUGf93Pi8ckCVmvpGSRt3LYs
mf9HKHLKvCWMXiY44Vqfq8dK31wN/XZiDbSv3yxTi4aY/jIxBWr9r9Dap+Y9Uxd/
LFE8s54Ho/D23qYbBvqcfZxt1ALYV1ISHxw8k9jURf/g+1RRwjP1k/IndwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH/r4NNh6UXl43EQhwp7kRVp6O+HMB8GA1UdIwQY
MBaAFF050VvS/MhHcbpqopqlRCiyHO9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAt
YzI5YjQ0ZGU1M2E4LzEvZi12ZzAySHBSZVhqY1JDSENudVJGV25vNzRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAtYzI5YjQ0ZGU1M2E4
LzEvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUFewAwQE
UFqAMA0GCSqGSIb3DQEBCwUAA4IBAQBF0dqA4LSTQYGXFnmSh+SwMiJGu+tN3EyP
o+o6l3nORvMu9OA4G22Ls2P62jPJ6uLGVbF/JuU8uyZYN6WbhEFfTb15l1psixsz
DTQr5n4cXrMaWvwZXf7/8aA+owz0oy2DvKtRMKS3RVLnMhWPB+V9MWKrPlrqkhT/
Bbxvk9JVj+5jzj2r0UcBu1bz72SM+6SYAjowcp5iEqdT/ivjypltFV/c8jHcQMWp
xJb+9fFwmjeB97GMZS+oqiEJ2mty9ojzIt3vL/c8MtBEBaPsOd0sWXDSeOEdDvIH
+FmEXz4691cD5WStYD6vW8cY4oaHGFe0RLL/l65gH9u18ZpiiQNq
-----END CERTIFICATE-----
Generated at Tue Mar 25 22:12:56 2025 by rpki-client on console.sobornost.net