Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa
File: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (raw, json)
Hash identifier: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=
Subject key identifier: 03:4A:BC:4B:34:8F:FE:F9:01:D0:A7:5B:F8:B2:E1:43:F4:0E:6D:04
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 019424450FC065D6B402FEC91A8E9B4B62C8
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21260
IP address blocks: 80.87.128.0/20 maxlen: 24
185.27.20.0/22 maxlen: 24
2a04:1300::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0f:c0:65:d6:b4:02:fe:c9:1a:8e:9b:4b:62:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034abc4b348ffef901d0a75bf8b2e143f40e6d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:81:20:9e:ef:23:30:df:d0:6f:d7:26:6f:
5f:d4:39:f7:60:d1:2f:7d:f5:3c:50:df:2b:74:c3:
85:35:bc:43:81:d0:bd:4c:cd:17:b3:33:80:ae:6a:
b1:a5:f3:fc:71:1d:5a:ae:c9:18:5d:12:3d:46:e2:
0a:3a:81:fb:8b:1e:f3:aa:a6:b6:df:96:5a:3d:a8:
18:f7:04:d6:8e:74:aa:1d:0d:72:4b:54:95:cf:07:
c6:9c:c0:ac:f8:7d:60:45:fb:1f:86:6a:69:45:4b:
bd:67:40:c0:d3:35:19:0b:cd:c7:b4:fe:24:81:9b:
81:ed:ae:24:f8:b4:56:fa:5e:12:80:05:98:37:3c:
84:d3:95:83:c0:c5:fd:9a:86:55:59:c5:7d:3a:cd:
e8:48:49:53:24:9e:34:16:8c:f2:f0:87:6a:ed:88:
90:dc:dd:2b:e5:71:8e:4b:30:c6:aa:8e:c6:98:ed:
15:22:21:94:1b:37:2f:0e:d2:53:d9:49:57:f7:ad:
94:1c:88:1d:ec:a4:80:7c:0b:59:b6:48:1c:cf:f3:
49:34:8a:35:d5:3c:9a:4a:eb:93:5f:4f:06:6f:a2:
4a:f0:03:cf:c3:ae:ab:62:8e:73:c1:89:b8:4a:a3:
57:58:a3:df:95:01:7c:92:4c:95:62:af:a1:f2:84:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:BC:4B:34:8F:FE:F9:01:D0:A7:5B:F8:B2:E1:43:F4:0E:6D:04
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.128.0/20
185.27.20.0/22
IPv6:
2a04:1300::/29
Signature Algorithm: sha256WithRSAEncryption
a9:5d:1b:16:00:8d:11:ca:3f:68:ef:a7:fb:5b:29:9f:bd:5c:
78:54:6d:a1:02:92:2e:19:6f:61:38:39:c8:51:6b:41:17:27:
b2:75:c4:62:28:9f:97:e1:2e:46:f9:e6:4c:f2:36:b6:cd:43:
19:a0:b3:f3:51:74:24:7c:a2:a6:01:cb:07:00:b3:5a:83:7e:
08:96:26:18:41:d0:ce:09:1c:86:e5:60:c0:cf:08:3f:aa:e3:
fd:f5:5e:b7:45:47:b7:bf:a0:8b:ac:57:63:0e:cc:68:42:f4:
d3:de:dc:22:b7:d3:4e:48:78:58:f6:ce:6d:9f:4c:dd:6a:5c:
7a:61:52:ee:26:3b:a3:7e:8a:41:df:fa:64:0f:73:2b:82:03:
07:2c:75:e7:19:4e:da:87:ef:00:ff:55:68:12:6b:f1:fd:ae:
ba:1d:92:01:17:b9:24:e4:60:a7:56:58:8b:03:50:40:2a:4d:
6a:7c:ba:59:9d:55:8e:3b:ef:b7:4c:1e:85:a5:f1:3e:51:0b:
90:6b:94:9a:08:e6:5d:04:85:d6:ab:38:d0:52:3c:6d:a4:29:
c0:27:7b:5e:b5:64:49:fe:57:85:06:64:c5:b4:c5:60:c9:26:
5a:80:7a:8a:d5:14:fc:8c:2f:22:e0:d0:9a:29:6c:92:08:e6:
e9:76:27:19
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQkRQ/AZda0Av7JGo6bS2LIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDg2ZGRkOTdiYTM4MTM4OTM1N2UwZTU2Y2ExMWU1Y2Zl
OGY0NTMwHhcNMjUwMTAxMjM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzRhYmM0YjM0OGZmZWY5MDFkMGE3NWJmOGIyZTE0M2Y0MGU2ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqeBIJ7vIzDf0G/XJm9f1Dn3YNEv
ffU8UN8rdMOFNbxDgdC9TM0XszOArmqxpfP8cR1arskYXRI9RuIKOoH7ix7zqqa2
35ZaPagY9wTWjnSqHQ1yS1SVzwfGnMCs+H1gRfsfhmppRUu9Z0DA0zUZC83HtP4k
gZuB7a4k+LRW+l4SgAWYNzyE05WDwMX9moZVWcV9Os3oSElTJJ40Fozy8Idq7YiQ
3N0r5XGOSzDGqo7GmO0VIiGUGzcvDtJT2UlX962UHIgd7KSAfAtZtkgcz/NJNIo1
1TyaSuuTX08Gb6JK8APPw66rYo5zwYm4SqNXWKPflQF8kkyVYq+h8oSSOwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFANKvEs0j/75AdCnW/iy4UP0Dm0EMB8GA1UdIwQY
MBaAFNYIbd2XujgTiTV+DlbKEeXP6PRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAt
ODE1Zjk5MGJkNDMxLzEvQTBxOFN6U1BfdmtCMEtkYi1MTGhRX1FPYlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAtODE1Zjk5MGJkNDMx
LzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFeAAwQC
uRsUMA0EAgACMAcDBQMqBBMAMA0GCSqGSIb3DQEBCwUAA4IBAQCpXRsWAI0Ryj9o
76f7WymfvVx4VG2hApIuGW9hODnIUWtBFyeydcRiKJ+X4S5G+eZM8ja2zUMZoLPz
UXQkfKKmAcsHALNag34IliYYQdDOCRyG5WDAzwg/quP99V63RUe3v6CLrFdjDsxo
QvTT3twit9NOSHhY9s5tn0zdalx6YVLuJjujfopB3/pkD3MrggMHLHXnGU7ah+8A
/1VoEmvx/a66HZIBF7kk5GCnVliLA1BAKk1qfLpZnVWOO++3TB6FpfE+UQuQa5Sa
COZdBIXWqzjQUjxtpCnAJ3tetWRJ/leFBmTFtMVgySZagHqK1RT8jC8i4NCaKWyS
CObpdicZ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net