Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/OvfWeCcNPkjbD4WceB7qJUQP56g.roa
File: OvfWeCcNPkjbD4WceB7qJUQP56g.roa (raw, json)
Hash identifier: fRXrYY7/CZ7H+wWfEy5WHXYQSNWj53G/u9ERuP4d6t8=
Subject key identifier: 3A:F7:D6:78:27:0D:3E:48:DB:0F:85:9C:78:1E:EA:25:44:0F:E7:A8
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 01941F8C1E86F94C4A28B4D6AA5F8F282E0D
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/OvfWeCcNPkjbD4WceB7qJUQP56g.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 80.89.160.0/20 maxlen: 20
80.94.208.0/20 maxlen: 20
88.83.128.0/19 maxlen: 19
2a00:6e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:86:f9:4c:4a:28:b4:d6:aa:5f:8f:28:2e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3af7d678270d3e48db0f859c781eea25440fe7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:a0:57:a7:9a:db:cd:1f:76:04:c4:64:92:
fe:dd:7e:93:ec:7d:b9:94:ab:7f:71:bb:d8:96:5a:
ad:64:a9:0b:d2:37:72:e3:b8:3e:f5:47:34:d6:ec:
cc:f7:47:9a:a4:64:cf:d8:85:cb:1c:25:5b:0a:2f:
8b:1f:c2:a8:a6:ac:86:27:a8:79:1d:f0:f6:00:89:
2c:d4:10:a2:08:3b:da:55:a2:12:bd:74:88:89:f1:
7e:47:1d:21:0f:91:d5:83:df:82:44:b1:83:ed:b0:
19:69:19:a1:ef:e7:90:39:99:9c:1b:81:19:a9:1d:
97:96:c6:7c:6b:cf:69:6f:17:9f:eb:ba:cc:5a:85:
f6:83:c0:4f:50:47:88:e0:6e:bd:15:d8:32:59:c6:
02:00:cd:76:66:1d:a7:4b:cc:e8:98:c3:2e:cb:a5:
e7:eb:44:4b:20:98:63:b2:fe:f6:bc:36:31:5d:56:
d6:34:2c:0b:a3:e5:5d:01:be:c1:02:c7:86:85:75:
52:fb:bc:f6:2b:7f:0c:71:22:f0:9c:48:b5:0e:cd:
ad:29:18:b4:f0:99:25:de:f5:4f:64:95:bc:46:2d:
d1:fc:56:a7:82:de:c4:22:05:42:94:7c:65:6f:fe:
1d:87:77:65:f4:ab:31:9b:82:55:e1:5b:c4:63:36:
21:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:D6:78:27:0D:3E:48:DB:0F:85:9C:78:1E:EA:25:44:0F:E7:A8
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/OvfWeCcNPkjbD4WceB7qJUQP56g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.160.0/20
80.94.208.0/20
88.83.128.0/19
IPv6:
2a00:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
0b:75:b9:3e:c1:9a:32:fc:c8:a9:44:19:e7:79:88:bd:90:63:
05:15:c6:0b:d6:3e:1b:35:a0:35:64:68:16:ee:70:4a:b2:6e:
87:af:ec:2f:84:ac:74:ac:c0:c8:f1:32:7e:d7:80:d8:68:6b:
9b:d3:94:70:79:df:ce:89:1b:89:84:fe:34:a6:39:80:d2:9b:
2e:8e:73:5d:68:95:be:61:25:17:55:0b:f0:c9:eb:0e:15:95:
1d:24:5c:94:73:ea:93:bf:bf:54:a7:58:c8:5c:00:e7:ee:b5:
a1:8d:55:93:27:14:23:43:63:57:e2:69:9c:7e:c4:ff:36:4f:
70:de:a0:8c:28:16:3f:a0:e3:4d:f5:48:08:b5:a7:60:f5:0b:
ae:07:af:31:9f:36:e8:bc:bd:88:6f:cb:44:2f:66:1f:f7:6b:
9a:b3:79:08:f8:fc:97:4e:36:00:f2:71:37:0d:17:27:92:7f:
2e:a4:f4:ab:de:70:2a:5e:12:2a:24:48:98:5f:1c:2a:2d:37:
71:70:b2:44:f9:b9:96:f0:70:c4:4c:67:41:ea:c0:d2:d0:3a:
27:cd:93:d9:2e:2f:8c:1a:c4:23:48:94:14:64:f4:7c:69:66:
85:46:43:6b:94:3a:0b:ef:92:31:f3:7b:94:6b:80:ff:bd:75:
90:da:e8:fe
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQfjB6G+UxKKLTWql+PKC4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjliNDAyYjY3ZDc1OTM2ZjQ1ZGM4YmM1NGI4NjgxNGUw
NjM2YmEwHhcNMjUwMTAxMDE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWY3ZDY3ODI3MGQzZTQ4ZGIwZjg1OWM3ODFlZWEyNTQ0MGZlN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bigV6ea280fdgTEZJL+3X6T7H25
lKt/cbvYllqtZKkL0jdy47g+9Uc01uzM90eapGTP2IXLHCVbCi+LH8KopqyGJ6h5
HfD2AIks1BCiCDvaVaISvXSIifF+Rx0hD5HVg9+CRLGD7bAZaRmh7+eQOZmcG4EZ
qR2XlsZ8a89pbxef67rMWoX2g8BPUEeI4G69FdgyWcYCAM12Zh2nS8zomMMuy6Xn
60RLIJhjsv72vDYxXVbWNCwLo+VdAb7BAseGhXVS+7z2K38McSLwnEi1Ds2tKRi0
8Jkl3vVPZJW8Ri3R/Fangt7EIgVClHxlb/4dh3dl9Ksxm4JV4VvEYzYh1QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDr31ngnDT5I2w+FnHge6iVED+eoMB8GA1UdIwQY
MBaAFE5ptAK2fXWTb0Xci8VLhoFOBja6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQt
MTZiNDE5NmZhMjk0LzEvT3ZmV2VDY05Qa2piRDRXY2VCN3FKVVFQNTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ODlhYjUtMzBkMi00NmEzLThjNTQtMTZiNDE5NmZhMjk0
LzEvVG1tMEFyWjlkWk52UmR5THhVdUdnVTRHTnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUFmgAwQE
UF7QAwQFWFOAMA0EAgACMAcDBQAqAG6AMA0GCSqGSIb3DQEBCwUAA4IBAQALdbk+
wZoy/MipRBnneYi9kGMFFcYL1j4bNaA1ZGgW7nBKsm6Hr+wvhKx0rMDI8TJ+14DY
aGub05Rwed/OiRuJhP40pjmA0psujnNdaJW+YSUXVQvwyesOFZUdJFyUc+qTv79U
p1jIXADn7rWhjVWTJxQjQ2NX4mmcfsT/Nk9w3qCMKBY/oONN9UgItadg9QuuB68x
nzbovL2Ib8tEL2Yf92uas3kI+PyXTjYA8nE3DRcnkn8upPSr3nAqXhIqJEiYXxwq
LTdxcLJE+bmW8HDETGdB6sDS0DonzZPZLi+MGsQjSJQUZPR8aWaFRkNrlDoL75Ix
83uUa4D/vXWQ2uj+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net