Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/ogEcP4NzFlPI4x7m-u6KRzdM5IQ.roa
File: ogEcP4NzFlPI4x7m-u6KRzdM5IQ.roa (raw, json)
Hash identifier: PqHPyudSS/IYQYTMgqlHecrxbzoCN3uBftvXZvnfBPQ=
Subject key identifier: A2:01:1C:3F:83:73:16:53:C8:E3:1E:E6:FA:EE:8A:47:37:4C:E4:84
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 018A70D35BA581D935C59054DAF351F1BF76
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/ogEcP4NzFlPI4x7m-u6KRzdM5IQ.roa
Signing time: Thu 07 Sep 2023 18:06:54 +0000
ROA not before: Thu 07 Sep 2023 18:06:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211114
IP address blocks: 45.80.175.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:d3:5b:a5:81:d9:35:c5:90:54:da:f3:51:f1:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Sep 7 18:06:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2011c3f83731653c8e31ee6faee8a47374ce484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:be:24:86:32:8c:c5:28:c5:35:26:ce:ce:
93:0c:9c:08:b1:4c:86:7b:71:d7:25:8a:1e:7d:3d:
65:2a:b7:9c:a2:3a:0f:95:c4:e0:1a:1f:02:97:5e:
b3:e4:c7:3a:21:28:01:13:7d:84:70:c4:58:4f:fb:
19:74:7e:1a:d2:2f:ca:12:ff:1a:a9:23:21:c5:8a:
f9:db:3c:e9:c6:25:74:17:07:b4:14:a0:b0:41:a8:
bd:e0:63:7e:78:9f:12:31:aa:de:22:01:d2:7b:52:
2a:db:ac:e7:65:ef:15:ee:4c:00:1a:3f:3f:42:67:
ae:38:8b:6b:e0:a9:e0:84:eb:ca:6c:52:38:6c:7c:
af:57:f2:58:bb:d3:fa:55:f2:67:64:4e:5e:ef:1f:
60:a7:73:20:cd:32:55:99:6c:b4:01:07:bb:b3:d1:
7f:df:b8:af:f4:a8:32:b7:e9:8e:6e:52:a6:95:46:
67:f1:de:25:7f:6f:8c:7c:80:0a:57:58:cd:b8:b6:
eb:36:66:86:e8:ba:b8:2a:bf:2e:db:14:40:83:89:
56:06:16:f8:0a:8e:25:e5:be:20:a7:f0:e3:dc:39:
00:cb:3f:f4:82:6f:cf:fd:4f:0e:a8:e7:06:8c:90:
43:0e:d2:d3:13:66:21:3b:6f:a8:09:7c:8b:f9:01:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:1C:3F:83:73:16:53:C8:E3:1E:E6:FA:EE:8A:47:37:4C:E4:84
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/ogEcP4NzFlPI4x7m-u6KRzdM5IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.175.0/24
185.207.39.0/24
Signature Algorithm: sha256WithRSAEncryption
31:87:06:af:31:24:1c:3e:9f:f7:13:1a:78:60:da:34:f6:73:
e3:a5:32:87:36:8c:36:82:28:b6:d5:16:59:b3:f7:48:b6:cc:
ae:6f:1a:d2:a5:4d:4e:7b:34:53:ac:5a:ba:fd:91:4f:13:d7:
df:82:0e:9f:9d:ab:a3:6a:f1:67:51:f0:29:ae:09:26:b2:69:
37:ed:ee:c3:48:c6:3a:26:de:a8:43:62:0b:8e:0b:9a:5a:06:
ec:23:88:bf:48:f6:fd:77:81:81:26:66:0f:ba:43:d8:d8:ae:
74:35:be:fc:51:70:ff:86:c0:d7:4b:8f:36:e8:15:09:27:0c:
f8:2c:af:0b:4f:77:b8:7c:2c:0b:a1:89:67:61:c1:7c:d6:4f:
4b:b9:e7:72:0e:a0:15:c2:1d:b2:f1:54:30:7b:2a:61:39:aa:
57:80:38:62:2a:c3:bb:cc:d5:49:fa:bb:68:ad:39:87:13:f4:
e5:9e:62:79:21:d4:f3:35:52:bb:79:ef:9c:e3:59:7f:75:1d:
29:45:cb:92:eb:0e:56:11:c2:20:f3:7a:45:a8:61:9d:60:4a:
ad:e8:70:6c:6c:bc:b7:eb:f3:7c:ad:95:8d:e4:32:49:2e:32:
9c:fd:2d:cb:38:20:e2:49:a8:30:01:6a:39:12:e0:36:f6:bc:
99:a7:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org