Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-5rpD2DPHY6HNcHGpBnVSAp0o_g.roa
File: 1-5rpD2DPHY6HNcHGpBnVSAp0o_g.roa (raw, json)
Hash identifier: Ggls6PlbK4a7FFoi0wXvzmwb+skEG0wx1EfheqDuW2k=
Subject key identifier: FB:9A:E9:0F:60:CF:1D:8E:87:35:C1:C6:A4:19:D5:48:0A:74:A3:F8
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAF32AF7B1D312FFC40F901B376BEF
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-5rpD2DPHY6HNcHGpBnVSAp0o_g.roa
Signing time: Sun 01 Jan 2023 14:44:55 +0000
ROA not before: Sun 01 Jan 2023 14:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60944
IP address blocks: 80.90.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f3:2a:f7:b1:d3:12:ff:c4:0f:90:1b:37:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb9ae90f60cf1d8e8735c1c6a419d5480a74a3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:1c:79:9a:6b:1a:ea:78:10:6a:2a:26:6e:
f0:06:49:1d:65:99:f9:42:9c:49:85:96:4b:77:ee:
2a:76:ac:5b:06:12:04:05:d8:57:93:9b:a5:30:3e:
7f:89:b4:8b:7d:e8:ed:91:f0:c2:73:06:62:86:fa:
2c:05:a4:29:3e:76:9d:23:e3:5a:78:7c:5a:ed:08:
71:fb:1d:6d:53:db:5c:89:0b:95:a9:9a:57:75:c7:
83:2c:94:17:7d:e2:02:f9:71:9d:2a:66:b7:fd:b2:
c2:c4:51:b6:a3:ea:40:0b:f9:d8:3d:c7:8d:4c:fd:
55:67:90:22:f6:10:71:16:34:e0:58:f9:d9:67:75:
ae:be:b4:d5:bd:76:dd:f5:56:aa:77:1a:39:5d:b6:
b2:57:07:42:01:b4:5c:44:5e:62:52:a1:7b:eb:2a:
28:6a:54:47:1a:3c:c4:b0:3c:01:de:49:47:fd:98:
d6:bf:05:67:54:f4:d8:3c:31:38:9d:8c:9d:8c:dc:
a2:73:af:e2:65:04:c7:ee:a8:bc:9c:eb:32:b2:1b:
96:6b:8c:f6:5b:8c:3d:76:76:b2:0b:34:79:6f:7f:
3d:31:30:6f:15:53:d5:fa:bf:e9:70:84:86:cc:a1:
14:5f:da:8e:e4:88:7e:be:42:3e:5e:3b:11:8b:bf:
21:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:E9:0F:60:CF:1D:8E:87:35:C1:C6:A4:19:D5:48:0A:74:A3:F8
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/1-5rpD2DPHY6HNcHGpBnVSAp0o_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ff:c9:b4:a7:d3:6e:26:73:ce:29:f8:8e:ca:75:b2:e9:78:
1c:96:3d:db:57:63:f8:f8:c7:41:c3:81:e8:60:34:31:cd:0a:
d5:8c:46:e4:82:9c:11:d2:8f:1d:5a:d0:8e:49:31:95:25:a0:
aa:6d:16:df:fe:57:8e:b3:08:11:bb:9f:ac:11:11:0e:38:95:
c1:6b:4f:e3:cf:1d:c8:05:23:cc:a1:26:f4:a7:17:29:2e:58:
8e:18:7b:1d:cb:e8:79:72:09:a6:34:6a:2e:1a:8b:56:27:8a:
7a:7c:b3:8f:c6:15:63:2a:eb:be:bc:ac:a5:b4:0a:c2:e2:8b:
2a:83:31:a8:08:82:04:52:37:28:ce:58:41:5a:bd:e4:97:e0:
20:83:3f:91:ce:13:19:09:28:6f:9f:00:49:db:b1:f7:4f:9f:
e1:1b:5a:ed:78:29:a9:ee:f7:6f:bf:b6:15:c4:57:89:47:d7:
99:70:eb:bd:a5:12:c2:1e:2d:e5:f8:c6:e5:8f:0e:36:6d:d5:
8b:c3:e9:de:0c:2a:72:ff:6d:6e:5a:9b:79:de:d9:47:73:bf:
bb:2a:6d:da:e2:57:ff:4d:bf:5e:90:77:92:54:54:c5:8d:f8:
30:02:da:f9:28:06:55:fa:90:e2:e3:fd:0c:c7:e9:11:97:21:
1d:38:db:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:56 2025 by rpki-client