Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/W8I5ZbKq0UjVfx3P0nQ7d1KiRCo.roa
File: W8I5ZbKq0UjVfx3P0nQ7d1KiRCo.roa (raw, json)
Hash identifier: h5UWmQYT44MCR3VFqyOMQLilAPILU2XFlSvMZDQfS5U=
Subject key identifier: 5B:C2:39:65:B2:AA:D1:48:D5:7F:1D:CF:D2:74:3B:77:52:A2:44:2A
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE598D7DD21C26ECE9753F9F7A3A9
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/W8I5ZbKq0UjVfx3P0nQ7d1KiRCo.roa
Signing time: Sun 01 Jan 2023 14:44:51 +0000
ROA not before: Sun 01 Jan 2023 14:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42901
IP address blocks: 80.90.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e5:98:d7:dd:21:c2:6e:ce:97:53:f9:f7:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bc23965b2aad148d57f1dcfd2743b7752a2442a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:9a:e1:cb:60:f9:2a:7c:64:6d:6a:a9:4d:
81:3c:b1:fa:a7:95:83:bd:23:a5:56:ce:97:8b:9c:
10:d1:de:9a:03:54:cf:3f:17:98:46:06:f2:f8:6f:
2c:a1:2f:b4:11:a7:70:5a:eb:a3:63:27:af:ab:d1:
95:55:6d:0f:16:15:76:52:4a:8c:7e:c0:b8:bf:59:
df:2f:bd:b8:11:68:d5:af:ea:4e:4b:03:f7:49:f8:
a1:82:6c:6e:54:6b:56:1a:14:0c:55:24:3f:5b:a2:
28:41:9b:6c:78:a1:bd:68:59:03:dc:fd:6e:76:97:
a1:5a:83:0e:be:a3:b2:a6:e4:a4:d6:0c:33:da:41:
a3:8d:bf:95:93:03:73:f3:43:af:70:24:9c:7a:71:
af:56:d0:b8:22:ce:9f:75:5a:dc:56:9c:eb:67:c5:
1c:93:be:2f:26:eb:e4:d0:ac:3e:22:1a:c5:fc:c8:
4c:ea:2c:26:7d:ef:55:05:c1:d9:0b:76:24:df:16:
94:36:0d:3f:4a:99:d8:9d:9e:55:63:cd:15:1a:23:
ed:e7:d6:2e:64:45:24:24:11:54:a7:a6:26:83:ce:
1e:9e:04:39:d5:63:11:14:49:cf:dc:cb:59:5b:ac:
43:ff:73:6f:44:82:a3:b5:3d:88:99:7a:05:15:6b:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:39:65:B2:AA:D1:48:D5:7F:1D:CF:D2:74:3B:77:52:A2:44:2A
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/W8I5ZbKq0UjVfx3P0nQ7d1KiRCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.241.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a0:fd:2b:0d:c3:df:0f:12:9c:f7:20:23:86:67:65:3f:e1:
cd:9d:f0:cc:cf:b1:18:58:13:99:93:bb:d4:65:fc:37:90:b7:
eb:5d:cc:6f:e0:96:4f:de:59:10:41:c8:e5:25:13:ad:53:28:
90:14:81:f2:3b:75:7f:c4:17:94:2a:62:12:15:bd:0e:c9:2b:
45:07:76:6a:c0:2d:b6:13:b9:8b:bc:58:5f:5f:04:f6:ec:0c:
a9:02:c1:84:24:52:6f:10:f0:84:71:bc:05:c5:b4:7a:88:68:
e3:8a:4d:4e:42:8f:ad:e6:c2:79:68:3c:da:91:28:f4:47:48:
87:72:1a:4f:de:55:b3:a4:ac:8b:59:e5:4e:ed:20:6c:37:f7:
5c:47:24:84:94:91:c2:87:7a:16:46:cd:9f:50:f9:96:8f:28:
90:f0:e8:d3:e7:71:6b:35:37:cc:0c:93:39:e5:0d:c7:7d:f8:
c7:c2:87:c9:67:bc:05:e4:47:4a:db:d6:74:26:77:05:7e:2c:
d5:a0:a3:44:4a:42:31:2d:49:20:38:4c:d0:d7:ae:53:19:f2:
3d:d0:80:01:5e:c1:f7:e2:2f:0f:b7:44:26:8f:cd:e7:04:61:
6b:fc:14:e5:d6:26:26:93:8e:6c:ee:36:39:aa:02:41:93:21:
ae:25:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:24 2025 by rpki-client