Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8bjHUV5QGqT7Izl2bDeQcgUZG1M.roa
File: 8bjHUV5QGqT7Izl2bDeQcgUZG1M.roa (raw, json)
Hash identifier: dLPonb2EMA7K3hGlGhe3R9V5Wm3E97peAhtrw4mXvTg=
Subject key identifier: F1:B8:C7:51:5E:50:1A:A4:FB:23:39:76:6C:37:90:72:05:19:1B:53
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018769E44DD7C91C6CBCA30E41E4C144B57A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8bjHUV5QGqT7Izl2bDeQcgUZG1M.roa
Signing time: Mon 10 Apr 2023 06:39:42 +0000
ROA not before: Mon 10 Apr 2023 06:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 82.118.25.0/24 maxlen: 24
45.80.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:e4:4d:d7:c9:1c:6c:bc:a3:0e:41:e4:c1:44:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Apr 10 06:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1b8c7515e501aa4fb2339766c37907205191b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:20:c3:b6:27:5d:01:5d:82:e3:ad:e3:08:
e0:93:66:08:a7:61:80:7f:dd:fa:fe:53:9f:00:f5:
ed:c1:67:ff:30:68:f2:26:75:19:83:c7:0d:d2:c9:
e9:70:41:22:a5:98:c4:00:0a:d5:f9:9c:a8:49:2f:
fd:dc:b2:60:27:c3:67:2b:bf:67:57:17:ed:d9:e0:
54:88:2d:9c:c2:2f:6e:3d:65:c5:dd:5b:6d:bd:8f:
16:c4:85:93:8d:3b:2f:ac:bb:da:28:3f:98:a8:26:
60:f4:e9:82:84:35:4a:28:8f:3f:5f:f3:9e:e6:94:
03:12:90:2b:79:10:40:d3:1b:22:f0:45:67:ed:03:
19:b0:c8:9f:44:18:dd:97:b1:a8:b9:2b:ed:31:8a:
ee:99:9d:e2:c1:43:43:bf:fc:09:bd:a9:00:f3:6f:
3b:97:43:d9:41:ca:4c:3f:99:b8:2f:db:88:42:c6:
33:82:12:5c:a1:e1:65:a9:6d:13:d1:09:95:11:39:
f2:9d:6d:bd:68:ed:85:2c:12:73:0c:da:9b:0a:c3:
5e:36:23:8a:27:1a:bd:ae:d2:ba:88:09:8f:04:34:
da:09:42:26:22:c9:8a:eb:fb:ad:2e:e5:b7:e1:94:
a4:94:57:e8:14:57:2d:c5:b0:96:b2:0d:9b:14:02:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:C7:51:5E:50:1A:A4:FB:23:39:76:6C:37:90:72:05:19:1B:53
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/8bjHUV5QGqT7Izl2bDeQcgUZG1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.7.0/24
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c6:96:60:c5:ef:a1:2e:24:34:26:4a:2f:60:79:a6:17:31:
0d:33:71:96:6f:35:8b:00:07:ce:7a:e3:b8:30:5f:73:ef:c3:
39:b0:19:fd:32:8b:43:81:72:6a:7f:69:f0:06:71:18:7d:97:
03:0e:1a:ed:a5:fb:a4:91:f7:87:89:f8:5a:3f:26:59:b3:04:
bc:1a:8e:ee:5b:dd:da:96:ff:f8:53:fc:03:d9:ec:cb:54:19:
5b:5c:7b:d8:3b:bc:66:3f:fc:6a:28:ed:e6:e9:0b:f5:b1:d2:
68:92:a8:18:ae:7b:24:d0:25:0c:4f:6a:55:5a:9c:7d:10:ad:
2c:7d:64:cb:41:cc:28:3d:7a:dc:33:37:91:22:da:d4:ec:2f:
42:0c:1a:75:7a:e6:12:b1:c9:c7:d5:de:58:7e:c7:6f:3c:47:
71:22:61:75:d8:8c:c1:bf:93:3c:92:da:1e:56:a3:4f:21:5e:
5f:24:15:e8:74:ba:0f:a0:24:1b:9e:61:b4:2b:20:6a:6f:e9:
33:8b:cd:53:ea:94:eb:07:0c:1c:9f:5f:1f:85:5d:d4:32:7a:
e0:97:49:47:d4:8b:ea:f5:74:5d:b4:d2:4f:0b:91:26:a7:29:
9c:02:1f:86:b3:2e:55:9d:2b:a3:09:48:39:94:53:fd:7d:c8:
65:31:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org