Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/ONA6Xjnx2tAAu9Reov_MzL4udyw.roa
File: ONA6Xjnx2tAAu9Reov_MzL4udyw.roa (raw, json)
Hash identifier: bcISCXGodcJTcmop73kvwCuATTfc4qktte685yGuReA=
Subject key identifier: 38:D0:3A:5E:39:F1:DA:D0:00:BB:D4:5E:A2:FF:CC:CC:BE:2E:77:2C
Certificate issuer: /CN=e628ea452fcb72a04cb696fb4ca25e95c26e49c6
Certificate serial: 018CC42563672693597E814B9E1AC92B1F0F
Authority key identifier: E6:28:EA:45:2F:CB:72:A0:4C:B6:96:FB:4C:A2:5E:95:C2:6E:49:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ijqRS_LcqBMtpb7TKJelcJuScY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/ONA6Xjnx2tAAu9Reov_MzL4udyw.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57878
IP address blocks: 80.68.149.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:63:67:26:93:59:7e:81:4b:9e:1a:c9:2b:1f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e628ea452fcb72a04cb696fb4ca25e95c26e49c6
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38d03a5e39f1dad000bbd45ea2ffccccbe2e772c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:33:91:90:65:e1:51:71:dc:33:bd:cf:89:
a2:ab:62:66:d3:c7:13:fa:da:54:f0:ee:b4:a0:97:
53:e2:42:a5:e0:3a:ea:c8:12:50:fd:ff:45:fb:ce:
99:d2:d4:39:eb:4b:03:ce:41:68:26:58:89:4d:3a:
99:b9:03:62:e9:e2:36:68:ed:00:97:7d:2b:f6:c1:
3a:12:0b:d6:b9:4e:65:88:1b:d5:46:c3:8b:47:2d:
7a:1b:69:6f:e2:dc:26:32:74:61:f5:95:e2:03:20:
62:50:6f:33:25:51:80:2b:1f:23:f2:c0:05:d3:a4:
fa:26:ba:8a:e3:9c:91:66:ee:87:ed:2c:03:23:04:
f3:e2:60:a6:e7:a2:f1:f3:d5:db:8c:fe:a8:b5:a7:
9b:0a:7e:c3:ad:cf:31:2b:9e:4a:7b:48:14:ec:83:
9c:dc:be:aa:82:b7:97:8b:96:3d:50:84:d4:76:71:
01:27:dc:d4:83:d3:1a:d6:42:77:80:b2:b2:6b:2e:
b1:6e:83:18:28:0a:ab:d6:08:f0:7f:5b:28:66:a5:
b0:75:8b:db:3a:c7:ba:d1:7b:dd:89:04:0a:4b:de:
90:8e:18:12:ac:8e:19:8e:37:ea:e8:01:eb:a7:ce:
37:51:51:1c:4f:73:d2:91:17:aa:34:60:82:77:e2:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:3A:5E:39:F1:DA:D0:00:BB:D4:5E:A2:FF:CC:CC:BE:2E:77:2C
X509v3 Authority Key Identifier:
keyid:E6:28:EA:45:2F:CB:72:A0:4C:B6:96:FB:4C:A2:5E:95:C2:6E:49:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ijqRS_LcqBMtpb7TKJelcJuScY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/ONA6Xjnx2tAAu9Reov_MzL4udyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/5ijqRS_LcqBMtpb7TKJelcJuScY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.149.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d4:91:85:75:d5:cc:a2:b1:03:81:5f:ab:63:cc:ac:ce:bb:
44:65:8b:0e:07:d1:28:e1:8e:84:40:f7:60:7c:14:c3:a8:00:
5d:ca:26:9d:6b:32:c2:ac:8b:e9:61:1d:75:1e:12:72:6b:55:
30:ef:cc:16:3f:e6:2a:8d:5c:38:93:97:72:11:18:02:c2:77:
2d:7e:3e:a0:fa:b9:26:cd:e6:33:50:f1:3d:85:ea:a5:50:2e:
94:48:d7:3b:ce:db:dc:a4:b6:4a:48:32:c7:69:89:7d:f4:fa:
d4:98:07:5e:52:35:ad:8e:c9:5a:ef:4d:57:ca:9a:ba:fb:2f:
65:fb:45:de:33:e8:8d:ce:cc:e6:59:f1:4d:4b:db:63:f4:5d:
d0:7e:43:3c:44:c7:ef:c0:72:ed:c4:ce:7e:d7:19:d8:10:f1:
d8:41:23:0b:bc:25:02:dc:7a:37:a0:ff:40:2d:9a:75:40:52:
c4:85:0c:49:39:99:c9:ea:b3:5e:9f:c1:f6:c0:69:77:65:2c:
cc:b2:a1:50:8e:f1:8f:4b:81:9f:5e:89:06:d9:73:1d:48:f5:
fe:f7:f1:25:9c:26:bd:9b:27:fb:15:91:3c:96:3e:23:db:59:
b7:55:2f:4a:ba:ce:58:f6:44:db:cc:6b:6f:a9:db:40:fc:99:
38:5d:cf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:28:26 2024 by rpki-client on console-ams.rpki-client.org