Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/F6p3JMOga--6sBlOYIOM8UgoDOk.roa
File: F6p3JMOga--6sBlOYIOM8UgoDOk.roa (raw, json)
Hash identifier: GinfGVdx43C9inr+s8JFou7Q+13GrJg6rMv63stsrdg=
Subject key identifier: 17:AA:77:24:C3:A0:6B:EF:BA:B0:19:4E:60:83:8C:F1:48:28:0C:E9
Certificate issuer: /CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
Certificate serial: 01856ED4AA91B71398B882F9D6B1EEF02704
Authority key identifier: 75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/F6p3JMOga--6sBlOYIOM8UgoDOk.roa
Signing time: Sun 01 Jan 2023 19:35:09 +0000
ROA not before: Sun 01 Jan 2023 19:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39915
IP address blocks: 80.75.211.0/24 maxlen: 24
80.75.208.0/24 maxlen: 24
80.75.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:aa:91:b7:13:98:b8:82:f9:d6:b1:ee:f0:27:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
Validity
Not Before: Jan 1 19:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17aa7724c3a06befbab0194e60838cf148280ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:8f:ac:ba:7c:ab:74:0c:e1:db:6b:97:0e:
ea:b3:4f:57:df:35:cf:ad:72:0a:f6:17:6c:63:15:
37:ce:fb:e5:1e:48:37:ec:75:aa:70:af:5b:79:cd:
34:c2:72:6c:de:3e:e4:da:5b:dd:d1:55:5c:58:de:
cd:b8:66:eb:21:2e:ad:c0:c6:9e:99:8e:2c:21:81:
fa:16:68:f1:87:65:e6:8b:80:af:f4:5c:b3:29:7d:
7a:57:6f:0d:bd:7e:9f:73:4c:8e:85:51:b3:76:fa:
b8:bb:76:24:c5:da:ae:6b:8d:9e:99:d3:e8:dc:c9:
1d:65:2d:31:43:05:da:7e:8c:24:d9:0d:79:5c:d4:
ed:6d:06:e2:98:ea:b1:23:89:4d:54:94:80:33:8b:
37:a9:3b:d6:25:42:8b:28:a8:1f:e4:3e:cd:eb:ed:
b4:25:8e:e2:18:0f:70:aa:00:88:53:b1:85:e5:5e:
e6:c5:7e:61:7e:f7:d6:e6:4b:95:e8:53:7b:09:d2:
df:c0:cf:aa:1d:7e:52:15:98:47:5d:1a:70:f2:0d:
ce:f6:23:0c:32:95:f2:5c:06:df:18:79:b9:30:7e:
ad:95:f4:37:ab:12:0b:e0:7b:55:ca:ed:87:bb:b3:
26:65:08:8a:d1:d9:29:eb:08:75:e5:dc:69:0c:ab:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:77:24:C3:A0:6B:EF:BA:B0:19:4E:60:83:8C:F1:48:28:0C:E9
X509v3 Authority Key Identifier:
keyid:75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/F6p3JMOga--6sBlOYIOM8UgoDOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/dTWej9kFdyf2YzpK_iMOMPfwLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.208.0/24
80.75.211.0/24
80.75.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:95:06:6a:43:5e:05:56:c4:70:6e:63:da:54:63:ca:7c:bb:
7f:ad:6f:d9:d5:a0:e8:0c:4e:ee:ca:e6:7c:d2:4b:dd:6f:25:
9f:58:4d:c7:82:da:5c:31:f3:db:53:4e:93:9c:5b:13:78:9c:
86:34:5a:de:21:5d:6e:2f:35:e2:1a:17:a4:f1:18:90:fa:cc:
52:93:16:ab:47:44:94:c0:04:57:95:5c:cd:76:14:3d:d1:43:
bf:21:f1:00:d9:24:44:3f:33:60:8b:0c:32:b4:7a:16:e6:22:
1d:94:a1:68:15:a6:21:27:bb:15:ef:8b:00:a1:66:c6:92:2c:
5a:e1:58:d4:81:35:f6:51:60:41:ac:b5:9f:bf:01:86:ae:10:
25:d6:28:fc:fc:34:d7:87:b2:76:f7:bc:3d:4a:ff:43:f7:45:
fd:bc:7b:f6:c8:a5:e4:fe:d6:a1:f8:3f:ac:c0:fc:75:f0:38:
30:35:23:00:20:f0:ea:c0:35:3f:e4:1c:6b:3d:34:d4:2c:90:
6f:78:4e:81:5a:68:34:a2:06:00:0b:a7:c2:39:17:70:df:95:
3b:95:52:81:76:39:9a:ba:a3:4c:8b:7b:02:b1:8a:4f:94:5a:
7f:9e:86:00:51:db:95:2c:9e:d5:a0:1f:c6:3b:cd:93:d9:07:
e2:f3:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org