Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/JIS0Gl4Mk01HDsEQCt2zPb3QZKQ.roa
File: JIS0Gl4Mk01HDsEQCt2zPb3QZKQ.roa (raw, json)
Hash identifier: iivuZWwT8XuE55NhJOyOUq8+ywK+3qPFvfQK6rXdqe0=
Subject key identifier: 24:84:B4:1A:5E:0C:93:4D:47:0E:C1:10:0A:DD:B3:3D:BD:D0:64:A4
Certificate issuer: /CN=b1ee518a002bf4ab73ff89232650f0529897d9ee
Certificate serial: 01857094F43345111CD6FA8CCD3E0001DC3C
Authority key identifier: B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5RigAr9Ktz_4kjJlDwUpiX2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/JIS0Gl4Mk01HDsEQCt2zPb3QZKQ.roa
Signing time: Mon 02 Jan 2023 03:44:48 +0000
ROA not before: Mon 02 Jan 2023 03:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43833
IP address blocks: 80.254.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f4:33:45:11:1c:d6:fa:8c:cd:3e:00:01:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee518a002bf4ab73ff89232650f0529897d9ee
Validity
Not Before: Jan 2 03:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2484b41a5e0c934d470ec1100addb33dbdd064a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:ad:b9:b4:ab:4e:d9:d2:8f:59:6e:dc:c5:
bc:11:37:a5:31:7c:64:38:2e:a2:d8:34:cc:3b:3a:
5a:27:f7:7f:36:7a:5e:b5:3f:14:63:34:15:a8:cb:
4c:18:e4:64:6b:d9:68:f8:f8:98:28:59:69:b6:31:
02:cb:e8:6a:37:63:f9:eb:1e:77:5f:ea:fb:9f:cd:
61:49:c5:8b:f0:99:d3:f1:b4:7c:b9:c1:57:75:f5:
07:19:87:83:a2:39:25:75:96:7f:73:5d:75:64:4e:
0e:23:6f:ac:df:48:b0:5a:1f:f9:4e:4f:aa:9b:f4:
e6:2b:2d:d2:a0:67:53:dd:51:b9:13:d6:e6:a2:00:
ff:34:ea:ec:a2:78:ff:0d:29:8a:ce:0f:7f:fd:d9:
bb:9e:cb:46:da:2f:db:0b:7c:43:68:8a:b1:cc:01:
57:e8:12:08:d1:00:34:cb:d5:a6:8b:b3:74:94:6e:
c4:27:b0:8f:2f:ca:8c:de:d3:70:e5:bf:0f:6a:c3:
48:6f:c2:82:2f:a1:1d:2a:7e:04:c7:12:47:4d:79:
c2:db:68:19:41:49:d4:37:5d:58:77:51:b5:fd:23:
ac:b0:5b:d3:33:80:9f:67:f7:aa:06:fd:d8:69:cf:
9e:ea:0a:aa:d1:77:aa:92:26:a4:46:82:c0:64:8f:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:B4:1A:5E:0C:93:4D:47:0E:C1:10:0A:DD:B3:3D:BD:D0:64:A4
X509v3 Authority Key Identifier:
keyid:B1:EE:51:8A:00:2B:F4:AB:73:FF:89:23:26:50:F0:52:98:97:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5RigAr9Ktz_4kjJlDwUpiX2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/JIS0Gl4Mk01HDsEQCt2zPb3QZKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c2d86-df24-4340-8301-4a0074c72d29/1/se5RigAr9Ktz_4kjJlDwUpiX2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:0f:43:3c:ed:60:a3:e0:02:c3:76:05:7b:55:29:3a:9f:63:
3b:b8:8c:39:93:56:e3:7d:e7:b4:9e:63:64:3d:3e:bb:ce:3f:
28:b7:c4:54:8e:b1:33:1b:25:fe:ba:cc:2f:e7:57:b7:4c:d0:
9f:e4:f2:09:5d:28:0f:78:05:96:b7:0f:5b:c1:d7:3b:f7:1c:
56:12:5c:26:ac:8b:53:2c:3b:b6:9b:f2:f1:79:14:2b:9f:62:
aa:1d:c1:3b:90:a7:ae:ac:bf:2e:a1:6c:93:85:4c:c8:8c:16:
db:20:14:1f:30:48:a4:ee:45:43:08:cd:9a:35:fe:e5:8d:da:
bd:18:2e:dc:be:10:b0:42:f7:45:70:e9:d4:4e:ae:e6:e2:7e:
a4:0c:17:a7:f8:f9:2f:c5:b4:f8:3c:68:e6:18:56:94:1b:06:
cc:8b:40:a4:48:51:35:c9:5d:f8:70:53:5a:e9:bd:79:16:bd:
0f:11:76:b2:bd:6c:d0:2b:dc:07:43:d8:19:6b:db:81:44:52:
98:04:67:af:ea:a6:c2:0f:de:3b:19:2b:12:a3:ad:9d:45:8c:
64:33:03:b1:db:f2:6b:e2:3f:5d:a5:fa:0e:ae:a0:f4:03:9c:
6e:8e:cd:09:d4:3d:ec:2a:0f:8f:f9:fa:b2:49:d1:7e:28:f4:
2e:d2:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:23 2024 by rpki-client on console-ams.rpki-client.org