Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/4SAYFeu4J5iKyBK3hyaldzx9kUU.roa
File: 4SAYFeu4J5iKyBK3hyaldzx9kUU.roa (raw, json)
Hash identifier: gHW/SX12gxvwlgGeN7Y0obAhAq8aXDvFn5d0lBycmu0=
Subject key identifier: E1:20:18:15:EB:B8:27:98:8A:C8:12:B7:87:26:A5:77:3C:7D:91:45
Certificate issuer: /CN=8e13c2ae52bb38337357be221ebc175c4838c9e8
Certificate serial: 01856FE709AD2E1DE116F4B892A8174FD4E7
Authority key identifier: 8E:13:C2:AE:52:BB:38:33:73:57:BE:22:1E:BC:17:5C:48:38:C9:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhPCrlK7ODNzV74iHrwXXEg4yeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/4SAYFeu4J5iKyBK3hyaldzx9kUU.roa
Signing time: Mon 02 Jan 2023 00:34:50 +0000
ROA not before: Mon 02 Jan 2023 00:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12446
IP address blocks: 80.247.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:09:ad:2e:1d:e1:16:f4:b8:92:a8:17:4f:d4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e13c2ae52bb38337357be221ebc175c4838c9e8
Validity
Not Before: Jan 2 00:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1201815ebb827988ac812b78726a5773c7d9145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:be:2f:ed:75:e4:f4:e1:65:71:45:a3:a4:
6c:0b:90:b3:ca:1e:2d:1b:45:c8:c8:6d:82:bc:43:
a5:e5:c7:84:d9:34:e9:10:ba:b6:65:17:0c:62:f1:
b0:e5:be:95:4e:dc:96:80:6e:95:a1:b2:c7:3a:a3:
1c:00:ab:77:83:77:01:31:1d:66:2c:31:2e:1a:ff:
b4:ab:20:a6:89:e5:dd:b7:18:39:8b:b7:06:d1:9e:
32:5f:e9:3b:ef:fa:57:4f:d2:76:c5:c1:af:fc:0f:
43:3d:49:28:f2:a9:74:70:fa:58:11:ad:c5:65:f2:
eb:33:a0:2d:92:e9:4f:f5:f1:d6:2e:0f:ed:e0:ca:
ab:ca:a9:77:c6:65:f7:73:54:21:95:8d:eb:9d:64:
76:af:bc:39:17:5d:2c:fd:38:eb:a7:3e:16:1e:45:
e2:94:ec:02:81:ee:46:8a:3b:c1:21:ce:37:87:e0:
9e:a8:d4:c1:f9:d1:b6:c4:8f:dc:75:a5:26:59:c5:
20:e6:a9:e0:da:ee:16:f2:98:8b:c3:bd:a3:93:9d:
25:f4:88:f1:32:b5:8a:a0:8f:ac:a2:ef:58:fb:3e:
c5:42:20:54:38:01:57:c9:0f:8f:7c:9e:0f:e3:ce:
25:0d:b3:ed:e7:47:5a:fc:b0:6c:3c:40:2e:e4:88:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:18:15:EB:B8:27:98:8A:C8:12:B7:87:26:A5:77:3C:7D:91:45
X509v3 Authority Key Identifier:
keyid:8E:13:C2:AE:52:BB:38:33:73:57:BE:22:1E:BC:17:5C:48:38:C9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhPCrlK7ODNzV74iHrwXXEg4yeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/4SAYFeu4J5iKyBK3hyaldzx9kUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/jhPCrlK7ODNzV74iHrwXXEg4yeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.129.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f4:f4:b0:30:3d:77:b0:ce:67:17:46:82:03:56:c9:14:ea:
4e:34:d5:f7:59:16:ca:c7:ae:4b:13:40:6c:d4:37:64:60:0b:
db:8e:89:9a:ef:a6:11:52:e9:df:7e:ea:4b:51:0a:8e:bc:fc:
e8:0f:99:4b:3a:93:b9:f7:3a:3c:45:7e:9f:14:ed:3f:24:5f:
20:d5:1e:69:93:62:3b:07:0b:26:2f:32:85:0b:87:ed:c2:0e:
7e:0d:97:4f:00:fe:b5:d0:e7:79:06:8f:15:51:d9:3e:cc:a4:
5c:54:1e:17:7a:b6:07:0d:3e:4d:89:2f:09:2c:7e:de:1e:d0:
9f:b8:03:83:cf:5a:e2:17:34:6e:f0:e3:f7:ad:93:c5:ec:4a:
fc:b1:49:cf:42:ab:97:ec:57:8a:50:47:73:18:cf:ee:35:33:
49:99:ea:00:cb:8e:5a:af:23:34:11:ad:e1:d3:5d:03:ba:03:
fc:fa:ce:50:2f:09:95:d8:5e:a5:21:fd:bb:eb:9e:51:bf:8c:
a7:12:a5:f8:59:f9:11:ec:aa:24:c0:64:00:f2:70:08:d7:61:
5b:84:7e:6b:87:56:88:ef:67:b6:f8:e3:e3:44:51:eb:af:0e:
33:74:01:0d:fb:db:67:df:fd:2a:70:e2:7e:f1:0c:31:71:ff:
1a:05:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org