Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FUFiLjZiqxxN3Jn_xSoDrHjFn5A.roa
File: FUFiLjZiqxxN3Jn_xSoDrHjFn5A.roa (raw, json)
Hash identifier: SbSWdBWpRFBHXEk3OoX8yCOAToWsbL/zE9ZYv9JB/lc=
Subject key identifier: 15:41:62:2E:36:62:AB:1C:4D:DC:99:FF:C5:2A:03:AC:78:C5:9F:90
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4BD3A670C0E33C3AC5800ED0A7DE1
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FUFiLjZiqxxN3Jn_xSoDrHjFn5A.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29713
IP address blocks: 80.76.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bd:3a:67:0c:0e:33:c3:ac:58:00:ed:0a:7d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1541622e3662ab1c4ddc99ffc52a03ac78c59f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:fa:76:4a:63:19:4e:40:4a:2a:1e:96:ee:
c4:54:1b:ba:8e:0d:23:15:1f:36:64:bc:e5:1c:8c:
88:84:dd:a7:ca:0e:0f:d0:33:27:49:6c:cb:4e:65:
fa:05:b6:68:b4:65:10:40:b8:c3:22:65:a5:70:19:
37:66:bf:5f:b8:1d:19:0e:a7:90:e5:80:fe:95:98:
ca:48:dd:4b:32:24:1f:41:2e:49:60:fa:45:97:c4:
7a:2b:5e:62:03:fd:8c:56:f5:ef:34:c9:97:f3:a4:
df:40:9b:bf:10:a4:86:c8:bf:26:47:b4:fc:d5:4c:
8f:f6:81:ac:6a:a9:ce:1e:99:2e:43:ba:2f:ae:77:
db:b2:98:20:cd:b7:d6:85:86:7f:b6:8d:94:15:8a:
78:76:db:83:c1:b1:ac:9b:92:d6:f6:27:75:23:35:
db:48:49:15:91:a0:31:1b:bc:1b:fb:db:47:1a:ce:
e1:5e:92:e7:44:88:ed:34:4a:59:e9:37:fd:15:18:
8d:97:af:cb:07:17:b8:4e:45:8c:cb:41:06:9d:6d:
f7:6b:20:ae:cf:32:92:fb:ae:c3:2b:d9:0a:72:88:
51:d8:35:d8:ba:ea:c1:5e:71:fd:ea:8e:10:82:df:
09:91:7d:52:0c:e4:d2:1a:13:43:af:b3:0d:2e:2c:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:62:2E:36:62:AB:1C:4D:DC:99:FF:C5:2A:03:AC:78:C5:9F:90
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FUFiLjZiqxxN3Jn_xSoDrHjFn5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:29:4b:98:d2:b9:b1:cb:d8:bb:50:a3:6a:88:a0:d1:00:80:
75:c2:29:b2:08:04:32:63:a1:7a:ee:44:0b:83:36:4f:82:0e:
82:31:55:6c:19:11:1c:0e:6a:ef:cf:5a:63:18:e4:16:a0:5c:
6e:c6:59:c9:6a:97:f9:04:02:ed:cc:5f:d7:67:84:a1:0a:18:
ee:26:5f:2e:4a:3b:fd:93:08:26:15:a5:86:af:f2:f0:c4:af:
d5:18:78:33:bf:5b:c5:e1:1d:b8:93:32:2f:8a:c4:61:4d:8b:
39:d6:9b:57:20:b7:22:cb:e0:21:61:f2:3e:1e:94:45:95:d5:
c6:0c:e7:c8:31:85:e1:1f:7c:dd:bf:9a:77:95:d7:c5:7a:37:
30:48:96:08:7c:1b:a9:3c:f0:9c:96:93:d2:54:67:4d:d7:28:
0f:96:07:91:d7:dd:f8:05:96:3e:36:8c:e8:4c:94:d7:fc:92:
93:19:87:93:c1:ea:c2:0d:cd:96:36:a7:ec:bf:b0:9c:f1:67:
32:7e:dd:c7:42:86:06:fe:d1:88:c1:7d:93:5a:cb:49:36:0a:
a0:e3:39:26:e7:0f:6a:c1:82:2c:7e:58:8c:e3:2e:d7:0a:bd:
9b:a5:88:f4:3c:27:5e:6f:a9:ac:95:cc:a0:38:d9:ac:69:53:
17:2a:f8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:43 2025 by rpki-client