Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/23a923-9489-4126-b059-f33d9ecef363/1/813GdgbuhCCIxW7L5mY1KQR-EU0.roa
File: 813GdgbuhCCIxW7L5mY1KQR-EU0.roa (raw, json)
Hash identifier: bL6LBzCUBX/Kss4qj+RyERlGgO2VlU+7Zi+OtqazfMw=
Subject key identifier: F3:5D:C6:76:06:EE:84:20:88:C5:6E:CB:E6:66:35:29:04:7E:11:4D
Certificate issuer: /CN=fa644ca7fed1b76ba6434ef3c349f8f628712f87
Certificate serial: 01857039894FC4C67B65F011820A7E044CEE
Authority key identifier: FA:64:4C:A7:FE:D1:B7:6B:A6:43:4E:F3:C3:49:F8:F6:28:71:2F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRMp_7Rt2umQ07zw0n49ihxL4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/23a923-9489-4126-b059-f33d9ecef363/1/813GdgbuhCCIxW7L5mY1KQR-EU0.roa
Signing time: Mon 02 Jan 2023 02:04:56 +0000
ROA not before: Mon 02 Jan 2023 02:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48107
IP address blocks: 80.71.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:89:4f:c4:c6:7b:65:f0:11:82:0a:7e:04:4c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa644ca7fed1b76ba6434ef3c349f8f628712f87
Validity
Not Before: Jan 2 02:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f35dc67606ee842088c56ecbe6663529047e114d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:89:a5:dd:86:47:5c:ed:62:e7:c2:6e:fe:
cb:0c:f5:0e:47:89:78:70:db:a3:05:21:d4:3c:56:
67:70:39:37:82:b5:74:1b:ab:e4:e5:d2:25:ba:04:
aa:6c:a3:c5:95:ff:7c:02:6b:4d:2c:e5:f0:67:43:
46:f3:0e:8f:b4:09:f6:ee:12:f6:60:52:dc:62:cb:
eb:27:78:0b:e2:8e:f5:e5:5e:a5:d8:55:c7:17:e3:
2f:4c:3d:a2:03:8a:c6:65:6e:38:3c:84:4e:22:36:
e0:72:94:38:de:c3:4f:86:92:cc:68:9d:ef:80:bf:
10:c9:12:a9:9d:19:37:34:c4:45:bc:87:66:38:90:
ae:7e:d0:10:35:39:eb:07:4a:fb:b4:97:e8:d8:18:
64:b5:e3:26:aa:c7:4e:42:11:12:c5:16:c2:3b:d1:
e1:15:fc:2a:d9:d4:fc:f2:b7:76:5f:e3:2c:f5:1f:
aa:45:be:9d:3c:cd:e4:9f:67:74:b8:7a:27:01:d3:
41:19:1c:4e:8b:16:cc:b8:a9:d2:f6:b0:80:96:c7:
44:92:43:0a:5f:5c:85:c0:67:9c:5a:0d:ae:46:2a:
53:d1:4d:af:55:da:11:e8:03:e1:a1:08:fb:cf:97:
1e:61:50:da:14:be:02:cf:cc:f7:93:27:2c:60:fb:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:C6:76:06:EE:84:20:88:C5:6E:CB:E6:66:35:29:04:7E:11:4D
X509v3 Authority Key Identifier:
keyid:FA:64:4C:A7:FE:D1:B7:6B:A6:43:4E:F3:C3:49:F8:F6:28:71:2F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRMp_7Rt2umQ07zw0n49ihxL4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/23a923-9489-4126-b059-f33d9ecef363/1/813GdgbuhCCIxW7L5mY1KQR-EU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/23a923-9489-4126-b059-f33d9ecef363/1/1-mRMp_7Rt2umQ07zw0n49ihxL4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:07:42:3f:0c:89:3e:04:45:5f:63:b7:12:67:11:45:80:43:
03:61:ef:46:5b:6d:1f:32:31:55:d5:19:49:17:1b:7e:74:5a:
b5:9c:80:84:d9:be:d5:ba:76:c0:87:a0:2e:63:97:ca:2e:6a:
c9:8a:69:90:59:9c:df:eb:cf:bf:15:f0:91:07:19:ff:bd:6b:
e7:40:65:81:69:02:c8:9b:25:d9:4f:3d:ba:6b:15:5a:63:cb:
1e:d6:c0:64:67:2e:eb:ae:84:76:25:06:22:7c:93:e8:d8:66:
d0:a2:cb:0b:ee:d3:8c:de:7b:be:b1:d5:2c:a7:4c:4d:69:0e:
29:2f:aa:30:be:43:ce:44:25:7d:b5:e5:ed:36:6a:0b:97:80:
c1:99:16:9f:e6:3e:8e:5f:25:aa:aa:99:11:bf:3e:24:fb:7e:
0c:2d:af:a1:21:30:8b:3f:92:c7:c7:2f:bf:84:b8:62:cb:a5:
f0:b1:9f:09:31:fe:b1:cc:4a:e3:68:61:e1:ce:dc:70:f7:e4:
88:10:23:14:c7:e5:a7:ba:4c:48:a4:df:d3:ed:1c:cc:49:5b:
4a:e0:5b:23:8c:b4:ec:3a:91:92:c6:86:f2:3b:4a:c1:98:be:
2d:32:51:f8:96:3b:1d:e4:ef:af:63:50:bc:96:1f:23:28:f9:
da:9c:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org