Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/x78UlwL9bWh4uXC9J7EKf7OoGzo.roa
File: x78UlwL9bWh4uXC9J7EKf7OoGzo.roa (raw, json)
Hash identifier: +sBCUs03j/yUK7AAhYRReAejR24ONSkKpgCaKSQ2eGQ=
Subject key identifier: C7:BF:14:97:02:FD:6D:68:78:B9:70:BD:27:B1:0A:7F:B3:A8:1B:3A
Certificate issuer: /CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Certificate serial: 018CC5DBF4E2961198E978ED6719E14F46C9
Authority key identifier: D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/x78UlwL9bWh4uXC9J7EKf7OoGzo.roa
Signing time: Mon 01 Jan 2024 16:29:35 +0000
ROA not before: Mon 01 Jan 2024 16:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 80.208.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f4:e2:96:11:98:e9:78:ed:67:19:e1:4f:46:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7bf149702fd6d6878b970bd27b10a7fb3a81b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:16:b9:85:55:f1:1a:30:42:2e:e6:a8:4b:
f2:5b:8c:6f:8f:2e:af:9b:47:3c:b7:b5:c7:c8:f4:
a9:26:98:6b:46:b6:76:69:e7:b5:83:47:fc:79:e3:
72:f9:5e:f0:fc:b3:88:4b:32:b3:96:88:48:e4:28:
8e:f9:62:bb:c2:b0:1b:b4:b3:26:86:ee:81:fd:f2:
bf:de:ee:3d:b6:6d:49:b9:33:db:fd:4c:f9:d8:22:
bf:c3:26:55:bf:1f:85:13:db:25:8e:9e:97:d4:e1:
e6:9b:d9:1b:e8:87:57:27:80:ae:6b:27:e7:b6:4b:
88:af:24:7b:41:90:74:66:af:60:2d:a1:3e:07:d3:
da:34:ea:59:c0:6b:8c:d7:4b:9c:f5:7d:5c:af:06:
55:d9:d4:47:c1:a0:1d:14:6d:54:f8:04:b0:b6:eb:
a6:76:2e:e9:d6:f8:7b:82:55:5e:30:33:ad:ba:2f:
f4:40:d1:c0:3d:2e:19:b7:d0:b3:45:9e:3e:4b:f5:
1f:05:b4:ca:72:54:0c:f7:0b:1b:98:6a:40:7c:0a:
e9:c3:ba:43:ac:68:76:53:38:ef:da:d9:15:dc:8e:
aa:35:1b:7e:9d:4f:54:36:c6:28:bc:93:41:ed:16:
76:07:31:37:74:29:a5:54:4e:64:d3:99:77:88:e8:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BF:14:97:02:FD:6D:68:78:B9:70:BD:27:B1:0A:7F:B3:A8:1B:3A
X509v3 Authority Key Identifier:
keyid:D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/x78UlwL9bWh4uXC9J7EKf7OoGzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.208.221.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d7:a1:ed:49:56:66:75:0a:94:d1:54:7b:9f:86:7f:e6:09:
48:2e:5c:38:4d:bd:c2:d9:65:49:61:d6:f8:ad:31:35:c6:6e:
94:be:74:bd:59:2f:82:14:a8:9e:5f:74:ba:78:51:e2:77:1a:
1c:af:d9:84:9b:4d:36:94:32:9d:ab:f9:2f:d3:ea:3d:d2:4b:
e4:e3:3e:60:0f:9c:26:3a:e8:73:66:ca:91:91:f2:9a:2f:b1:
49:7b:c4:aa:02:b3:2e:75:ea:a0:dd:ac:d0:9e:a1:5d:b0:50:
b9:bd:9a:7d:67:21:08:ea:4f:99:86:38:f6:65:99:2d:7c:75:
46:04:9c:a6:ce:b8:ed:b7:d9:c0:62:f3:4b:e9:e3:2a:ad:08:
df:b2:c0:3e:72:ea:67:fe:33:a6:d5:62:40:fb:ad:80:29:a4:
86:ce:ad:33:5d:e8:b9:ec:fc:db:ad:93:1d:a6:28:71:ed:65:
01:ce:a9:58:d8:1e:a8:70:f1:86:b5:3a:d5:10:2b:10:b0:4e:
9f:dd:da:32:28:c0:4a:8c:ae:bd:2c:f1:55:b1:62:58:2c:99:
77:b8:c9:96:a3:b1:d3:2b:3d:fe:cc:d3:a9:88:50:a8:0e:bc:
3b:70:ad:bd:18:41:97:b9:07:d9:27:41:fe:12:82:7e:69:a2:
21:ee:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:27 2024 by rpki-client on console-ams.rpki-client.org