Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Cs8ItjxutsYgypORKeGsnRZQfTA.roa
File: Cs8ItjxutsYgypORKeGsnRZQfTA.roa (raw, json)
Hash identifier: W4zfqFJ3V9G99W/8rFth3Ip4WNSwlbFn6DYkXqvtu/M=
Subject key identifier: 0A:CF:08:B6:3C:6E:B6:C6:20:CA:93:91:29:E1:AC:9D:16:50:7D:30
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 01888B8E150918CC61303CC195C8526199A3
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Cs8ItjxutsYgypORKeGsnRZQfTA.roa
Signing time: Mon 05 Jun 2023 12:35:24 +0000
ROA not before: Mon 05 Jun 2023 12:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398781
IP address blocks: 94.176.80.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:8e:15:09:18:cc:61:30:3c:c1:95:c8:52:61:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Jun 5 12:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0acf08b63c6eb6c620ca939129e1ac9d16507d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:f9:b4:aa:df:04:bd:b8:65:69:58:b9:ed:
0f:62:26:e6:77:7d:8e:ee:25:4a:48:e9:3a:94:3a:
5b:8b:c7:ac:d1:58:6b:88:fb:13:0f:09:46:c5:69:
67:e6:99:8b:51:94:8a:d6:3d:af:9b:8f:74:b2:aa:
78:42:5d:66:6e:bf:7d:fb:e6:81:26:c7:e1:6c:3c:
79:57:56:e2:42:ef:af:26:57:76:f8:c8:9a:c7:13:
5a:3f:47:ef:fd:86:9e:f0:56:a0:4d:ca:86:e6:38:
d0:ea:eb:ec:37:71:72:7b:26:c6:a3:a7:e7:fd:3c:
a5:4f:73:d5:60:d6:e2:22:d7:3d:88:50:4f:21:67:
3d:fc:1e:46:f6:04:e8:79:e7:f3:7c:d2:30:30:10:
f4:86:7f:af:ff:e8:47:d0:d3:5d:b4:26:3c:1b:d3:
56:4b:f2:1c:ed:0f:16:02:6c:af:c6:d5:a0:87:33:
cf:fe:55:7e:20:10:bd:1a:8c:d9:90:2b:a9:8d:7f:
7d:e6:c1:35:d1:17:a3:9d:d2:6a:18:44:c6:63:f7:
f0:6a:a6:2b:44:94:2c:aa:63:2f:3e:05:c2:4c:d5:
9d:09:6b:26:0a:db:79:d1:23:0c:fc:e6:04:a0:0a:
86:ee:c4:47:d6:19:33:64:fa:e3:2d:21:1f:e1:70:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:08:B6:3C:6E:B6:C6:20:CA:93:91:29:E1:AC:9D:16:50:7D:30
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/Cs8ItjxutsYgypORKeGsnRZQfTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.80.0/20
Signature Algorithm: sha256WithRSAEncryption
51:88:da:39:0b:0a:f7:cc:14:9e:d0:c8:f8:6a:03:08:77:d8:
af:f7:9e:ea:10:c9:66:00:36:eb:e1:cb:aa:19:f4:d8:75:7a:
07:40:45:15:3d:e1:18:31:10:94:24:61:93:b0:3a:6c:da:dc:
64:f9:70:7c:83:72:31:0b:e0:8b:d5:65:ee:ec:bd:d3:fe:7b:
58:5a:8d:4d:38:76:8b:a7:f1:93:6b:76:bd:ae:76:eb:89:75:
68:6d:be:ea:ee:15:3e:aa:78:7a:30:c7:70:3c:c7:b2:f2:b6:
06:2a:33:e5:e6:2f:a3:08:79:f5:b3:ad:a2:6b:df:f4:02:2d:
e5:17:de:a2:c6:b3:b2:a8:12:cf:1e:f5:ef:b0:30:ae:03:25:
9d:45:57:9e:10:05:57:88:f9:c8:d5:b4:26:ce:b5:98:3d:61:
06:96:12:7f:1e:e3:ca:89:17:8e:11:37:5d:3f:62:76:96:20:
9a:ac:85:9d:43:c3:1c:9b:6d:3e:50:a5:cf:01:2a:52:30:57:
b3:a4:f2:42:95:cd:42:89:08:fb:8a:ac:14:fd:9c:0c:c9:d3:
d1:c1:b7:e7:28:df:91:1b:96:06:3b:6c:bb:bb:72:2a:99:4c:
2b:3d:86:cd:ac:f8:ef:5f:30:0c:e5:df:44:1c:08:e0:72:4c:
21:34:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:23 2025 by rpki-client