Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/Zo6sIXlqQg3kveGTmvaG8Uqk7hU.roa
File: Zo6sIXlqQg3kveGTmvaG8Uqk7hU.roa (raw, json)
Hash identifier: RnqqYRysm9sjw+vfwsMf5C5jDJJFtvxpzkNPzNHOabc=
Subject key identifier: 66:8E:AC:21:79:6A:42:0D:E4:BD:E1:93:9A:F6:86:F1:4A:A4:EE:15
Certificate issuer: /CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Certificate serial: 01856F9DF674658D0ACDE3A7945A919A54F5
Authority key identifier: CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/Zo6sIXlqQg3kveGTmvaG8Uqk7hU.roa
Signing time: Sun 01 Jan 2023 23:15:01 +0000
ROA not before: Sun 01 Jan 2023 23:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 80.68.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:f6:74:65:8d:0a:cd:e3:a7:94:5a:91:9a:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Validity
Not Before: Jan 1 23:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=668eac21796a420de4bde1939af686f14aa4ee15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:a5:22:0b:35:1c:a9:31:77:e3:fd:c9:a2:
8c:fb:d4:cb:4f:1c:79:62:d3:46:77:85:46:8b:94:
44:e3:e4:43:de:55:35:bf:c5:ba:0f:e3:36:32:fe:
4b:79:ef:0b:1e:94:02:51:6d:3f:2f:8e:26:4e:39:
de:b9:30:34:7d:3e:73:ec:58:52:05:2d:42:9d:fb:
6c:d1:5f:99:ac:82:eb:24:12:06:43:97:02:8e:7b:
ff:ca:25:7d:d4:47:6c:f1:10:4d:94:03:64:9c:6d:
0c:21:d4:94:f5:35:f4:74:7a:c0:39:24:65:f5:48:
24:e3:90:25:60:ca:5b:6c:30:84:87:a6:7b:26:97:
8a:7d:c0:cb:89:5e:ab:33:d1:60:f4:fd:de:1e:fa:
6d:03:02:38:fb:8c:72:bb:d2:4b:a4:2c:55:a6:99:
1d:e7:a0:f8:84:25:2e:ea:fe:5c:3e:67:92:64:ad:
c7:a5:f1:38:d6:15:c2:59:79:ab:7f:60:2b:72:e3:
9b:6f:1f:e7:1c:58:d9:a4:19:2b:13:ba:2b:4c:98:
d4:f4:92:65:6d:af:4a:a7:e6:81:f1:3a:01:9e:ea:
46:7d:8c:9d:f8:9e:77:46:d2:00:80:a5:64:5a:b4:
52:b3:ef:88:36:fd:b3:c7:58:34:ce:80:67:a3:d8:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:AC:21:79:6A:42:0D:E4:BD:E1:93:9A:F6:86:F1:4A:A4:EE:15
X509v3 Authority Key Identifier:
keyid:CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/Zo6sIXlqQg3kveGTmvaG8Uqk7hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/zF4owk3fULPGkLGV3Vc83T-OJps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.158.0/24
Signature Algorithm: sha256WithRSAEncryption
52:af:60:ce:cd:3e:36:94:14:25:f6:8f:b7:b5:52:d6:75:04:
4f:20:f3:5d:48:28:21:cd:60:4c:31:98:f8:4b:46:a8:97:e9:
39:f2:dd:a2:6b:9b:28:4f:9d:f5:34:c7:27:f7:62:ed:20:77:
5c:de:95:80:b8:43:4e:a5:2a:31:47:b7:86:cd:70:25:01:49:
88:05:c2:db:37:39:8e:00:a5:03:3a:ac:1f:68:44:e2:db:9a:
4c:92:b0:50:e6:af:f2:63:36:80:f8:a6:71:cf:35:d2:68:f8:
fe:f2:04:63:6b:3f:3c:c2:5b:3b:c8:0a:eb:2f:20:af:77:31:
87:8f:20:bb:55:ac:6e:db:31:d3:3a:f2:a2:86:73:61:08:38:
06:1c:bf:4a:ef:f5:ae:49:d0:f5:4a:1f:2e:c2:ff:a7:66:e5:
a1:a7:41:e0:91:31:e9:99:de:9d:7e:7c:2d:0a:6c:53:68:2d:
af:bb:02:f4:21:32:55:6d:1c:bd:c2:73:bd:58:7d:12:50:8a:
1e:42:c8:97:d4:8f:4c:a3:70:94:2b:98:00:86:23:05:2e:5b:
46:fe:6f:44:59:44:e7:3f:3e:6d:6b:a1:08:6e:85:2b:b7:d9:
94:e8:f0:2b:46:6a:1b:23:84:74:9f:83:92:cf:66:7d:c4:35:
76:66:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org