Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/oTsqvWPeh1wWWtoV3bFQ_LiBB30.roa
File: oTsqvWPeh1wWWtoV3bFQ_LiBB30.roa (raw, json)
Hash identifier: OklEPrQdvXsdsvKReidSw+m9H5Gfc2ERPgbmFjDs9vc=
Subject key identifier: A1:3B:2A:BD:63:DE:87:5C:16:5A:DA:15:DD:B1:50:FC:B8:81:07:7D
Certificate issuer: /CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Certificate serial: CA3850
Authority key identifier: CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/oTsqvWPeh1wWWtoV3bFQ_LiBB30.roa
Signing time: Thu 21 Apr 2022 23:19:33 +0000
ROA not before: Thu 21 Apr 2022 23:19:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 80.68.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13252688 (0xca3850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5e28c24ddf50b3c690b195dd573cdd3f8e269b
Validity
Not Before: Apr 21 23:19:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a13b2abd63de875c165ada15ddb150fcb881077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:26:19:cd:1a:f8:87:ca:c5:62:d4:86:a2:
b1:40:3c:de:d7:63:6c:7f:cd:66:c3:26:4e:6e:55:
86:07:3e:16:c4:6e:bc:53:83:37:73:2c:8a:10:34:
1a:bc:c7:6d:0b:83:f3:1b:49:58:ff:63:3e:cb:7b:
3d:01:59:ed:a4:89:06:a9:18:f6:28:0b:aa:b4:36:
a2:72:99:48:74:53:22:79:08:9f:22:cc:e4:81:61:
d4:a7:1e:f0:e0:1f:48:dc:6b:4d:bd:22:f4:87:24:
c6:14:42:bb:ad:84:6a:93:a2:e9:66:73:a0:64:a9:
57:a9:5f:bd:47:51:b9:df:ab:05:90:ad:90:c1:b6:
4e:05:cf:da:15:02:bf:0c:64:4e:4e:a4:14:d2:e8:
8f:b2:75:71:70:2d:94:10:1b:c7:5f:e0:91:41:0c:
04:8d:cd:84:c3:1a:c3:14:0b:9e:ad:a3:b5:fc:84:
a9:73:21:c5:3d:ad:ff:e4:6e:4d:3c:1c:4b:4d:6d:
1c:67:c6:93:27:7f:c1:f0:a3:cd:c1:fd:6a:41:ec:
44:aa:89:5b:42:9d:2f:d5:7d:5a:17:55:31:c8:6d:
1a:3c:28:bf:a5:21:17:6c:49:1d:10:2d:57:87:bf:
76:dc:bb:b0:75:d4:73:52:7c:90:15:88:fd:b0:51:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:2A:BD:63:DE:87:5C:16:5A:DA:15:DD:B1:50:FC:B8:81:07:7D
X509v3 Authority Key Identifier:
keyid:CC:5E:28:C2:4D:DF:50:B3:C6:90:B1:95:DD:57:3C:DD:3F:8E:26:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zF4owk3fULPGkLGV3Vc83T-OJps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/oTsqvWPeh1wWWtoV3bFQ_LiBB30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/31faf6-7c6b-4e53-9193-ad6dfc58c944/1/zF4owk3fULPGkLGV3Vc83T-OJps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.158.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1a:8a:27:51:f5:94:92:d6:a0:37:7f:44:c4:e4:f3:7f:64:
3c:4c:77:93:71:b4:49:33:eb:01:c2:59:d2:f1:67:34:30:db:
47:50:bb:1f:d1:cd:c5:9a:59:44:7d:4a:ae:de:76:b8:9f:0f:
7f:d3:7f:aa:82:a2:27:48:d6:ba:d3:b7:3e:e5:bf:ab:70:17:
21:3d:ca:dd:03:77:76:87:4d:62:45:ae:05:6c:32:91:90:74:
6a:14:f8:35:9b:6c:31:2d:07:f2:9e:d9:f7:99:03:38:d0:0e:
78:7e:e6:6c:2a:01:fd:a0:33:68:8a:4f:83:5b:b2:0e:bf:d6:
39:04:b8:21:42:77:20:a5:92:a2:bf:de:84:15:2e:9f:23:23:
ae:54:18:78:8c:88:50:b2:b2:48:f7:c4:57:e9:ed:14:82:16:
6e:e7:0f:51:b4:e3:4d:1d:8e:68:3b:73:5c:3c:23:d6:fd:5e:
0d:6d:7d:e3:e0:f6:12:9e:81:f4:69:cd:38:db:e5:ee:61:51:
4b:22:15:ac:6b:0a:1f:7f:50:87:b7:39:7d:d3:c3:dd:d4:32:
89:cf:53:08:c5:8e:52:90:32:60:fd:c0:8d:93:e5:11:e5:ae:
9c:4f:bf:3d:63:79:74:ca:c1:1d:dc:cc:2e:e1:4a:26:bf:b6:
46:be:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:46 2025 by rpki-client