Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/XikCrP8aDXSzFuSupmqvVM24cfU.roa
File: XikCrP8aDXSzFuSupmqvVM24cfU.roa (raw, json)
Hash identifier: Hc619FKJXKLoaJQ3yZuIzMxO3rc5CkT9DMEWVgsfUhU=
Subject key identifier: 5E:29:02:AC:FF:1A:0D:74:B3:16:E4:AE:A6:6A:AF:54:CD:B8:71:F5
Certificate issuer: /CN=fde2dad864434ef5b4c5d453d2d53b3b66adde6f
Certificate serial: 01870E16C8BB61C0C4BF5AE1B1F3E65B19FA
Authority key identifier: FD:E2:DA:D8:64:43:4E:F5:B4:C5:D4:53:D2:D5:3B:3B:66:AD:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eLa2GRDTvW0xdRT0tU7O2at3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/XikCrP8aDXSzFuSupmqvVM24cfU.roa
Signing time: Thu 23 Mar 2023 10:49:46 +0000
ROA not before: Thu 23 Mar 2023 10:49:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 80.71.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:16:c8:bb:61:c0:c4:bf:5a:e1:b1:f3:e6:5b:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde2dad864434ef5b4c5d453d2d53b3b66adde6f
Validity
Not Before: Mar 23 10:49:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e2902acff1a0d74b316e4aea66aaf54cdb871f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:49:3b:ad:ed:e2:ec:d8:dd:a7:6e:08:ff:
49:0d:36:d4:f2:e7:e1:a5:b5:b2:6f:fd:2f:b6:d6:
92:6c:0c:93:e9:4b:b4:49:5c:da:b6:d1:e3:ad:a4:
47:ed:7f:ea:7e:94:5a:68:28:eb:bb:43:87:34:c6:
fe:29:df:c4:a6:6c:dd:e3:b9:c4:e2:67:17:85:65:
7e:fa:2f:0d:8f:97:11:b3:67:9a:19:c7:b9:38:93:
6c:3b:5d:7c:53:d6:bf:08:97:d6:b9:51:f5:d6:4f:
2e:48:f6:10:c2:51:14:02:73:4b:5f:99:04:ef:4e:
ea:f5:d8:52:b5:c8:91:6d:7c:2a:4f:16:33:d3:fd:
62:a9:1c:b3:0e:a2:32:71:8a:da:a5:3d:ed:6d:f6:
f2:c0:61:4f:a4:7d:27:4a:99:09:b6:c8:97:d8:a7:
7c:5d:6e:86:c7:d5:c1:70:16:cc:19:15:b9:41:45:
42:0d:09:2f:bf:07:16:b3:5b:80:44:3d:b5:b8:4d:
f4:ba:8d:76:ab:7d:85:e9:51:9b:21:b5:b5:0a:9d:
12:03:61:ab:c5:da:3f:26:ea:5f:4e:c8:d3:df:a2:
a0:67:4e:be:39:5f:3c:fa:44:6a:71:ab:e7:13:1f:
f7:b9:74:0f:00:af:d1:ca:e1:41:a8:6d:28:9c:90:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:02:AC:FF:1A:0D:74:B3:16:E4:AE:A6:6A:AF:54:CD:B8:71:F5
X509v3 Authority Key Identifier:
keyid:FD:E2:DA:D8:64:43:4E:F5:B4:C5:D4:53:D2:D5:3B:3B:66:AD:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eLa2GRDTvW0xdRT0tU7O2at3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/XikCrP8aDXSzFuSupmqvVM24cfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/_eLa2GRDTvW0xdRT0tU7O2at3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.157.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b7:34:ef:60:a6:99:a4:f8:21:52:c0:1f:16:b6:81:b0:e4:
48:f3:0c:46:9a:0b:b8:bb:31:69:1e:a2:42:c9:da:a2:fd:6c:
b9:80:fa:c9:07:0e:25:a7:3e:0e:fc:99:fd:da:16:d4:5b:6e:
0f:f3:01:4f:fd:53:30:ce:1f:54:9d:19:25:67:ca:1e:79:2a:
3e:4d:ec:07:38:76:c2:eb:79:b0:61:f0:cc:a5:e0:3b:9b:b8:
c5:e3:30:8b:59:1c:66:c6:c4:d4:e7:75:4d:87:b5:11:61:24:
a5:41:95:a1:d3:3a:e3:89:bf:4f:24:89:d1:f6:2b:f5:12:fd:
5c:df:90:87:b2:ba:fd:e2:85:d7:92:b4:0d:e6:70:a4:e9:a3:
bc:c7:6d:8c:88:e1:77:8c:38:7f:43:6e:6c:70:5e:82:71:b0:
82:e4:79:08:1c:f6:cd:26:32:7c:29:9b:35:6f:f9:ad:4e:b5:
60:b9:f2:93:51:a0:0f:8a:c2:e1:c2:2b:77:cb:9d:bd:ac:6e:
f6:12:5d:af:ae:31:12:2d:b1:aa:49:59:cd:86:6e:0f:00:df:
a3:bf:07:d8:e4:56:f5:97:d2:75:9e:76:3a:9e:33:4d:75:d5:
78:4d:ec:81:68:a0:63:38:43:ae:6f:67:67:3f:e3:ce:38:5d:
e1:96:14:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:05 2024 by rpki-client on console-fra.rpki-client.org