Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/EXpJpVIG0Q8WQkYI9ud2MzLW2OI.roa
File: EXpJpVIG0Q8WQkYI9ud2MzLW2OI.roa (raw, json)
Hash identifier: obTCOI/GkbghUq/qj+1JPNwfXeujL90+NENFJwwQ5kc=
Subject key identifier: 11:7A:49:A5:52:06:D1:0F:16:42:46:08:F6:E7:76:33:32:D6:D8:E2
Certificate issuer: /CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Certificate serial: 0185738FEF7E6356C7CFECF4DEE3F2FD151F
Authority key identifier: E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/EXpJpVIG0Q8WQkYI9ud2MzLW2OI.roa
Signing time: Mon 02 Jan 2023 17:38:10 +0000
ROA not before: Mon 02 Jan 2023 17:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56611
IP address blocks: 80.82.71.0/24 maxlen: 24
80.82.75.0/24 maxlen: 24
80.82.72.0/24 maxlen: 24
2a02:6c8::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:ef:7e:63:56:c7:cf:ec:f4:de:e3:f2:fd:15:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Validity
Not Before: Jan 2 17:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=117a49a55206d10f16424608f6e7763332d6d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:10:75:05:79:26:a1:bb:e1:7e:71:b6:d7:
f2:7b:57:8e:bc:7e:a1:44:e9:22:09:56:a8:f8:2b:
12:aa:db:89:b4:e0:ee:9b:83:62:0d:8b:30:f2:2f:
c0:0c:b4:3c:aa:f3:7b:d7:74:c0:bd:fa:b6:b5:f8:
c3:24:fb:b8:75:40:59:8a:f2:b2:47:1b:ba:1f:6e:
63:7d:87:0d:62:cf:7b:33:39:20:85:d2:77:07:fe:
9b:bc:d0:a6:14:21:de:fe:9f:65:b5:a3:e2:bd:0a:
07:18:60:dc:f8:94:58:fb:b2:63:79:03:15:a5:7a:
ed:80:44:bd:1d:93:39:93:e3:47:b2:1b:8a:1b:2a:
25:88:4e:66:cd:46:e4:ed:a0:7c:3f:75:46:ba:f1:
e0:47:91:e9:89:f6:78:99:e5:22:6a:da:dd:66:6a:
78:bd:e8:90:72:be:e2:1a:f4:01:75:db:ff:f5:ff:
91:65:70:08:6a:94:7b:e2:7b:ef:a7:f8:8e:83:d7:
61:30:b1:85:34:41:af:f6:0a:00:29:e1:31:41:8c:
ef:d9:f6:05:29:42:69:09:7d:f8:69:16:c0:b7:c4:
ad:80:45:b0:46:bf:65:39:73:86:f7:fb:48:7c:fc:
37:76:cc:86:ec:34:cc:32:8d:bc:58:e2:af:c7:b7:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:49:A5:52:06:D1:0F:16:42:46:08:F6:E7:76:33:32:D6:D8:E2
X509v3 Authority Key Identifier:
keyid:E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/EXpJpVIG0Q8WQkYI9ud2MzLW2OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/4pY7MLtS79mPDO5jJP8vmKgRtDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.71.0-80.82.72.255
80.82.75.0/24
IPv6:
2a02:6c8::/33
Signature Algorithm: sha256WithRSAEncryption
65:4b:3d:3c:f7:45:0d:fe:73:00:d4:77:86:16:a0:b7:2d:8e:
6f:ae:62:e0:23:20:d7:d4:78:02:54:51:0d:5d:e7:1a:b8:13:
2f:3d:b2:07:52:1c:33:be:4d:94:0a:6a:f7:c4:7b:79:81:ca:
57:95:d6:77:db:95:28:52:b0:0a:ef:28:a8:b8:1b:2d:63:9b:
91:5a:4e:d1:7b:e0:3f:e9:54:59:95:e4:7b:53:89:b5:10:8b:
50:b7:67:a2:e0:99:f9:3f:05:12:09:5f:c7:94:96:f9:1d:34:
93:e6:91:a0:14:09:a7:07:7b:fa:a0:1c:bf:cd:e4:ca:35:9f:
0f:33:ac:a2:90:fc:b1:34:41:e2:1f:15:5d:05:4b:e2:d9:cd:
77:20:01:59:a4:a3:18:7b:5e:e7:51:30:e0:44:c3:3a:5b:38:
f6:cc:97:96:8b:94:49:c1:4c:42:66:ee:fc:10:77:7a:e5:4d:
c8:01:1e:8c:1d:2a:d3:4d:c9:cb:bf:97:de:8b:2e:05:13:e0:
56:44:72:b9:f1:5e:4c:0f:59:06:66:09:13:e1:38:5c:a4:e1:
08:be:48:31:71:00:d5:ed:0c:68:27:b8:bf:00:2a:aa:db:44:
7d:2c:c4:ad:15:16:b3:8b:f0:8e:fd:39:82:ff:ec:c8:ce:60:
f8:85:2e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-ams.rpki-client.org