Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/jlaBQFdxBu8dON7FPAVA_cRVtIU.roa
File: jlaBQFdxBu8dON7FPAVA_cRVtIU.roa (raw, json)
Hash identifier: iKYAZfczMxJsUQrOFflSFnTfhQz6nzvN2DxFfBer0Ls=
Subject key identifier: 8E:56:81:40:57:71:06:EF:1D:38:DE:C5:3C:05:40:FD:C4:55:B4:85
Certificate issuer: /CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Certificate serial: 09ABBEB3
Authority key identifier: E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/jlaBQFdxBu8dON7FPAVA_cRVtIU.roa
Signing time: Sat 01 Jan 2022 14:55:35 +0000
ROA not before: Sat 01 Jan 2022 14:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56611
IP address blocks: 80.82.71.0/24 maxlen: 24
80.82.75.0/24 maxlen: 24
80.82.72.0/24 maxlen: 24
2a02:6c8::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162250419 (0x9abbeb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2963b30bb52efd98f0cee6324ff2f98a811b439
Validity
Not Before: Jan 1 14:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e568140577106ef1d38dec53c0540fdc455b485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:4d:62:b0:e0:84:31:be:61:30:d8:42:d5:
a6:55:b2:ca:26:00:d3:43:3d:54:03:2c:14:7a:f0:
b2:50:b0:f6:c0:a8:fa:2a:74:bf:15:dc:41:1c:e2:
52:ab:20:33:57:87:44:7e:a5:43:a5:9f:af:86:b8:
04:69:fd:df:66:a5:45:f7:8f:d5:c3:57:d6:6e:54:
71:18:fd:1e:aa:66:ba:64:24:db:07:dc:f9:62:87:
6d:50:6e:f5:66:df:25:d9:ba:2b:c9:9e:7f:39:f4:
95:8e:e3:f8:45:f4:5c:9b:f9:48:2b:35:8f:f6:20:
51:f5:d9:66:c4:2e:df:67:4c:e1:d3:3c:3b:5b:84:
98:1f:9f:52:a8:c0:14:8f:bb:10:ae:30:d3:a5:36:
70:5f:46:81:09:68:78:02:e8:ea:c1:2c:3a:36:f4:
98:b2:07:2c:18:d5:ae:d6:ac:7a:96:dc:c1:39:85:
5a:43:da:7c:40:13:66:99:81:b3:8a:6f:3d:9d:3b:
a3:81:40:b9:d4:18:1f:b9:2d:8d:52:9f:73:5a:7f:
78:36:c9:ed:82:83:b2:35:e3:97:e6:5c:e7:3f:6f:
d2:f2:db:7f:b6:47:17:48:54:92:2e:23:59:51:94:
be:95:15:53:8a:2b:e9:a2:31:57:46:72:a2:96:7f:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:81:40:57:71:06:EF:1D:38:DE:C5:3C:05:40:FD:C4:55:B4:85
X509v3 Authority Key Identifier:
keyid:E2:96:3B:30:BB:52:EF:D9:8F:0C:EE:63:24:FF:2F:98:A8:11:B4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pY7MLtS79mPDO5jJP8vmKgRtDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/jlaBQFdxBu8dON7FPAVA_cRVtIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/543504-7f2f-4727-9eec-86baaa0b27e0/1/4pY7MLtS79mPDO5jJP8vmKgRtDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.71.0-80.82.72.255
80.82.75.0/24
IPv6:
2a02:6c8::/33
Signature Algorithm: sha256WithRSAEncryption
16:95:0d:dd:24:d3:71:7e:15:62:d4:a8:7e:e4:5e:16:87:bd:
11:e4:84:69:5b:aa:6d:7f:a8:a4:d9:14:b6:6d:ec:6b:b6:84:
8b:21:fb:2c:fb:cb:73:e5:53:1b:d3:94:d7:fe:ea:74:a7:c5:
ea:2c:f0:a5:9f:bf:48:d5:43:89:9d:8c:5c:17:cc:b0:b0:ff:
80:3c:e0:40:d8:37:57:3a:b0:87:6e:a7:b6:7f:2c:95:a3:10:
00:0b:7f:05:b0:7f:43:51:fb:cb:47:56:88:cd:4f:c5:cd:ab:
f3:42:dd:01:56:4e:c3:e2:7e:80:35:5b:18:63:10:ef:40:b8:
ef:7e:f2:31:b3:d3:58:e5:db:a7:96:2c:14:40:3c:3d:51:81:
e0:ff:aa:21:2d:27:a9:18:ae:60:18:6a:85:94:0a:9c:ce:95:
37:5e:60:79:52:44:ed:d4:dd:28:e6:f8:fe:b3:d0:7f:08:d6:
e8:4b:47:12:60:e6:44:90:04:f1:5e:15:2f:e4:fc:9d:5e:45:
42:05:2e:e7:98:d4:7b:6c:1f:e6:47:4b:e6:10:da:5b:1a:eb:
14:80:7a:85:e8:53:53:58:7c:6b:69:18:2b:30:79:71:d6:91:
76:a3:ee:2e:52:c8:b3:b4:c8:04:02:bf:ed:6c:53:33:d2:61:
aa:f1:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:30 2025 by rpki-client