Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/jHbV24NyzLjP7OVVpAi3ExtPeWc.roa
File: jHbV24NyzLjP7OVVpAi3ExtPeWc.roa (raw, json)
Hash identifier: Tt90ez5wJIUlvKGlrPr17V2ZyVzQpuCSUWV4WSrtt+A=
Subject key identifier: 8C:76:D5:DB:83:72:CC:B8:CF:EC:E5:55:A4:08:B7:13:1B:4F:79:67
Certificate issuer: /CN=e188d5c34c4c1e1768fd8afc8d0659c710e1111b
Certificate serial: 018CC6B7878A5EC121323F3C498923F5690A
Authority key identifier: E1:88:D5:C3:4C:4C:1E:17:68:FD:8A:FC:8D:06:59:C7:10:E1:11:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YjVw0xMHhdo_Yr8jQZZxxDhERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/jHbV24NyzLjP7OVVpAi3ExtPeWc.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200088
IP address blocks: 80.68.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:87:8a:5e:c1:21:32:3f:3c:49:89:23:f5:69:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e188d5c34c4c1e1768fd8afc8d0659c710e1111b
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c76d5db8372ccb8cfece555a408b7131b4f7967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:1e:5a:06:cb:82:5f:af:3d:2d:7d:6b:84:
2c:44:55:97:1b:2a:d0:a2:a3:3d:c2:14:85:ba:11:
53:f6:d4:da:22:c1:23:a9:7f:08:1a:00:25:3f:66:
a4:67:97:04:cc:a9:25:03:69:c0:e9:17:1b:37:39:
db:ce:20:72:e9:40:35:d6:fc:8a:50:77:0d:e3:cd:
13:ef:c2:e0:55:ee:54:e5:1e:7c:6e:5f:0c:c6:2c:
1e:b6:42:2f:74:cc:7b:35:f1:b9:3a:ec:d3:29:93:
e6:a2:3e:5c:19:06:92:20:c9:5f:5c:00:b6:6f:5a:
e8:d1:a8:10:b3:12:3b:07:33:ae:00:e5:39:25:42:
6e:25:ae:6c:77:54:ac:e7:b5:17:cd:61:f4:ed:86:
f7:07:db:f5:db:e2:5c:1b:fa:51:8a:26:bd:c1:01:
96:3c:69:03:10:db:da:17:90:ec:e6:02:35:48:34:
a2:3b:ca:72:77:a5:68:fd:53:20:7f:bb:c4:e7:51:
85:f4:7a:73:70:ba:2b:27:ae:34:e4:84:88:23:50:
fe:6b:e2:fe:b7:19:9b:ba:7c:88:1d:c8:67:4f:6b:
c1:14:59:5e:c5:14:72:2a:68:88:e1:72:20:9d:20:
8c:d2:d0:60:f1:da:35:8d:6f:8f:8b:e1:04:f3:20:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:D5:DB:83:72:CC:B8:CF:EC:E5:55:A4:08:B7:13:1B:4F:79:67
X509v3 Authority Key Identifier:
keyid:E1:88:D5:C3:4C:4C:1E:17:68:FD:8A:FC:8D:06:59:C7:10:E1:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YjVw0xMHhdo_Yr8jQZZxxDhERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/jHbV24NyzLjP7OVVpAi3ExtPeWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d45da9-7718-49b9-bc83-02b87221f1ef/1/4YjVw0xMHhdo_Yr8jQZZxxDhERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.156.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f9:38:57:e4:4d:3b:db:d7:7f:c2:d8:65:94:1c:9b:01:b1:
2a:98:8a:14:54:f5:ae:8c:4f:47:1e:3f:40:08:d5:e2:68:19:
d7:8f:22:c3:2e:c9:10:5b:9e:9a:9c:1a:7f:dc:e0:e3:bb:25:
69:b1:5b:15:0c:01:25:c8:02:e9:71:1f:b5:3d:07:df:ba:c4:
81:22:bc:2a:ac:1f:2f:07:d6:0e:fc:8b:f0:3b:0f:92:4d:fe:
37:76:8f:73:69:09:49:04:41:d5:dc:60:89:f8:17:d8:38:8b:
5e:10:01:04:85:18:b7:6e:12:15:f7:ea:73:d8:d9:70:d3:fc:
57:f8:aa:76:a4:85:41:97:91:79:a5:30:27:c4:6a:99:ce:b8:
a2:6f:ba:f6:13:2d:b3:69:f5:ec:bf:45:21:ce:72:ac:5e:9d:
d6:63:24:9d:16:da:3e:33:8f:69:36:5d:c3:08:bb:ae:00:8e:
8c:db:7d:a5:be:4e:2d:3a:0a:ee:0a:9b:15:4c:fe:86:ae:af:
38:89:ae:70:66:48:b8:14:08:04:60:92:40:66:71:62:f2:7c:
53:94:5b:22:42:5a:24:12:d0:1b:8b:f2:e5:27:bf:f9:b1:66:
14:f6:8b:03:bf:12:14:d7:29:d7:45:cb:0b:76:a2:40:4c:c9:
11:03:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:20:18 2024 by rpki-client on console-ams.rpki-client.org