Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/1-wrBHq4UPyuj2oFDtwcC0CCrWEs.roa
File: 1-wrBHq4UPyuj2oFDtwcC0CCrWEs.roa (raw, json)
Hash identifier: 1I1C1nGSr0f11UnyZqa8T0G4K1n1SQWSjMSU6ErdnQY=
Subject key identifier: FB:0A:C1:1E:AE:14:3F:2B:A3:DA:81:43:B7:07:02:D0:20:AB:58:4B
Certificate issuer: /CN=797f2a398ca1c80d6ef824f84766de0b9853e769
Certificate serial: 01856B6E857D2AFF0EEA6F6E050B3EEDF04F
Authority key identifier: 79:7F:2A:39:8C:A1:C8:0D:6E:F8:24:F8:47:66:DE:0B:98:53:E7:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX8qOYyhyA1u-CT4R2beC5hT52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/1-wrBHq4UPyuj2oFDtwcC0CCrWEs.roa
Signing time: Sun 01 Jan 2023 03:44:43 +0000
ROA not before: Sun 01 Jan 2023 03:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 80.71.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:85:7d:2a:ff:0e:ea:6f:6e:05:0b:3e:ed:f0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797f2a398ca1c80d6ef824f84766de0b9853e769
Validity
Not Before: Jan 1 03:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0ac11eae143f2ba3da8143b70702d020ab584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:ea:58:a1:64:b7:7d:83:98:20:14:d4:e8:
34:0b:ad:bb:65:53:a1:6d:62:e3:b5:b1:4a:67:eb:
35:b7:6d:b2:81:57:9b:51:bd:5b:56:00:43:38:c5:
d5:92:f1:07:f5:dd:9e:cc:d5:53:2e:e3:9c:55:60:
88:3f:a2:98:b1:10:2f:5d:71:6b:ba:8d:74:b6:a1:
de:31:64:b8:85:91:cd:47:d7:c6:26:1f:27:b5:b1:
5a:f9:ed:d1:fb:f6:10:7a:c9:3c:08:9f:e7:08:0c:
04:f2:b5:46:0e:48:d5:ec:ad:14:ab:54:89:bc:f3:
62:61:e9:2f:61:98:40:3c:6b:96:d7:8f:27:10:18:
86:15:ec:d0:e3:75:88:59:53:7f:57:27:98:e3:de:
52:35:dd:8c:0e:a5:29:66:77:ec:b7:a5:5a:97:13:
63:de:5e:d0:0d:47:5b:31:34:c3:b7:ab:ea:ef:85:
9c:f3:6d:f1:a5:4f:95:7b:40:c6:1d:4b:29:ed:45:
fa:da:de:41:9b:db:b2:96:15:58:54:1d:7f:d8:a3:
b8:29:10:2e:cf:75:55:c7:9e:07:aa:c2:1d:ed:b2:
99:3e:b2:62:1c:f3:83:5f:98:a7:d1:b2:ec:3f:cb:
e8:ea:45:a3:a4:ac:15:13:40:ab:d9:49:79:9c:e8:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:C1:1E:AE:14:3F:2B:A3:DA:81:43:B7:07:02:D0:20:AB:58:4B
X509v3 Authority Key Identifier:
keyid:79:7F:2A:39:8C:A1:C8:0D:6E:F8:24:F8:47:66:DE:0B:98:53:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX8qOYyhyA1u-CT4R2beC5hT52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/1-wrBHq4UPyuj2oFDtwcC0CCrWEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/eX8qOYyhyA1u-CT4R2beC5hT52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.152.0/24
Signature Algorithm: sha256WithRSAEncryption
05:21:b9:1a:a4:28:de:5b:1e:30:86:5e:a0:0a:f3:6d:cf:b7:
1b:4f:54:76:42:61:c7:cb:43:f4:61:2d:51:52:77:4a:72:83:
07:4a:fd:3b:f2:d0:e0:83:83:40:73:78:86:c8:cd:2f:1e:30:
d8:7e:ba:ed:0f:e4:fd:54:95:85:37:46:30:9d:4b:31:d8:cb:
40:3a:06:64:69:8d:f6:78:99:0c:4c:82:b8:9e:14:1b:56:08:
f1:a0:e9:27:4d:2e:50:d0:fe:3b:53:e5:a1:ab:c6:16:97:f6:
2e:e8:70:ae:07:e4:38:59:09:3f:7b:6d:2d:20:bb:a7:d9:74:
a1:e1:96:2e:c0:19:8c:66:60:02:05:2d:01:f6:da:6f:99:5e:
54:89:60:79:b7:bd:28:a9:51:dd:74:be:3f:2c:11:13:4a:af:
93:2f:22:7a:2e:f4:38:10:19:14:b8:81:be:47:fd:23:8d:e6:
c9:33:9d:0e:09:e5:82:07:02:a5:52:2d:73:7e:a2:46:0d:3c:
93:e8:97:4d:c9:c7:20:f0:d8:c5:14:29:04:f1:bb:e5:4c:bc:
a3:0b:b8:fe:a9:8c:28:ad:d6:40:70:25:1e:0a:8f:b1:38:0f:
ed:6a:bc:f7:b8:e8:21:62:26:fe:57:ce:45:1d:fd:96:9d:dd:
d3:e7:fb:48
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVrboV9Kv8O6m9uBQs+7fBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2YyYTM5OGNhMWM4MGQ2ZWY4MjRmODQ3NjZkZTBiOTg1
M2U3NjkwHhcNMjMwMTAxMDM0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjBhYzExZWFlMTQzZjJiYTNkYTgxNDNiNzA3MDJkMDIwYWI1ODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsLqWKFkt32DmCAU1Og0C627ZVOh
bWLjtbFKZ+s1t22ygVebUb1bVgBDOMXVkvEH9d2ezNVTLuOcVWCIP6KYsRAvXXFr
uo10tqHeMWS4hZHNR9fGJh8ntbFa+e3R+/YQesk8CJ/nCAwE8rVGDkjV7K0Uq1SJ
vPNiYekvYZhAPGuW148nEBiGFezQ43WIWVN/VyeY495SNd2MDqUpZnfst6ValxNj
3l7QDUdbMTTDt6vq74Wc823xpU+Ve0DGHUsp7UX62t5Bm9uylhVYVB1/2KO4KRAu
z3VVx54HqsId7bKZPrJiHPODX5in0bLsP8vo6kWjpKwVE0Cr2Ul5nOhx5QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsKwR6uFD8ro9qBQ7cHAtAgq1hLMB8GA1UdIwQY
MBaAFHl/KjmMocgNbvgk+Edm3guYU+dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVg4cU9ZeWh5QTF1LUNUNFIyYmVDNWhUNTJrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81Y2JkMjMtNDQzNi00MjE0LWI1ODIt
NDQ2NzQ2M2NiMDJiLzEvMS13ckJIcTRVUHl1ajJvRkR0d2NDMENDcldFcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODUvNWNiZDIzLTQ0MzYtNDIxNC1iNTgyLTQ0Njc0NjNjYjAy
Yi8xL2VYOHFPWXloeUExdS1DVDRSMmJlQzVoVDUyay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBHmDAN
BgkqhkiG9w0BAQsFAAOCAQEABSG5GqQo3lseMIZeoArzbc+3G09UdkJhx8tD9GEt
UVJ3SnKDB0r9O/LQ4IODQHN4hsjNLx4w2H667Q/k/VSVhTdGMJ1LMdjLQDoGZGmN
9niZDEyCuJ4UG1YI8aDpJ00uUND+O1PloavGFpf2LuhwrgfkOFkJP3ttLSC7p9l0
oeGWLsAZjGZgAgUtAfbab5leVIlgebe9KKlR3XS+PywRE0qvky8iei70OBAZFLiB
vkf9I43myTOdDgnlggcCpVItc36iRg08k+iXTcnHIPDYxRQpBPG75Uy8owu4/qmM
KK3WQHAlHgqPsTgP7Wq897joIWIm/lfORR39lp3d0+f7SA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:29 2024 by rpki-client on console-fra.rpki-client.org