Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/4cZJyM-ao1C-KbBfvK6lZQgKTyU.roa
File: 4cZJyM-ao1C-KbBfvK6lZQgKTyU.roa (raw, json)
Hash identifier: fPOLfFiKG+fmCTO2vdWsqPlB5QJ1wedCt8GaTZOVrLA=
Subject key identifier: E1:C6:49:C8:CF:9A:A3:50:BE:29:B0:5F:BC:AE:A5:65:08:0A:4F:25
Certificate issuer: /CN=a10d7de078447b5fb733ac6465682fab57ad8003
Certificate serial: 051AC22E
Authority key identifier: A1:0D:7D:E0:78:44:7B:5F:B7:33:AC:64:65:68:2F:AB:57:AD:80:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ194HhEe1-3M6xkZWgvq1etgAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/4cZJyM-ao1C-KbBfvK6lZQgKTyU.roa
Signing time: Sat 01 Jan 2022 16:05:17 +0000
ROA not before: Sat 01 Jan 2022 16:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21058
IP address blocks: 80.83.161.0/24 maxlen: 24
80.83.162.0/24 maxlen: 24
80.83.163.0/24 maxlen: 24
80.83.164.0/24 maxlen: 24
80.83.165.0/24 maxlen: 24
80.83.166.0/24 maxlen: 24
80.83.160.0/24 maxlen: 24
80.83.168.0/24 maxlen: 24
80.83.169.0/24 maxlen: 24
80.83.170.0/24 maxlen: 24
80.83.171.0/24 maxlen: 24
80.83.172.0/24 maxlen: 24
80.83.167.0/24 maxlen: 24
80.83.175.0/24 maxlen: 24
80.83.173.0/24 maxlen: 24
80.83.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85639726 (0x51ac22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10d7de078447b5fb733ac6465682fab57ad8003
Validity
Not Before: Jan 1 16:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1c649c8cf9aa350be29b05fbcaea565080a4f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:9e:94:06:d9:88:a9:5f:ef:22:b0:7b:e1:
e0:8f:d3:87:14:a6:89:f2:f6:ca:1b:6d:be:e2:c9:
59:e5:92:82:1b:3a:93:0c:ae:05:05:ba:20:ea:38:
02:d8:a8:1c:ad:81:52:f5:85:f8:48:50:e0:22:20:
5b:db:10:85:d8:d8:00:a2:3d:c4:65:d7:dd:f1:28:
b7:85:a5:4d:6c:e9:6b:87:e0:80:5d:e1:7c:64:f6:
aa:b4:4d:ec:83:2b:af:c3:28:13:69:3c:39:ec:06:
86:0d:c1:7f:a9:f7:73:06:b5:e1:18:80:9e:11:67:
ad:61:0b:9f:63:a2:b5:01:75:89:56:53:35:1d:f2:
33:93:5d:d2:02:b0:15:81:27:50:d4:4f:bc:a6:01:
e3:c6:e0:52:2d:d3:58:44:b1:69:96:c9:34:e6:5e:
91:b4:75:a5:31:31:70:3c:d0:45:5d:66:05:0e:06:
c0:91:98:ba:6b:99:d6:b9:97:49:f7:1c:12:0f:7a:
18:69:b3:a9:c2:43:08:6a:89:7f:7b:39:44:f3:6e:
aa:0e:d2:be:9a:53:ff:d3:15:20:96:59:de:8c:3a:
d0:cf:cf:50:b9:27:2a:79:98:11:45:43:23:40:b2:
05:aa:c2:8d:05:c9:84:84:f0:bb:fa:2a:3d:b4:b9:
bd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:49:C8:CF:9A:A3:50:BE:29:B0:5F:BC:AE:A5:65:08:0A:4F:25
X509v3 Authority Key Identifier:
keyid:A1:0D:7D:E0:78:44:7B:5F:B7:33:AC:64:65:68:2F:AB:57:AD:80:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ194HhEe1-3M6xkZWgvq1etgAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/4cZJyM-ao1C-KbBfvK6lZQgKTyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/fe3aef-8fb4-4f6c-bc71-56c899c6f8d8/1/oQ194HhEe1-3M6xkZWgvq1etgAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.160.0/20
Signature Algorithm: sha256WithRSAEncryption
51:3b:0e:31:40:a1:28:58:4c:16:d3:4d:d1:2e:0e:24:25:15:
7c:60:dc:e4:d7:3e:7c:f9:b6:ba:80:bb:d5:d7:9d:16:22:d2:
e8:a9:79:61:10:9a:e3:8f:0e:29:22:50:19:91:2f:df:f5:8d:
6d:47:97:b9:da:88:7d:c4:c1:14:03:27:e0:0b:23:0d:2f:84:
2d:27:66:71:8a:b2:d0:f6:c7:24:5a:33:d9:dd:3d:a7:33:e4:
15:5e:54:c6:ff:e1:da:75:f6:28:1a:b4:aa:f5:96:62:98:f7:
88:65:68:d2:25:23:cd:42:ca:79:bb:b6:64:62:a1:7b:2f:b8:
04:57:2e:c2:e6:92:e1:34:9e:59:c9:32:4b:28:a5:c8:c7:be:
61:7a:14:bc:27:bc:0d:75:c5:eb:dc:05:51:2d:74:e5:f5:ca:
e6:70:eb:9a:9c:b1:6a:78:b6:ad:0e:d7:0b:0e:d6:76:c6:1c:
42:32:2d:32:c2:8f:a9:15:6b:b6:fc:e4:70:cd:73:c7:1e:be:
05:35:6f:8d:27:41:b7:a3:b9:8a:87:64:59:d2:7a:d1:b3:c9:
01:bb:d0:ec:ef:2e:0b:ea:2d:d2:f0:4c:bd:23:d0:6f:92:d4:
46:6b:92:b0:a7:3b:aa:07:3d:55:0a:37:0b:e1:cd:db:9e:03:
d9:a4:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:27 2024 by rpki-client on console-ams.rpki-client.org