Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/KPUmdl9CYSFVW9Q4kZKjljfGDic.roa
File: KPUmdl9CYSFVW9Q4kZKjljfGDic.roa (raw, json)
Hash identifier: A2hCehomO0s+/9OS9wFixBVVwPYYQRMtgK3hJs63CUw=
Subject key identifier: 28:F5:26:76:5F:42:61:21:55:5B:D4:38:91:92:A3:96:37:C6:0E:27
Certificate issuer: /CN=c9769bfa59865d0c9593262881807db13f4bb87a
Certificate serial: 018705FEA5024C14CE446C81D702E6300CBF
Authority key identifier: C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/KPUmdl9CYSFVW9Q4kZKjljfGDic.roa
Signing time: Tue 21 Mar 2023 21:06:27 +0000
ROA not before: Tue 21 Mar 2023 21:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 80.71.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:fe:a5:02:4c:14:ce:44:6c:81:d7:02:e6:30:0c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9769bfa59865d0c9593262881807db13f4bb87a
Validity
Not Before: Mar 21 21:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28f526765f426121555bd4389192a39637c60e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:c6:7c:c6:0a:61:c5:ba:30:ba:3a:e8:eb:
73:93:f5:17:b1:42:64:33:0b:b2:50:bf:6f:3f:24:
63:79:91:8e:67:d9:2a:7a:4f:e1:db:bf:96:ee:9e:
b2:b3:b3:fc:27:fb:bd:f0:5f:6c:0b:41:01:60:fe:
a2:76:e3:15:b9:dd:f5:70:90:2c:fe:08:67:79:7b:
cf:05:84:d2:ac:22:31:b7:84:f8:15:49:87:70:f3:
30:2f:39:de:09:39:1e:11:77:bf:ef:66:e9:2f:8f:
c5:6b:e8:f9:bb:91:9f:8f:f2:6e:28:09:4f:d7:3c:
c6:34:25:d6:67:38:63:80:67:11:21:dc:ac:ac:d5:
2d:3f:8c:32:96:07:9d:d9:4f:89:40:e8:e2:81:83:
ed:c1:10:64:9b:5d:f2:6e:cf:88:f0:e2:57:a7:8a:
de:e9:d1:f0:68:25:12:48:39:24:e9:be:99:32:63:
a0:26:d9:e4:b3:bd:0c:86:2a:d6:aa:8e:a8:48:a5:
f7:42:9b:22:8e:84:b6:dd:89:13:00:be:e8:b5:e4:
35:9b:68:05:43:c7:d0:8e:30:d7:7b:b4:80:94:ea:
c8:d1:c0:1e:ff:9a:53:27:de:e2:e0:6e:c6:2d:c1:
d6:85:1e:0b:a4:df:8f:f0:38:a1:78:9f:6b:85:a1:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F5:26:76:5F:42:61:21:55:5B:D4:38:91:92:A3:96:37:C6:0E:27
X509v3 Authority Key Identifier:
keyid:C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/KPUmdl9CYSFVW9Q4kZKjljfGDic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/yXab-lmGXQyVkyYogYB9sT9LuHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.144.0/24
Signature Algorithm: sha256WithRSAEncryption
08:76:c8:09:8f:f2:1a:d7:34:b9:05:b5:90:fb:7b:50:5c:72:
8d:26:95:98:c1:b6:40:a4:b3:ec:fd:a4:26:7e:6d:44:57:59:
8e:74:16:82:d8:bc:49:d7:f4:02:47:3b:00:f3:5c:ef:1c:a4:
3b:ef:b0:27:ab:f1:97:a6:c4:b0:5f:b0:84:51:6b:2b:61:8d:
0b:49:4c:63:d4:51:34:0d:c0:43:bd:b5:51:a0:2d:0d:5b:0d:
38:4b:44:14:d7:85:0a:44:e9:52:f9:49:ac:7f:72:be:ef:b1:
06:e6:86:c2:1a:3a:4d:3c:77:a1:7d:7f:2b:f7:c7:68:ac:7d:
39:e6:9b:46:a5:01:bd:1c:48:69:d5:08:c4:06:9b:1b:29:c2:
6c:a7:b1:3c:c0:d3:85:80:da:38:38:2b:8f:fe:e2:35:b9:83:
55:34:fc:ad:67:4f:34:02:89:55:a8:f7:a9:74:5d:f8:87:e0:
ae:83:b3:b0:7d:f1:64:f6:c0:e8:3c:57:49:09:17:2e:dc:b8:
e0:d2:4d:9c:f3:72:f1:43:64:ef:35:3e:71:a4:9a:3f:a0:37:
12:3c:07:19:15:0d:75:a2:32:e1:e7:36:07:6b:f8:b2:f7:65:
70:b8:01:75:b0:31:73:3c:72:0e:a8:34:8b:73:f6:70:9b:48:
9b:d5:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 13:57:53 2023 by rpki-client on console-fra.rpki-client.org