Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/eH2AVgOPpzt0miIclz4p3hJ2FkY.roa
File: eH2AVgOPpzt0miIclz4p3hJ2FkY.roa (raw, json)
Hash identifier: hO3pSAPrp6+5/da6Ws8CrNZXNyKWEckKEUXXcVBhuyM=
Subject key identifier: 78:7D:80:56:03:8F:A7:3B:74:9A:22:1C:97:3E:29:DE:12:76:16:46
Certificate issuer: /CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Certificate serial: C968
Authority key identifier: 2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/eH2AVgOPpzt0miIclz4p3hJ2FkY.roa
Signing time: Tue 25 Jan 2022 18:23:00 +0000
ROA not before: Tue 25 Jan 2022 18:23:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 80.91.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51560 (0xc968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Validity
Not Before: Jan 25 18:23:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=787d8056038fa73b749a221c973e29de12761646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:f1:a1:7d:14:36:2a:33:3a:ba:20:e9:04:
25:dd:bd:ee:07:f9:0d:56:23:66:89:c4:52:df:ea:
e1:ad:26:36:8f:ca:73:eb:f9:0f:1f:d7:0d:be:87:
27:5f:92:eb:2f:b2:71:b8:e1:78:8e:89:91:8b:a2:
28:3c:6f:68:cd:47:f0:fc:03:94:b7:4f:6a:9b:43:
76:0b:9a:b8:17:19:c2:6c:40:aa:73:47:91:2b:0a:
d9:70:9b:b8:17:8a:75:c4:d1:34:fb:42:28:6e:6d:
aa:e2:89:8f:57:bf:83:d9:f9:59:7b:69:3a:0c:05:
94:53:b2:07:b4:b3:bb:73:e4:1a:57:c1:17:f7:72:
f3:19:83:ac:87:e5:28:e2:9d:2d:ae:19:0a:5b:5a:
50:db:6d:a6:ab:ae:85:19:5c:24:e2:80:0f:e8:e0:
10:67:a8:85:c4:e7:e6:91:83:8c:7b:f2:51:e3:87:
e8:0f:a6:7d:b1:e7:11:56:5b:1a:ee:47:d8:c3:e5:
dc:8f:62:29:ce:6c:d6:41:65:90:24:bf:90:4f:f4:
ed:1c:63:99:1e:c7:93:d3:63:9e:62:65:85:c9:3a:
06:92:db:9e:5a:c7:8c:38:bd:22:1c:ac:8f:86:e6:
e6:96:3f:33:2b:0b:ab:e6:08:d3:41:18:62:87:dc:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7D:80:56:03:8F:A7:3B:74:9A:22:1C:97:3E:29:DE:12:76:16:46
X509v3 Authority Key Identifier:
keyid:2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/eH2AVgOPpzt0miIclz4p3hJ2FkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/LFfdD5oDgz505HuZDxpIlbUhBKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.209.0/24
Signature Algorithm: sha256WithRSAEncryption
87:6d:6b:1e:23:d6:5e:be:65:14:fd:85:ea:e1:f6:b2:c5:7d:
20:eb:6b:94:74:7b:2f:bb:84:83:0c:6f:14:92:3e:15:3f:2a:
f1:d7:f0:62:54:71:d8:39:78:63:f7:c8:de:5b:be:a6:ec:4c:
25:7b:57:2b:91:8e:6d:b9:8d:35:c2:74:0c:4d:90:4a:a0:6b:
a5:4f:1f:27:91:f6:5f:61:74:79:4d:41:ee:33:e3:a9:ce:6e:
d5:37:25:e1:93:a8:5f:15:af:5a:43:15:90:29:4c:8b:26:be:
20:4b:c3:cd:f9:f3:8d:f3:07:a9:ba:31:e0:8a:47:76:c4:a2:
df:72:0e:74:b7:21:58:cf:0c:ac:ea:d0:0d:8f:aa:02:24:90:
ee:83:5d:7e:22:88:cd:27:1e:78:ea:72:ea:36:22:74:01:1b:
6e:2d:33:17:0a:7f:ba:cd:b2:f6:65:c9:c0:9b:e9:c3:6b:25:
8b:10:68:96:2d:1d:1b:d4:b8:f8:43:01:74:1e:e5:c7:f7:7e:
73:a1:55:57:6b:45:ec:49:49:e2:e2:ac:26:9c:81:59:41:b3:
9b:12:c3:f1:84:a0:a2:7e:78:5e:b2:85:90:28:e4:ea:ba:dd:
16:8f:4d:84:56:cb:ce:00:9b:54:57:18:eb:eb:bb:e4:0e:ac:
a2:4a:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:47 2025 by rpki-client