Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/tmBSHs7qHFWLJQItztds9mCoFGY.roa
File: tmBSHs7qHFWLJQItztds9mCoFGY.roa (raw, json)
Hash identifier: pvc0fguuSEzw0391Kam01AA/DA267rxokw8/We5Rvv4=
Subject key identifier: B6:60:52:1E:CE:EA:1C:55:8B:25:02:2D:CE:D7:6C:F6:60:A8:14:66
Certificate issuer: /CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Certificate serial: 01856F2FE1FFBD05FAB8EF9596D263FC4584
Authority key identifier: 2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/tmBSHs7qHFWLJQItztds9mCoFGY.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 80.91.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e1:ff:bd:05:fa:b8:ef:95:96:d2:63:fc:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c57dd0f9a03833e74e47b990f1a4895b52104a4
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b660521eceea1c558b25022dced76cf660a81466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:e7:05:fc:36:d1:34:79:10:fe:c4:39:8b:
01:4b:82:bc:e6:05:78:84:c6:0f:49:28:a1:e3:3c:
97:ff:b5:68:41:1b:2a:3f:90:d3:02:54:7b:c3:5c:
89:44:98:a1:57:45:8b:99:2a:02:a7:84:8d:e6:24:
34:b6:b4:14:39:95:c8:d5:21:b5:73:75:f8:76:93:
4d:6e:9c:0f:bc:43:51:f4:41:c2:47:b5:c6:84:d4:
1c:1a:fe:1a:a9:4b:73:d1:8b:92:95:79:db:86:31:
54:0e:88:3b:34:99:c6:19:d5:25:3e:05:34:af:ad:
00:9b:4b:b8:41:bc:f8:3c:4c:8d:62:69:29:97:7c:
5a:05:e3:2f:d9:4a:45:28:ac:3f:9c:65:af:3f:49:
6b:3d:b4:d7:77:3f:96:26:ca:bc:76:03:86:6e:f2:
44:26:79:f2:c8:71:2f:1d:5b:bd:5b:1d:01:bc:63:
85:79:31:0d:8c:1d:ae:a1:34:65:ea:e4:6c:28:8d:
40:4d:86:72:36:e4:ba:07:87:e7:38:c1:31:8c:19:
73:32:0c:85:1f:82:9c:2e:8a:8e:f7:bb:6a:da:59:
45:86:9c:01:45:f2:62:91:91:0f:2b:d5:4d:e9:1d:
35:42:14:83:af:0f:84:90:29:63:a8:a2:bb:ec:33:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:60:52:1E:CE:EA:1C:55:8B:25:02:2D:CE:D7:6C:F6:60:A8:14:66
X509v3 Authority Key Identifier:
keyid:2C:57:DD:0F:9A:03:83:3E:74:E4:7B:99:0F:1A:48:95:B5:21:04:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFfdD5oDgz505HuZDxpIlbUhBKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/tmBSHs7qHFWLJQItztds9mCoFGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d81e08-19c1-434a-bd06-474106e5c687/1/LFfdD5oDgz505HuZDxpIlbUhBKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b6:af:d6:dc:58:4e:d2:31:c0:ba:1e:5f:33:7a:93:17:a2:
9d:27:0e:f6:fa:76:2e:59:a1:fa:08:bc:35:a7:66:d6:c9:0f:
c0:cf:d3:f6:62:18:d9:2b:a0:3a:0a:4b:85:37:c9:56:52:6b:
2f:ce:11:0e:ef:f4:75:68:ff:9b:14:4e:7f:b6:59:3e:49:25:
b5:85:a3:35:c4:9b:8f:82:6f:97:2a:bc:6b:c7:51:2e:65:98:
d6:f2:13:aa:0e:4e:32:75:bf:b3:1e:4d:dc:dc:2f:37:a8:4d:
3a:cc:ba:d0:a0:9d:b5:b1:3d:be:05:88:0b:15:e6:34:83:23:
67:06:68:ba:61:8b:86:3f:f9:ed:5e:17:b0:51:02:80:84:c4:
d3:20:5a:7d:ad:7e:de:e7:5f:d6:ed:39:58:48:94:05:b2:48:
b6:e6:19:24:cf:ae:ad:2b:e1:95:c1:a1:38:42:d1:b7:0d:98:
a7:5c:f4:fe:43:6a:bc:b3:50:e8:ff:b0:de:96:06:da:5f:89:
a5:e2:1a:63:06:e0:07:f0:6c:ae:25:6b:28:b8:7d:a2:70:40:
49:80:8e:7b:59:81:ec:62:28:54:7f:bd:97:3d:0c:a4:ce:93:
7b:16:34:94:3c:d8:ce:d9:2d:61:a9:a2:8b:9f:dd:41:9f:15:
2d:c7:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:09 2025 by rpki-client