Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/YMIfR8c3UoRplXKiAMKjVlVmcLI.roa
File: YMIfR8c3UoRplXKiAMKjVlVmcLI.roa (raw, json)
Hash identifier: ZcUtenv5mGiUut/wFLRQSdovE1n+yWXwZWYN1L7O9i8=
Subject key identifier: 60:C2:1F:47:C7:37:52:84:69:95:72:A2:00:C2:A3:56:55:66:70:B2
Certificate issuer: /CN=aef910de392d35fca1f563956c5e734049f2ff23
Certificate serial: 018CC86F320F5417BF1273A6CA144BB1816B
Authority key identifier: AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/YMIfR8c3UoRplXKiAMKjVlVmcLI.roa
Signing time: Tue 02 Jan 2024 04:29:39 +0000
ROA not before: Tue 02 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30937
IP address blocks: 80.68.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:32:0f:54:17:bf:12:73:a6:ca:14:4b:b1:81:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef910de392d35fca1f563956c5e734049f2ff23
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60c21f47c7375284699572a200c2a356556670b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:cf:37:ce:67:37:de:55:cb:27:f0:09:c8:
7b:73:0d:87:c4:1e:c0:6c:1b:5a:24:31:cc:ce:5f:
fc:de:7a:4a:3c:5e:28:6f:2b:30:44:9b:11:ed:9c:
98:32:51:61:7d:90:a5:cc:a1:e2:ef:fd:42:3f:61:
c2:dc:2b:ef:eb:13:00:52:3b:30:0d:7f:7e:e9:8e:
7a:9b:77:64:f0:54:bc:17:bf:b5:16:25:8f:12:41:
8e:7f:1f:c0:d8:cf:18:71:1e:8c:4c:fb:b6:aa:31:
19:e7:f7:83:10:63:9c:f2:87:b3:49:2d:49:aa:1d:
f7:25:28:7b:cd:37:ab:32:c6:b3:0a:7d:fe:4e:40:
16:99:76:e4:d5:5f:69:9f:1d:9f:f9:f2:bc:ba:cb:
14:0d:0c:1e:99:5b:ef:53:c3:16:e3:3a:ba:e2:29:
6f:2f:21:3d:66:0e:ac:35:3a:f3:46:3d:44:8a:b6:
85:78:6a:00:58:08:83:15:0b:ce:e8:37:6c:0e:f3:
1e:d9:16:e5:57:28:4c:1c:ea:bc:60:68:1b:2a:27:
13:7d:5f:68:fa:b2:99:32:30:e3:c3:ef:d7:cc:42:
e7:87:86:78:98:75:79:04:3e:b6:05:c8:67:68:44:
47:5a:e6:92:83:cc:40:36:3a:59:59:8c:21:9e:86:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C2:1F:47:C7:37:52:84:69:95:72:A2:00:C2:A3:56:55:66:70:B2
X509v3 Authority Key Identifier:
keyid:AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/YMIfR8c3UoRplXKiAMKjVlVmcLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/rvkQ3jktNfyh9WOVbF5zQEny_yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.155.0/24
Signature Algorithm: sha256WithRSAEncryption
10:33:1b:1f:90:46:e5:ce:25:21:2c:d1:4e:94:58:54:67:78:
13:4c:18:66:ce:b2:b0:eb:23:6d:9c:04:ad:6e:6f:65:8e:00:
98:52:49:4e:de:b9:30:02:86:a9:8e:8e:af:98:c3:9d:07:b0:
ad:3d:08:c9:b2:a3:07:df:7f:5e:56:f8:0d:fb:a3:54:37:68:
5c:b6:5e:aa:f6:f6:6b:cf:de:06:41:6f:d8:05:5d:3d:68:87:
3e:b4:af:bf:7f:35:7d:3b:c3:ef:6f:99:80:fc:19:d4:cf:d7:
0f:fa:2d:2e:d6:ee:92:02:96:0a:85:65:0e:da:5d:02:f6:13:
18:99:91:b4:c1:1d:f9:6f:46:b4:0b:83:1b:cb:5c:54:4c:4b:
67:63:23:5a:d1:37:7b:cc:8b:f0:41:12:8e:af:7e:a0:63:f4:
c3:53:16:26:5c:3f:af:ee:45:f3:e1:63:4d:cc:29:de:c1:2d:
e0:9c:41:a1:24:31:dc:ba:3f:f0:fe:d5:ca:83:62:45:8a:11:
92:ae:c6:e3:86:08:92:0a:32:e2:71:36:e6:df:e9:d8:30:87:
28:0b:63:7c:dc:0b:6c:70:27:b5:fc:f1:c6:e0:e1:4d:53:b0:
38:07:47:64:6d:63:bf:b2:40:19:57:1e:5c:96:6f:9c:d8:11:
31:e0:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:23 2024 by rpki-client on console-ams.rpki-client.org