Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/1sXXeNNCEyJJ4fbjLsoONdHjU9I.roa
File: 1sXXeNNCEyJJ4fbjLsoONdHjU9I.roa (raw, json)
Hash identifier: Uz3nSM9q2RnbTDLHN0MRdajWS3rC1SBbOfA7fZzYtbo=
Subject key identifier: D6:C5:D7:78:D3:42:13:22:49:E1:F6:E3:2E:CA:0E:35:D1:E3:53:D2
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018570306EE8BAF072B1E71FAD5D036FC08B
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/1sXXeNNCEyJJ4fbjLsoONdHjU9I.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62143
IP address blocks: 80.64.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6e:e8:ba:f0:72:b1:e7:1f:ad:5d:03:6f:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6c5d778d342132249e1f6e32eca0e35d1e353d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:ff:f7:6f:31:8c:97:05:34:58:5b:85:2e:
4b:d1:a9:53:3c:a6:7b:d5:92:eb:32:11:c4:97:e7:
84:3a:38:5b:5e:01:af:a8:1e:34:26:83:9a:84:e3:
30:bb:2f:e9:26:0d:c9:de:69:f2:cd:e5:88:b5:3b:
47:27:5a:0b:eb:e3:64:72:7e:74:b8:23:ea:40:c4:
61:d7:50:48:36:76:e2:7b:bd:61:ac:ab:38:74:23:
e5:c7:72:3d:4a:82:84:55:18:24:20:01:bd:0a:f3:
49:7f:59:fd:1f:96:cd:42:92:bc:1f:84:2c:e7:b4:
aa:1b:59:bc:7c:1c:f6:0a:9d:29:a1:a6:dc:45:6d:
56:e5:a7:6e:b7:7a:52:89:48:fc:39:b2:84:78:fc:
4d:96:ab:e4:df:24:97:52:c2:3f:9e:e7:8a:f4:07:
3a:c1:c7:21:be:fa:f1:d8:f0:63:24:19:e4:8b:0f:
7f:2f:d7:3e:07:0e:6f:34:3e:b0:47:1c:15:d2:e1:
e8:52:7f:64:a3:e0:c0:a4:58:44:3a:c8:fb:da:18:
55:c7:dc:26:43:97:bd:f7:9e:6c:f9:69:b4:5a:e3:
bd:44:19:4c:d0:ab:a3:f2:4d:c9:d1:d7:bb:75:7b:
8e:7d:b5:54:3a:0a:d3:1e:87:68:a6:af:99:0e:d1:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:D7:78:D3:42:13:22:49:E1:F6:E3:2E:CA:0E:35:D1:E3:53:D2
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/1sXXeNNCEyJJ4fbjLsoONdHjU9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.28.0/24
Signature Algorithm: sha256WithRSAEncryption
55:eb:cc:3f:8e:22:4a:2e:02:65:f3:0f:76:1f:ce:bc:92:2d:
eb:d9:fd:bb:70:11:37:83:17:12:5a:eb:a8:af:fb:b1:e8:a1:
2f:cf:65:6a:35:b5:fd:64:1a:23:59:bc:ea:7f:e3:0e:ea:ae:
b1:88:3f:50:d1:a8:1b:19:fa:44:ad:3e:bf:ba:bd:8d:66:0a:
c1:e0:e1:57:fb:51:e8:e9:63:cc:bb:17:c1:57:ba:59:80:f5:
ef:2a:50:7d:a2:d5:d5:f9:29:ed:39:82:a0:9a:2a:08:68:8c:
fb:20:16:bf:c9:8c:73:65:3f:14:50:64:fa:47:67:1f:89:e3:
23:28:94:96:e3:c6:18:0e:39:05:76:63:d2:11:12:b2:f7:57:
ca:6c:e0:1f:fe:30:b4:a8:00:0b:29:e7:89:b8:5f:d8:bc:c3:
3a:97:a8:de:c5:0f:fb:b1:7c:db:53:9e:c2:a7:30:e3:67:2c:
62:2a:1a:6e:b0:aa:5f:26:fe:2b:27:5c:8a:b5:ae:c4:a7:a9:
e4:7b:d5:64:f8:42:9b:d5:b1:4e:e4:ef:86:90:08:e9:3f:40:
75:fa:b6:02:2f:67:23:6c:fa:b6:32:9d:cf:85:e8:94:2d:b6:
62:4c:f2:9e:d7:50:e3:43:34:89:57:26:0e:e3:c8:b5:c8:73:
e6:47:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org