Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/FhRlCGpdCBOcl-jj17om2R4C8qk.roa
File: FhRlCGpdCBOcl-jj17om2R4C8qk.roa (raw, json)
Hash identifier: y0Tphc1VlvWFtTL4M0lC8G13azidbZKteYVwLY2CKa4=
Subject key identifier: 16:14:65:08:6A:5D:08:13:9C:97:E8:E3:D7:BA:26:D9:1E:02:F2:A9
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 0185703070185D977A33B912A1BDB7E95C3C
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/FhRlCGpdCBOcl-jj17om2R4C8qk.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 80.64.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:70:18:5d:97:7a:33:b9:12:a1:bd:b7:e9:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=161465086a5d08139c97e8e3d7ba26d91e02f2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:46:60:59:5e:c0:74:ee:81:ed:40:f1:3e:
7e:75:1c:6c:aa:a0:c7:26:7f:07:40:b9:f9:30:90:
93:17:52:30:4c:16:8a:85:59:7e:c2:85:a6:d0:45:
4f:4c:a4:20:8c:db:c5:a3:20:3d:ba:26:35:53:01:
ae:b1:05:02:d8:87:ca:bf:15:42:44:fe:f0:a3:92:
4d:b8:c6:23:0c:0f:1f:d2:bd:11:04:d5:cc:40:bb:
25:db:57:ca:4c:98:c0:a8:9a:61:76:61:f6:f8:1e:
3c:3e:73:bd:af:db:47:bc:b4:38:bd:92:bc:59:37:
b9:a1:a4:41:1e:ba:45:6d:d6:84:db:d3:c7:dd:3e:
9d:25:01:ab:d1:c5:d2:d8:64:da:7f:e7:19:de:70:
ef:39:c0:5e:69:22:96:4a:3a:89:f7:75:3e:70:3c:
0a:39:3f:67:59:48:6b:1f:a5:92:7e:53:95:d4:c6:
2e:48:75:5a:3a:51:2f:10:b5:ea:1e:87:e5:d0:ad:
22:7c:e8:fb:fa:c4:5c:55:87:9e:aa:cc:25:2f:2a:
56:d4:b4:48:2e:10:1a:39:05:1d:4f:f8:c5:1f:5d:
d3:20:36:d5:1f:85:40:d1:b9:ed:68:5f:01:24:e8:
be:13:38:43:f9:b1:2a:0d:85:0c:2e:a4:fd:be:c1:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:65:08:6A:5D:08:13:9C:97:E8:E3:D7:BA:26:D9:1E:02:F2:A9
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/FhRlCGpdCBOcl-jj17om2R4C8qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.27.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c8:35:e0:b4:1f:91:ef:fe:17:49:11:3d:34:4c:23:31:de:
fa:2c:a2:f2:6a:77:4a:0d:bc:37:f3:a3:63:7f:76:98:eb:14:
75:93:4e:51:ee:e2:50:61:c0:a2:db:86:e7:b5:60:53:44:20:
50:87:e7:a6:5d:40:79:bb:d9:1a:da:e6:9c:7a:eb:a1:06:b0:
b9:5f:fc:dd:9b:82:a8:2f:0a:8a:a8:f3:26:bd:f7:e4:fc:37:
bd:61:32:d3:c1:2c:a6:e0:34:a0:39:97:7e:b4:d0:ef:64:cd:
17:6b:5b:dd:d8:ff:93:af:9c:07:42:9c:15:cc:25:8f:95:84:
68:8f:5c:06:63:20:de:ac:53:a5:8e:a7:93:6a:15:c9:7e:2f:
25:11:25:ea:3a:43:fb:43:a0:18:f6:10:b2:43:7f:e3:dc:20:
e3:94:6d:ee:92:a3:1a:1a:96:1b:d6:cd:37:6f:c7:c6:ef:f0:
88:f3:56:05:89:da:4a:bc:a7:93:aa:64:0c:f6:ab:e9:62:dd:
84:60:b0:c1:d2:de:31:12:ca:2c:52:a4:10:9d:30:2d:e1:2d:
28:8e:ba:a5:05:c6:28:a2:e8:1c:5f:f8:08:05:93:a1:a8:99:
2f:70:b2:50:cc:a7:3b:ad:e2:56:5b:0d:86:b8:a5:91:09:d0:
f9:89:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org