Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/IEgqXnoL00IDrKPt_VF96n_SW-s.roa
File: IEgqXnoL00IDrKPt_VF96n_SW-s.roa (raw, json)
Hash identifier: VYIHBkI3VLWZltDIxedMHMq20RLgDvp1T8JuZgnDLts=
Subject key identifier: 20:48:2A:5E:7A:0B:D3:42:03:AC:A3:ED:FD:51:7D:EA:7F:D2:5B:EB
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 0185A61840615727B17DB72006752BAEC5D6
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/IEgqXnoL00IDrKPt_VF96n_SW-s.roa
Signing time: Thu 12 Jan 2023 13:08:05 +0000
ROA not before: Thu 12 Jan 2023 13:08:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 80.64.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:18:40:61:57:27:b1:7d:b7:20:06:75:2b:ae:c5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jan 12 13:08:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20482a5e7a0bd34203aca3edfd517dea7fd25beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:f3:6e:4f:39:ff:6f:e0:13:ec:50:d5:f0:
fd:83:96:ba:dd:af:b4:11:c8:57:74:b3:fd:c9:45:
4a:dc:fb:01:dd:a2:ce:42:ff:27:95:ef:f7:4b:31:
86:32:2a:81:ed:0d:70:e2:9c:ee:9b:84:98:87:f8:
af:d0:0d:7d:ed:39:3d:e6:0b:c4:44:a4:ca:c8:35:
03:b2:ee:ad:e8:49:78:e4:50:e8:ad:36:af:be:76:
9e:68:82:de:7a:da:c8:60:9e:06:54:32:c4:c9:f8:
5c:48:c8:8c:58:ca:f7:21:73:3d:a0:84:23:64:d4:
d0:35:4d:ab:91:56:0c:69:73:92:9f:33:6b:c8:dc:
2d:3c:c9:33:ac:09:9c:f5:6a:0c:48:cc:d5:6d:59:
ed:5e:7c:9b:ee:d2:b3:59:ec:d2:d9:ca:5a:a7:da:
b7:af:ac:23:44:a3:0b:35:38:53:1a:ae:79:78:15:
40:6c:f6:e4:b2:29:79:3e:b4:1b:b8:30:af:ed:a8:
ba:5c:1b:0d:bd:ff:3a:ff:bd:ff:4c:21:41:ce:cf:
17:44:65:4d:0e:d5:ad:ab:13:81:77:d9:cb:e0:65:
e6:d1:31:c8:37:13:b0:62:ae:00:30:26:8b:bb:f9:
b4:85:62:f8:a4:3f:53:46:0f:31:68:16:cb:39:8a:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:2A:5E:7A:0B:D3:42:03:AC:A3:ED:FD:51:7D:EA:7F:D2:5B:EB
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/IEgqXnoL00IDrKPt_VF96n_SW-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6f:b5:8b:a1:de:0a:d0:66:43:4d:93:f8:56:0f:1e:84:fc:
7b:b3:f8:0d:86:c0:3e:9c:87:db:29:00:37:71:71:e0:85:75:
ad:1d:75:4d:13:f7:42:37:93:2a:dc:66:1f:a0:39:54:be:7b:
7d:bc:0e:f4:5b:0c:67:b0:1d:45:99:2c:76:37:03:b5:db:4a:
75:13:cc:6e:ec:74:6e:df:02:fc:c7:55:9e:f7:11:0e:22:13:
20:1f:7d:18:d7:72:0e:8b:5b:a9:91:32:98:ed:93:02:fb:26:
4e:dc:52:cf:72:2f:61:5f:25:96:5b:52:89:3f:06:b3:7f:09:
6e:e7:4c:7a:17:29:5b:da:72:40:90:c0:92:78:98:23:90:6a:
b8:f8:12:3c:1d:8d:a9:98:6f:70:15:c0:ae:62:a0:b4:81:a4:
4d:51:53:2e:d1:5e:b0:32:6c:6f:0c:5d:c4:de:5e:54:b6:6a:
c7:90:4e:43:0f:a2:20:6a:48:0a:81:8b:4f:0e:dd:d4:41:be:
cf:a5:f3:33:88:f9:4d:5e:3c:80:1e:18:26:ec:75:bd:21:ae:
a5:13:7c:d1:fc:82:45:93:34:98:71:24:e1:af:9c:a6:a4:97:
86:2b:4f:10:67:8a:f5:d2:4d:df:33:bf:e3:09:35:f1:15:8d:
09:02:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:26 2025 by rpki-client