Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/JfKFiQtsODwNx92FkJR20I9XHI4.roa
File: JfKFiQtsODwNx92FkJR20I9XHI4.roa (raw, json)
Hash identifier: dwv4ajNwT9Zz0ebxofFwOpVwAUpw36NS6+2JOZbaqZA=
Subject key identifier: 25:F2:85:89:0B:6C:38:3C:0D:C7:DD:85:90:94:76:D0:8F:57:1C:8E
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018BB90CAC4325F8218D5D871CE320545BEF
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/JfKFiQtsODwNx92FkJR20I9XHI4.roa
Signing time: Fri 10 Nov 2023 11:44:57 +0000
ROA not before: Fri 10 Nov 2023 11:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 80.64.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:0c:ac:43:25:f8:21:8d:5d:87:1c:e3:20:54:5b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Nov 10 11:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25f285890b6c383c0dc7dd85909476d08f571c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:d7:d6:d6:56:84:53:a1:47:da:c5:29:9b:
55:ac:56:37:bf:2a:85:28:7b:95:91:3c:c7:1c:bb:
b4:9d:4f:62:3d:b7:88:4a:40:97:95:88:3b:e3:ec:
4d:cf:6c:6d:3c:74:ab:e2:19:6b:44:fa:ab:04:54:
04:44:ba:5e:fa:e5:55:ce:17:b4:2e:8b:21:0e:f0:
61:67:78:65:38:ac:cf:e2:d1:ef:b5:ec:07:c0:f1:
ea:2c:4e:0a:d3:df:e1:c1:c1:d0:31:ae:41:4e:03:
19:40:87:bd:c8:c8:3c:54:02:f9:27:93:f1:c4:1c:
8a:ec:97:e2:76:f7:f4:c5:a3:4f:09:f7:39:10:9e:
7b:35:38:3e:29:ad:e3:78:fa:2c:51:5a:ba:1e:b8:
e3:76:bd:20:c1:e2:43:56:0d:65:60:18:14:88:e8:
ff:e2:da:ec:7e:03:71:46:14:b1:7a:92:ee:95:d3:
fb:8c:7a:62:db:ed:fa:60:9f:9a:8f:a3:17:01:c9:
fd:02:1d:f4:23:ce:cf:30:6e:8e:f9:94:3a:2f:55:
0a:13:d5:a6:eb:de:1f:ae:75:07:32:3d:78:7c:bd:
da:c0:d3:e6:27:cd:fb:89:02:9c:1e:7c:83:63:1c:
fc:8e:10:7d:b3:1f:02:2f:e2:ad:48:7b:1f:64:b1:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F2:85:89:0B:6C:38:3C:0D:C7:DD:85:90:94:76:D0:8F:57:1C:8E
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/JfKFiQtsODwNx92FkJR20I9XHI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e9:57:88:f2:7d:11:27:7a:08:ad:73:e2:1c:7b:d6:8a:70:
17:9f:e2:8c:21:76:dd:14:cc:27:5e:0c:2f:ac:64:7d:b4:0c:
ef:14:33:db:b0:26:d3:d9:3e:74:3f:cb:88:b5:b4:b2:ae:5f:
d9:95:0b:a3:2e:cf:a5:e5:6f:ba:7c:39:88:f2:05:ea:94:6d:
ab:1b:84:0d:30:26:da:5b:7c:86:31:95:95:3a:e9:72:c4:ba:
cf:6a:ed:03:0c:7d:3b:15:b2:ea:df:13:a0:c1:a8:d6:80:dc:
f9:e1:e4:c4:a7:32:5d:36:d4:55:6f:93:8d:9f:cd:25:6e:7f:
8a:7f:7d:65:9d:38:a1:0d:e2:30:c4:06:c0:dc:2e:c1:e6:31:
51:08:84:98:58:cd:a6:6d:f3:4c:ba:04:b2:fd:4b:97:2a:f2:
3a:95:74:bc:bc:41:44:f8:5a:84:1d:83:b9:92:95:be:32:36:
ad:ef:46:5e:81:88:36:8e:33:c1:e1:1a:a0:5b:9b:5a:ab:99:
6c:99:f1:60:84:cd:14:af:2e:86:b5:7c:f7:a0:cc:9c:65:c3:
e3:59:cf:f8:55:8d:ce:79:de:e8:53:af:80:88:f7:a0:d6:64:
e8:2b:c2:e3:6f:1a:dd:6a:fe:09:c1:03:b8:35:d7:1c:fe:c9:
45:47:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:36 2025 by rpki-client