Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/aOFqdWp00tQpP6nNCFPN_JjhWcQ.roa
File: aOFqdWp00tQpP6nNCFPN_JjhWcQ.roa (raw, json)
Hash identifier: L9cUsKQAGBQlUXhZ/BbXr/rVvPbhWtU08caKEgzX8ck=
Subject key identifier: 68:E1:6A:75:6A:74:D2:D4:29:3F:A9:CD:08:53:CD:FC:98:E1:59:C4
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 0187ED15DBECE46FB5219CFC4749F346BBD1
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/aOFqdWp00tQpP6nNCFPN_JjhWcQ.roa
Signing time: Fri 05 May 2023 18:04:05 +0000
ROA not before: Fri 05 May 2023 18:04:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 80.64.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:15:db:ec:e4:6f:b5:21:9c:fc:47:49:f3:46:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: May 5 18:04:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68e16a756a74d2d4293fa9cd0853cdfc98e159c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:bb:eb:b1:ff:d8:23:23:a6:4b:d0:6c:33:
d7:45:16:ae:97:f1:65:dc:26:e6:4b:5c:3a:4b:46:
64:1e:cd:27:44:45:ea:4e:30:b9:82:ec:d7:0a:da:
4d:29:0d:33:b4:2b:36:f2:b8:69:be:ff:f6:aa:5d:
5c:8d:75:55:48:1c:83:a0:52:3c:0a:ff:cb:9f:10:
f3:0c:b0:6d:11:f7:79:b8:e0:54:4c:66:3f:95:66:
1f:10:07:b0:33:c5:22:69:c7:34:9e:c9:90:97:a3:
b7:eb:da:9a:13:92:66:cc:74:7c:28:a7:1b:9b:c1:
c0:99:01:22:0b:cf:40:77:6c:26:34:ae:06:d9:94:
37:0c:c3:67:d2:ab:18:ab:51:e0:44:36:db:85:22:
41:13:b0:6e:7e:a5:d5:62:f5:5f:3f:cd:cb:cc:3e:
0e:a6:9c:e8:7f:63:c8:27:9b:83:5c:2e:39:08:4e:
1d:c0:e3:ae:1e:1e:27:7d:ee:4f:61:9e:2f:01:42:
f4:72:54:e2:d3:c7:4c:54:b9:70:16:47:76:87:f8:
14:73:50:04:82:aa:50:3d:02:50:4f:ca:8d:71:8a:
ce:75:a9:d5:d5:78:7f:70:f9:cb:1b:8d:8a:db:9b:
07:08:dc:90:29:6b:21:16:91:1c:ba:48:c6:4b:cb:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:6A:75:6A:74:D2:D4:29:3F:A9:CD:08:53:CD:FC:98:E1:59:C4
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/aOFqdWp00tQpP6nNCFPN_JjhWcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.29.0/24
Signature Algorithm: sha256WithRSAEncryption
04:11:b7:e6:a4:b4:f0:80:1c:16:0b:11:0a:67:51:c8:85:bd:
07:4f:64:c8:7b:ff:17:c7:f0:c0:37:50:c4:fd:48:76:b8:22:
38:c8:2d:22:e3:e7:0d:ca:2a:d9:79:dd:51:1b:bc:3e:dd:c2:
c4:e3:69:70:59:6d:7a:65:63:27:2e:22:17:df:2a:f2:56:b9:
e0:74:6e:82:34:56:f5:0e:82:9e:18:18:24:4a:c6:39:6e:18:
1c:89:07:f9:c8:c0:89:21:a7:c0:e5:56:68:90:e1:52:b8:d4:
91:1c:33:3a:5c:c5:e4:d3:51:e6:2f:70:0c:1b:7c:2b:86:a5:
96:55:54:d8:9f:b6:5a:9c:b6:42:2f:33:c0:3d:74:d6:86:3f:
ef:b7:cd:6d:b5:86:4b:69:76:40:92:42:c3:5b:07:a6:6a:f6:
54:a0:59:a4:20:3b:03:c4:ad:00:6e:f2:df:8b:5b:ea:c1:0e:
84:89:c9:22:17:53:15:c8:f5:84:bf:a9:d1:7a:68:19:46:9d:
d4:dd:24:93:c6:d9:a8:6e:9c:a2:9d:d1:b0:de:fc:47:6f:75:
45:c0:32:f3:ca:c6:b2:e4:98:bf:78:71:eb:ef:14:db:83:0d:
5c:1b:58:84:25:c2:e7:5e:3f:9f:00:05:ce:d1:57:87:45:db:
df:f1:ba:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org