Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/h6fqZpZl5oN5galnjh3qz5fsvfg.roa
File: h6fqZpZl5oN5galnjh3qz5fsvfg.roa (raw, json)
Hash identifier: scKFiWWFHJ/EBcVXA5Ug0lXoq2UzLD5DTss6U92qTHI=
Subject key identifier: 87:A7:EA:66:96:65:E6:83:79:81:A9:67:8E:1D:EA:CF:97:EC:BD:F8
Certificate issuer: /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial: 018E0E569D229D2B35681369D5EEC8B88CC4
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/h6fqZpZl5oN5galnjh3qz5fsvfg.roa
Signing time: Tue 05 Mar 2024 11:19:01 +0000
ROA not before: Tue 05 Mar 2024 11:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215633
IP address blocks: 80.75.213.0/24 maxlen: 24
2a09:2b80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:56:9d:22:9d:2b:35:68:13:69:d5:ee:c8:b8:8c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Validity
Not Before: Mar 5 11:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87a7ea669665e6837981a9678e1deacf97ecbdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:b8:0c:7e:c3:48:a8:86:e4:a2:4f:11:5f:
d3:5c:f8:be:44:4e:b2:c0:37:a9:ef:b3:7f:7d:08:
90:db:8d:05:c5:eb:96:ff:b0:12:06:59:53:60:2c:
4c:71:7b:59:15:d6:07:89:1b:dd:06:ed:9f:8a:1f:
78:12:9a:8c:82:7b:a0:d3:50:4d:6f:06:69:f9:03:
14:f9:0b:92:2c:2c:09:57:54:99:22:6d:3d:7f:43:
8a:7e:cb:24:73:1e:f5:f8:ab:e1:c7:91:b1:93:53:
12:38:0a:8e:f7:01:bb:21:69:a6:4b:93:e2:16:c3:
b2:a2:d4:b7:0a:57:ce:79:a2:c6:e9:3b:e4:fd:e1:
bb:23:63:df:24:e3:5c:6e:bc:a0:e3:a7:e3:a2:d9:
23:73:2e:77:a4:a5:c0:5e:5f:64:0d:b1:44:43:c6:
37:6f:ff:5e:58:88:40:5a:4a:66:07:d5:bc:d5:be:
3c:d1:28:86:75:4b:6e:ea:ce:ac:03:c0:58:4b:ff:
15:6a:bb:61:a4:35:26:03:5f:30:34:0b:e2:89:43:
46:e9:b0:e0:16:ea:89:c5:1f:55:39:21:c3:05:84:
3e:93:9a:f3:37:ad:ca:65:9a:7d:76:ad:04:13:d5:
fb:ce:ae:3a:9f:5d:ce:ea:2a:d0:a8:51:5b:f7:f0:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A7:EA:66:96:65:E6:83:79:81:A9:67:8E:1D:EA:CF:97:EC:BD:F8
X509v3 Authority Key Identifier:
keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/h6fqZpZl5oN5galnjh3qz5fsvfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
IPv6:
2a09:2b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
3f:1e:a4:e0:4d:39:9b:fc:af:51:d0:56:fc:da:94:2b:92:cb:
ae:65:0c:92:50:33:60:dc:41:7c:d5:cf:1b:f9:cc:d6:f1:35:
da:37:88:2f:d9:04:d6:20:dd:44:b8:8d:c8:b0:90:74:e1:c6:
8d:f9:3e:ec:fe:57:3f:b3:cd:7f:38:4b:26:1f:00:74:49:53:
60:07:cc:80:52:a5:29:4e:8c:41:6f:73:85:b7:12:75:1f:97:
06:f5:e3:53:10:81:74:09:07:28:3c:8f:d8:cc:55:20:c2:75:
1f:32:2d:18:e3:a8:e0:fa:93:63:ad:97:da:19:5b:be:05:a1:
7b:ce:73:ed:e8:12:46:3e:52:88:73:c2:17:93:4f:09:65:0d:
91:a1:a2:b4:b6:b8:79:7b:fa:d5:e7:e0:cc:ac:77:ac:27:f3:
2c:ab:8b:0a:61:9f:ff:aa:5b:56:30:4d:7b:4c:0b:04:f2:76:
06:cc:92:60:05:67:14:1f:5f:96:87:73:35:ec:05:0f:92:a2:
db:88:0e:41:d4:d9:cd:b3:7b:b7:c3:02:86:08:33:0e:13:b5:
dc:8d:0b:a4:64:9b:7e:64:11:d7:a0:f5:a0:74:f6:25:1e:f6:
b7:0a:20:35:db:a1:ac:81:0d:aa:85:8a:98:7b:e3:ae:09:c8:
e6:ef:4b:48
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY4OVp0inSs1aBNp1e7IuIzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTAyYTI5YWMwNmI2NWU5MzJlMWJkOTdkN2ZjZjI5YzM3
MWNiM2QwHhcNMjQwMzA1MTExOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2E3ZWE2Njk2NjVlNjgzNzk4MWE5Njc4ZTFkZWFjZjk3ZWNiZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQW4DH7DSKiG5KJPEV/TXPi+RE6y
wDep77N/fQiQ240FxeuW/7ASBllTYCxMcXtZFdYHiRvdBu2fih94EpqMgnug01BN
bwZp+QMU+QuSLCwJV1SZIm09f0OKfsskcx71+Kvhx5Gxk1MSOAqO9wG7IWmmS5Pi
FsOyotS3ClfOeaLG6Tvk/eG7I2PfJONcbryg46fjotkjcy53pKXAXl9kDbFEQ8Y3
b/9eWIhAWkpmB9W81b480SiGdUtu6s6sA8BYS/8VarthpDUmA18wNAviiUNG6bDg
FuqJxR9VOSHDBYQ+k5rzN63KZZp9dq0EE9X7zq46n13O6irQqFFb9/AOmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIen6maWZeaDeYGpZ44d6s+X7L34MB8GA1UdIwQY
MBaAFFJQKimsBrZeky4b2X1/zynDccs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxBcUthd0d0bDZUTGh2WmZYX1BLY054eXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kMDMxMDktZTJkYy00YmM5LWJhMmUt
ZDY0OWUyMjcwOTdmLzEvaDZmcVpwWmw1b041Z2FsbmpoM3F6NWZzdmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kMDMxMDktZTJkYy00YmM5LWJhMmUtZDY0OWUyMjcwOTdm
LzEvVWxBcUthd0d0bDZUTGh2WmZYX1BLY054eXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUEvVMA8E
AgACMAkDBwAqCSuAAAEwDQYJKoZIhvcNAQELBQADggEBAD8epOBNOZv8r1HQVvza
lCuSy65lDJJQM2DcQXzVzxv5zNbxNdo3iC/ZBNYg3US4jciwkHThxo35Puz+Vz+z
zX84SyYfAHRJU2AHzIBSpSlOjEFvc4W3EnUflwb141MQgXQJByg8j9jMVSDCdR8y
LRjjqOD6k2Otl9oZW74FoXvOc+3oEkY+UohzwheTTwllDZGhorS2uHl7+tXn4Mys
d6wn8yyriwphn/+qW1YwTXtMCwTydgbMkmAFZxQfX5aHczXsBQ+SotuIDkHU2c2z
e7fDAoYIMw4TtdyNC6Rkm35kEdeg9aB09iUe9rcKIDXboayBDaqFiph7464JyObv
S0g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org