Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/N8HLkv_Ks0SQ38hyksdP3JyGf7c.roa
File: N8HLkv_Ks0SQ38hyksdP3JyGf7c.roa (raw, json)
Hash identifier: dy2eInAVrzESWUyBt3ZHVu/G4wJvckeT8LNL9/JD9NQ=
Subject key identifier: 37:C1:CB:92:FF:CA:B3:44:90:DF:C8:72:92:C7:4F:DC:9C:86:7F:B7
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 018322502D15C0D3C344FD6E9E2099F3C59D
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/N8HLkv_Ks0SQ38hyksdP3JyGf7c.roa
Signing time: Fri 09 Sep 2022 12:53:43 +0000
ROA not before: Fri 09 Sep 2022 12:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42423
IP address blocks: 80.91.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:50:2d:15:c0:d3:c3:44:fd:6e:9e:20:99:f3:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: Sep 9 12:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37c1cb92ffcab34490dfc87292c74fdc9c867fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:6b:c3:d4:c4:6b:69:ef:df:31:3b:7f:4d:
f2:c4:39:74:f6:42:81:6f:15:9a:d4:f1:52:e3:15:
07:b2:f5:2b:a9:a6:8b:c0:a2:2a:7f:33:46:3e:8b:
2e:f1:91:70:a9:d1:6c:3a:8e:0f:80:d4:f5:34:eb:
44:8f:36:f1:2e:d3:94:90:27:18:21:db:d9:b0:ed:
19:31:a9:7f:52:32:fd:d7:11:41:5d:5e:e4:67:d8:
71:4f:6d:bb:fa:ca:18:85:b5:f5:25:10:f8:a2:6a:
cb:d6:bd:13:f3:0e:eb:99:37:4a:87:c3:63:5e:e9:
07:f2:fd:78:56:b2:14:99:f6:bd:ec:26:05:66:45:
1a:04:c0:89:0b:7a:bb:6c:27:e2:81:8c:14:f0:c2:
48:b0:ff:a8:bc:86:88:56:81:83:e2:f1:04:ea:45:
79:8e:1b:11:31:74:93:56:1b:03:1e:06:92:69:19:
80:db:59:ed:6f:8f:a6:5b:d3:45:ce:fb:27:49:4c:
77:c2:19:a8:3b:7b:c9:d6:38:0a:b2:f2:e8:55:9a:
c3:da:ec:12:99:4d:9f:8f:80:c7:de:e6:9f:12:11:
fa:43:c3:68:5a:f9:c5:d0:6b:43:46:e6:4d:dc:00:
9d:91:7d:10:bf:55:83:df:51:7d:eb:9d:63:b1:29:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:CB:92:FF:CA:B3:44:90:DF:C8:72:92:C7:4F:DC:9C:86:7F:B7
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/N8HLkv_Ks0SQ38hyksdP3JyGf7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ed:52:ac:37:2f:06:cf:f2:3e:85:4e:04:27:c1:fb:ce:b6:
a0:de:04:50:0b:a4:6b:9a:67:e8:c3:f4:a6:60:a8:e4:97:86:
6b:f9:54:e2:63:d5:b7:ed:a5:6b:90:b8:a4:46:4f:07:07:09:
9f:e4:ce:ec:18:c4:78:a9:b4:1f:7c:62:a0:05:74:58:ed:ef:
21:c8:64:35:4b:17:70:4d:b5:ec:82:cb:cb:99:52:ea:47:f1:
22:6f:dc:07:ea:8d:ae:8f:e9:25:de:7b:ff:b5:94:c3:70:3d:
11:46:c5:2a:01:86:1b:94:0b:1f:a2:02:2f:de:d0:e5:1b:89:
50:f2:ad:07:61:35:9a:3d:df:a9:34:d0:61:80:96:13:13:51:
b7:15:a2:d4:57:bb:32:36:8b:83:78:0a:44:a2:82:d9:0d:fc:
3b:0a:89:de:ad:6f:b4:e8:3a:14:6a:02:8e:b3:da:fe:bb:ff:
9c:fa:10:7d:23:1d:9a:29:8e:3c:6a:21:9b:f2:87:b0:70:90:
e9:5a:bb:50:9b:92:d4:6a:1a:98:28:61:f9:f0:89:4c:68:6f:
e4:36:9a:39:97:c3:fe:ec:5a:b6:fe:db:c6:bd:ce:66:99:70:
37:ff:06:1d:fd:c1:e8:5b:44:a7:f0:97:9e:5b:b9:34:6e:f3:
ac:92:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:48 2025 by rpki-client