Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/h_X13BjhpNrTuHnB4k-gANjYm4U.roa
File: h_X13BjhpNrTuHnB4k-gANjYm4U.roa (raw, json)
Hash identifier: lixfzKSQQ9pOLcii8MxCSeVT4V0+b6fjFTGR7FOEaio=
Subject key identifier: 87:F5:F5:DC:18:E1:A4:DA:D3:B8:79:C1:E2:4F:A0:00:D8:D8:9B:85
Certificate issuer: /CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Certificate serial: 018B5CA0FB86C08C147B3D78339121C5E398
Authority key identifier: 6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/h_X13BjhpNrTuHnB4k-gANjYm4U.roa
Signing time: Mon 23 Oct 2023 13:02:15 +0000
ROA not before: Mon 23 Oct 2023 13:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 80.91.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:a0:fb:86:c0:8c:14:7b:3d:78:33:91:21:c5:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1f4681e8c7e796d1bc5ad986705d998a8ad4ef
Validity
Not Before: Oct 23 13:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87f5f5dc18e1a4dad3b879c1e24fa000d8d89b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:4d:7b:cd:7e:d0:96:c0:7c:2b:c7:d6:67:
1e:99:bb:69:aa:65:d0:5f:0e:95:59:7c:40:f5:1b:
3b:f4:6d:1c:92:9d:6e:39:8d:f9:19:b8:0d:91:47:
e4:b5:42:58:7c:36:47:19:62:ab:5c:7d:4c:38:a7:
a8:88:e5:93:97:b9:e6:6a:3d:79:57:95:a9:d2:b3:
23:3f:c1:28:e7:de:43:8b:40:48:52:d5:2e:74:2c:
51:0e:8a:eb:d1:22:42:60:10:2f:77:a5:a6:95:e8:
81:41:47:62:b0:a9:95:9d:44:a9:3d:54:93:ea:df:
6a:5c:3c:1a:8b:83:ff:7a:ee:59:06:a3:f3:05:03:
a4:96:a8:fa:1b:89:20:b6:9f:94:f9:63:b9:a8:e3:
44:9c:96:ea:bd:d2:a2:d7:eb:b1:e3:33:86:61:8c:
72:02:7b:aa:09:05:2e:35:0b:b9:9d:5f:03:e3:64:
31:f7:51:8e:46:e6:1b:25:8c:ce:7d:a4:76:83:f6:
c6:18:ec:cd:73:f6:d0:0c:f2:7a:38:44:14:a4:d3:
69:71:af:87:e9:3a:37:77:79:3e:2d:88:98:b6:0c:
76:44:13:2e:d0:0b:d4:4e:84:c5:fd:76:f5:c9:b9:
39:90:6b:16:ac:f5:04:e2:3e:91:00:17:ad:d7:bd:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F5:F5:DC:18:E1:A4:DA:D3:B8:79:C1:E2:4F:A0:00:D8:D8:9B:85
X509v3 Authority Key Identifier:
keyid:6C:1F:46:81:E8:C7:E7:96:D1:BC:5A:D9:86:70:5D:99:8A:8A:D4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bB9GgejH55bRvFrZhnBdmYqK1O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/h_X13BjhpNrTuHnB4k-gANjYm4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/162832-e9fb-4f36-b206-027bd73a5104/1/bB9GgejH55bRvFrZhnBdmYqK1O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:df:9a:28:9f:53:8c:a0:20:9d:b2:9a:7b:cb:6e:c5:8a:b1:
72:f8:26:90:05:8b:ba:da:35:0f:79:b6:fd:05:66:47:80:52:
f3:bb:ae:e2:e7:83:40:6f:1e:d7:48:c9:a6:47:f4:5c:c7:9c:
38:f9:fe:1a:e5:8a:f3:99:15:d5:21:07:33:b8:8a:8b:15:a9:
61:72:f7:7d:00:aa:04:4b:08:00:78:55:a0:0c:3d:61:02:d0:
0d:f0:4d:69:95:8b:73:17:d6:ba:41:e1:8b:53:aa:17:c0:0d:
90:df:32:80:e1:98:29:b5:15:8f:7b:4e:71:d9:5f:31:ad:0b:
eb:dc:cf:7b:62:15:f6:b0:d9:32:f7:53:be:87:21:5e:a6:b1:
b5:66:88:e2:af:66:9a:2b:f6:de:8c:97:3f:79:73:63:4c:6a:
bf:09:7a:e8:59:d3:5d:eb:0e:77:a7:df:63:b5:3e:f9:ac:44:
3b:b4:a5:31:06:0d:e3:71:7a:5d:4c:02:c9:f6:71:ca:33:62:
d9:16:82:f5:48:18:a3:be:70:f9:40:19:03:00:94:a0:5a:47:
04:6f:0e:49:16:9e:58:cf:6a:54:1a:a0:9a:11:a2:45:67:34:
fb:bb:de:97:1d:3e:f1:dd:e8:29:7f:68:f9:31:b4:69:97:00:
6e:6c:f5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:22 2025 by rpki-client