Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/hgWDHFr1hVE8xfw_cQJU-MOxHGY.roa
File: hgWDHFr1hVE8xfw_cQJU-MOxHGY.roa (raw, json)
Hash identifier: bqe82YJsaymg9CLhRPqGWAovdhsWz0erqqc/KRQVMio=
Subject key identifier: 86:05:83:1C:5A:F5:85:51:3C:C5:FC:3F:71:02:54:F8:C3:B1:1C:66
Certificate issuer: /CN=c4e9b1784a2d3decd168b4aee668d8ffc4f51d3c
Certificate serial: 01856B6EA18514831D099ED43CE869ECDEFD
Authority key identifier: C4:E9:B1:78:4A:2D:3D:EC:D1:68:B4:AE:E6:68:D8:FF:C4:F5:1D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOmxeEotPezRaLSu5mjY_8T1HTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/hgWDHFr1hVE8xfw_cQJU-MOxHGY.roa
Signing time: Sun 01 Jan 2023 03:44:50 +0000
ROA not before: Sun 01 Jan 2023 03:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 80.71.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:a1:85:14:83:1d:09:9e:d4:3c:e8:69:ec:de:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e9b1784a2d3decd168b4aee668d8ffc4f51d3c
Validity
Not Before: Jan 1 03:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8605831c5af585513cc5fc3f710254f8c3b11c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:69:8f:92:54:c6:f6:a2:8a:02:ae:4c:3e:
29:cf:fc:98:43:70:1c:2f:49:d4:e4:17:51:a0:ef:
b2:0e:5f:d2:a7:c9:11:94:1e:ab:4e:5c:9b:f1:7e:
fe:25:24:4d:b9:1a:0f:bd:ef:52:03:67:7f:1b:bf:
b7:9c:3d:ce:61:4c:2d:94:e5:d2:24:71:1b:20:11:
f7:95:0d:85:b8:63:f5:00:40:aa:47:ba:b7:04:1a:
2f:8d:db:cf:4d:0d:ea:7d:db:6e:33:f5:cd:67:d8:
0d:f6:8b:87:f0:54:49:f1:ea:b2:6b:8d:94:22:d8:
09:16:b7:ea:97:5a:f3:cc:ed:26:2e:4a:af:b7:70:
15:b2:2f:f1:04:57:8c:3d:11:62:f3:c1:39:51:07:
6c:c1:3e:7e:63:b2:f3:21:1c:f9:73:f3:88:1d:cd:
2b:4d:0e:06:a6:bc:6c:1a:67:72:cb:23:0d:6d:ad:
b1:6d:74:77:9e:c3:e5:29:20:d3:c8:65:c2:54:6a:
2f:1d:8b:0c:5f:74:d0:5b:dd:aa:eb:7b:c3:08:12:
b8:75:9e:d5:fd:a5:f8:e7:4f:ee:93:8f:94:a5:2b:
02:48:59:ed:64:5f:7a:c7:9a:e9:25:c7:9f:43:61:
a6:6e:20:be:a3:f7:a4:10:ba:77:be:9c:8a:2c:92:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:83:1C:5A:F5:85:51:3C:C5:FC:3F:71:02:54:F8:C3:B1:1C:66
X509v3 Authority Key Identifier:
keyid:C4:E9:B1:78:4A:2D:3D:EC:D1:68:B4:AE:E6:68:D8:FF:C4:F5:1D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOmxeEotPezRaLSu5mjY_8T1HTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/hgWDHFr1hVE8xfw_cQJU-MOxHGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/efdd3e-07e4-4254-a0f4-d10f940228f4/1/xOmxeEotPezRaLSu5mjY_8T1HTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f7:f2:2e:de:ce:60:f2:be:c4:16:26:b9:f8:c7:de:80:e7:
d3:15:5d:d8:4b:37:1d:16:d5:53:8b:80:71:1a:0c:e0:24:72:
e7:f8:ff:de:25:a2:31:9c:dc:92:b5:ff:08:94:8d:d6:14:d9:
83:1d:18:6d:8e:ed:40:de:07:24:c5:ce:a8:06:fc:78:b1:d4:
f2:b1:bf:98:9c:28:c2:d8:ae:92:9a:de:bd:dc:ea:2c:e1:b1:
cb:8b:1a:51:60:03:4a:33:27:81:79:ab:53:69:7a:b1:ac:b0:
27:dd:68:ec:c7:11:9d:da:7d:78:c0:73:34:3e:3c:d3:de:3b:
0f:65:52:5b:6e:f1:bd:10:48:df:2b:aa:a4:9c:ba:5d:0a:56:
fe:43:6a:07:f2:04:af:07:4d:aa:12:ee:22:a7:26:ef:9e:1d:
a3:28:46:db:97:d8:f4:c2:c4:12:ea:a0:06:49:3b:14:2d:1c:
b4:6a:25:b9:5b:63:f0:21:68:07:c5:18:58:96:2d:f2:b5:57:
4b:81:eb:0d:5d:73:a6:ad:0e:6e:02:5d:01:08:44:36:2c:52:
d0:22:66:b7:5d:e5:92:37:3b:8f:8c:5c:3b:5a:4b:17:45:b5:
d6:60:7a:75:f2:b1:bf:dd:45:21:e6:78:14:59:34:c7:78:f2:
af:c9:6a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:15 2024 by rpki-client on console-ams.rpki-client.org