Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1jE9qEQ2jcTkoOuvjQtfYQNPKpE.roa
File: 1jE9qEQ2jcTkoOuvjQtfYQNPKpE.roa (raw, json)
Hash identifier: HQ+/pwzjOiicEoL43pojVSHih4O6vbIMx/DELCaVopk=
Subject key identifier: D6:31:3D:A8:44:36:8D:C4:E4:A0:EB:AF:8D:0B:5F:61:03:4F:2A:91
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 01939BF71874BA9B51B3B77F09951668C9C8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1jE9qEQ2jcTkoOuvjQtfYQNPKpE.roa
Signing time: Fri 06 Dec 2024 12:34:42 +0000
ROA not before: Fri 06 Dec 2024 12:34:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215672
IP address blocks: 80.93.193.0/24 maxlen: 24
80.93.199.0/24 maxlen: 24
80.93.203.0/24 maxlen: 24
80.93.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:f7:18:74:ba:9b:51:b3:b7:7f:09:95:16:68:c9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Dec 6 12:34:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6313da844368dc4e4a0ebaf8d0b5f61034f2a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:9a:db:fe:87:5f:97:07:77:a2:ee:95:51:
b6:98:bc:30:18:6f:07:14:f4:10:c4:a2:53:ac:dc:
05:4e:b3:9b:3c:01:bb:35:8c:1c:27:1e:8f:16:fb:
50:fd:11:3d:70:34:91:aa:4d:be:51:f3:37:e2:51:
60:4e:50:b2:e3:10:e4:d6:6e:e5:0c:94:50:b6:1d:
d6:fc:21:8c:bc:58:5d:1b:10:b3:23:0e:68:fd:d2:
dd:cf:23:f7:9b:f2:f3:f0:e6:b7:be:f5:49:fa:22:
36:91:89:1b:72:ab:0e:2a:8e:d9:04:a8:f0:68:57:
ce:9e:08:2c:2e:de:f0:54:0b:f2:f0:4d:e1:ea:b1:
6d:07:60:1e:f5:d4:dd:7f:21:bb:f7:6c:27:e1:7a:
ce:09:dc:ba:e2:e4:be:9d:34:6a:a5:40:4a:c8:7d:
ee:8d:90:ca:84:00:dd:d3:27:5d:ee:68:be:37:7c:
76:1e:b9:99:b8:eb:2f:fd:c8:49:25:50:73:41:35:
9c:05:02:37:0a:20:61:0a:ea:d6:f8:c5:38:b6:3d:
a7:dd:d2:c4:a5:3b:23:95:40:6d:45:b7:3e:81:b2:
a2:72:c5:50:4c:fb:fc:65:88:fd:5e:05:e4:86:f6:
c4:a8:b3:03:a0:4a:1b:89:e3:59:7e:0d:df:f9:8a:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:3D:A8:44:36:8D:C4:E4:A0:EB:AF:8D:0B:5F:61:03:4F:2A:91
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/1jE9qEQ2jcTkoOuvjQtfYQNPKpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.193.0/24
80.93.199.0/24
80.93.203.0/24
80.93.205.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ea:24:2b:43:8d:78:aa:d6:7d:06:9a:d9:70:5d:69:69:6b:
4b:fd:16:c1:7f:ed:90:fd:ad:27:c2:03:ca:45:ba:0c:ab:e6:
1c:ba:45:4c:fa:2b:5f:84:a7:db:a0:c9:f4:d4:f4:35:69:49:
44:f4:1a:40:2d:51:89:9e:ed:1a:15:12:68:90:a8:83:64:8e:
1d:8c:a7:ef:26:04:35:c6:ad:e4:4f:ea:ad:9a:10:80:7c:32:
52:e1:55:5e:1d:fa:7b:7c:51:42:16:b2:02:04:be:68:fd:d2:
aa:ba:24:11:db:b7:c9:bb:76:bb:8f:07:5c:72:38:75:24:e5:
f8:71:0c:86:48:6e:c1:01:6e:28:37:c4:f3:a7:5e:2d:4a:ec:
ba:44:96:5c:09:79:97:fa:89:c9:5e:38:ae:18:96:80:85:6a:
72:65:9e:42:5c:af:de:ac:7c:3d:e7:b1:a9:d6:aa:ec:e8:30:
55:74:39:0e:15:2f:9e:00:71:e5:bb:2d:d9:08:97:bd:ab:28:
a2:fb:00:fa:aa:6e:cc:9f:fc:21:51:e7:f4:55:6b:d5:f4:5f:
b4:f2:f4:a6:73:4c:c3:5e:df:e2:11:40:a0:5d:aa:a8:1c:d6:
03:59:f7:ed:f5:52:bb:b1:bb:a7:b9:95:b0:59:7f:f2:76:f7:
0a:4b:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:01 2025 by rpki-client