Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/jhpZyfQG7-nDkaJYfZANsEfc0Bg.roa
File: jhpZyfQG7-nDkaJYfZANsEfc0Bg.roa (raw, json)
Hash identifier: sftBpWQeFdeZw++VPaShiO1OkV2bOuFwJGqr/Jp7OpQ=
Subject key identifier: 8E:1A:59:C9:F4:06:EF:E9:C3:91:A2:58:7D:90:0D:B0:47:DC:D0:18
Certificate issuer: /CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Certificate serial: 01856DE6623710EB88101CFC442EE9FF90C0
Authority key identifier: 27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/jhpZyfQG7-nDkaJYfZANsEfc0Bg.roa
Signing time: Sun 01 Jan 2023 15:14:52 +0000
ROA not before: Sun 01 Jan 2023 15:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 80.91.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:62:37:10:eb:88:10:1c:fc:44:2e:e9:ff:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ed8db4f101e1524266a1078e7cd82d7c612843
Validity
Not Before: Jan 1 15:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e1a59c9f406efe9c391a2587d900db047dcd018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:d7:49:21:e1:fa:0f:09:bf:9c:e1:60:5e:
17:a7:42:d2:4b:e1:f2:a7:a9:19:9e:58:27:1d:40:
0c:2c:24:bd:94:85:03:4e:59:c1:12:15:c8:8b:10:
ae:c2:07:f6:be:a2:e2:1b:30:54:63:c6:7b:29:a8:
33:4f:1d:9e:ae:40:4e:37:ec:77:75:36:4e:a2:e1:
40:11:76:88:fc:3f:8c:db:75:1b:99:af:c9:b6:d4:
e6:f6:6d:6c:a5:36:00:3d:66:b2:92:4b:97:2e:74:
b3:0e:20:16:c4:f7:72:7f:47:b3:06:7e:62:57:80:
a5:ad:b0:25:9f:df:15:fb:a4:c4:87:f5:63:52:6a:
ec:86:dc:00:16:07:87:30:d5:c0:d3:33:6d:19:79:
fa:db:96:5f:88:3c:2e:c1:cc:25:6e:34:61:63:0b:
fe:fa:19:8d:7c:7c:15:d7:c4:08:4d:a5:bb:99:6a:
f9:66:23:e1:1e:f6:3e:ac:c7:25:28:77:d7:1e:62:
6c:0b:2f:fd:a9:87:43:aa:8c:85:dd:b7:eb:a2:47:
51:44:5c:4c:63:90:81:c5:50:6e:20:c5:f5:8d:28:
83:7d:ad:02:53:1f:a4:c4:92:86:c9:19:bb:fd:d5:
ab:b2:a5:3b:ba:f1:09:d6:b3:36:63:2d:b1:70:9b:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1A:59:C9:F4:06:EF:E9:C3:91:A2:58:7D:90:0D:B0:47:DC:D0:18
X509v3 Authority Key Identifier:
keyid:27:ED:8D:B4:F1:01:E1:52:42:66:A1:07:8E:7C:D8:2D:7C:61:28:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-2NtPEB4VJCZqEHjnzYLXxhKEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/jhpZyfQG7-nDkaJYfZANsEfc0Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d09fd4-a01b-4e85-b344-c849a99eaea9/1/J-2NtPEB4VJCZqEHjnzYLXxhKEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.212.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ff:a6:f5:fb:15:7e:16:37:bf:d1:6c:a2:0d:11:b6:a6:67:
0d:89:27:a2:6b:3f:9c:25:c1:c8:3b:c6:e4:a8:20:24:83:83:
90:0a:ed:83:b5:62:02:ec:40:e6:66:94:b8:cd:af:d9:97:3f:
eb:2e:c4:48:82:31:d3:49:bb:bf:8b:e8:85:33:49:34:07:d2:
dd:a6:e5:bd:71:b7:75:43:eb:ce:bf:84:77:65:7c:1e:77:a9:
bd:a4:1d:e4:b8:32:eb:5a:a3:49:5c:4b:a8:0e:a1:84:e5:c8:
bb:99:3f:37:f1:71:1e:46:ef:58:0a:b0:59:18:8f:54:b7:10:
39:0d:af:ae:00:25:1f:ba:c5:ae:70:b3:d7:87:6e:bb:97:22:
66:a3:60:94:6e:5f:f3:6e:c2:e1:ec:f0:09:09:67:64:97:66:
5c:75:de:92:a7:20:a1:1b:2c:0e:ef:5e:85:ea:e7:ee:c7:12:
41:35:f7:ac:1e:c8:74:aa:19:d6:f3:48:35:d0:91:e8:c9:c0:
53:e9:64:5f:fd:ab:29:38:8d:17:28:97:15:2b:15:db:36:7f:
01:a2:d4:69:01:2c:e7:4d:3a:28:ca:68:68:d7:8b:bc:fb:0e:
6c:66:3b:70:45:a0:f0:03:f7:ef:7e:4c:66:04:8b:e0:56:de:
bb:70:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:02 2025 by rpki-client