Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/5lCRp1Gb6PtLrs9XIJOMicTLOhU.roa
File: 5lCRp1Gb6PtLrs9XIJOMicTLOhU.roa (raw, json)
Hash identifier: TqWPA9yOHFZ/4RsgIjYQaZwwCYyplGZzE+tzwzrcXfA=
Subject key identifier: E6:50:91:A7:51:9B:E8:FB:4B:AE:CF:57:20:93:8C:89:C4:CB:3A:15
Certificate issuer: /CN=bbf43e173f782f01c33b33693985bd3c08d4d054
Certificate serial: 01856F7974D13E2EE9359B79E5447A15F05E
Authority key identifier: BB:F4:3E:17:3F:78:2F:01:C3:3B:33:69:39:85:BD:3C:08:D4:D0:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/5lCRp1Gb6PtLrs9XIJOMicTLOhU.roa
Signing time: Sun 01 Jan 2023 22:35:08 +0000
ROA not before: Sun 01 Jan 2023 22:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42205
IP address blocks: 185.33.82.0/23 maxlen: 23
80.85.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:74:d1:3e:2e:e9:35:9b:79:e5:44:7a:15:f0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf43e173f782f01c33b33693985bd3c08d4d054
Validity
Not Before: Jan 1 22:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e65091a7519be8fb4baecf5720938c89c4cb3a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:54:de:8c:ee:17:6e:75:ba:f7:b7:fe:de:
15:1d:8f:ec:d9:35:2b:09:8d:ef:05:29:bd:e1:e6:
26:e7:db:5e:e3:ad:e5:37:77:4d:6b:bd:a0:39:5b:
3c:7a:4e:1d:29:eb:ce:8b:89:d4:4c:a7:5b:72:cc:
75:3a:1b:fa:7c:49:a5:8c:a7:b5:f8:18:f2:73:3a:
f3:10:1d:e9:49:96:3e:48:d7:0a:71:44:8a:56:6e:
12:03:9a:46:b7:14:ff:54:d8:b8:5e:ab:8a:35:ed:
5e:b0:74:d5:96:23:60:99:f3:31:76:7d:13:b6:a1:
d7:83:52:68:f6:ab:0d:8b:7b:f6:6f:f4:4e:9b:fb:
69:94:dd:ec:a7:38:51:dc:50:02:98:75:66:1f:20:
4a:6d:c7:7e:de:b8:55:ba:03:35:43:6a:6c:d6:5a:
1e:10:4d:56:ef:de:de:39:41:72:e2:36:0f:08:e4:
ee:c9:ee:d4:3f:9c:93:62:03:5d:c9:b2:28:33:be:
f3:24:48:db:db:6d:a3:28:c8:3d:9f:57:9f:5d:33:
0d:c2:be:69:f2:f7:01:e6:a6:f5:79:9f:7b:cb:85:
d3:50:c6:17:63:04:89:b5:df:95:aa:34:f2:21:ef:
1a:b3:93:63:f9:75:4c:4e:b6:9a:db:51:5f:c0:9b:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:50:91:A7:51:9B:E8:FB:4B:AE:CF:57:20:93:8C:89:C4:CB:3A:15
X509v3 Authority Key Identifier:
keyid:BB:F4:3E:17:3F:78:2F:01:C3:3B:33:69:39:85:BD:3C:08:D4:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/5lCRp1Gb6PtLrs9XIJOMicTLOhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.56.0/21
185.33.82.0/23
Signature Algorithm: sha256WithRSAEncryption
28:09:6d:60:05:33:8f:e1:f0:b7:ef:ca:a6:d1:aa:a4:d6:1d:
63:fa:32:89:ca:c7:46:8a:da:34:d7:0b:5a:04:8b:ac:22:7b:
9e:c5:2f:98:47:16:d9:fd:5b:1e:af:fe:96:d2:82:48:dc:c3:
ed:44:9b:88:93:44:b2:d3:73:5c:0f:35:16:e7:dd:8d:bb:f9:
9e:11:e0:a1:3f:d0:c9:08:0f:ce:30:4b:25:2f:19:b9:05:53:
0e:49:84:a1:f0:75:9b:4c:64:a7:11:8b:a9:66:6f:d5:82:7a:
d0:7c:1f:07:d9:9b:60:59:dc:30:ad:ea:dd:a1:8f:9a:22:d9:
38:ce:70:83:63:8c:7d:16:d9:2a:85:cb:26:85:6d:ee:43:5e:
ce:be:d7:12:7b:95:76:6a:fa:99:23:56:24:07:bf:5d:b2:27:
cb:35:60:cd:56:af:69:8d:e8:d4:76:db:e2:fb:cd:1b:9b:7d:
97:08:19:df:05:a8:99:a9:c9:a2:fc:f1:ae:e5:c2:88:7f:50:
51:a4:e0:23:2a:30:da:4e:dd:2c:7d:6e:49:97:3d:87:42:1f:
ca:1a:61:10:c9:0d:42:60:17:0a:cf:60:32:bd:89:0c:ed:ef:
88:a1:41:b7:a6:07:bb:2c:78:4e:40:8a:f7:32:2f:27:b7:0e:
3e:ca:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:38 2025 by rpki-client