Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/kInT9FwUvWYoWpXGz26QOct_ejI.roa
File: kInT9FwUvWYoWpXGz26QOct_ejI.roa (raw, json)
Hash identifier: tD+2gASsmudYR/bh+YOf1d1tpVy2I1pLBn83NE+PLIQ=
Subject key identifier: 90:89:D3:F4:5C:14:BD:66:28:5A:95:C6:CF:6E:90:39:CB:7F:7A:32
Certificate issuer: /CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Certificate serial: 018CC86EFFCC162C51E317C11782A5504D3B
Authority key identifier: 0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/kInT9FwUvWYoWpXGz26QOct_ejI.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 80.68.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ff:cc:16:2c:51:e3:17:c1:17:82:a5:50:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9089d3f45c14bd66285a95c6cf6e9039cb7f7a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:1f:09:01:f7:be:40:f1:73:3a:b4:3a:9a:
d8:1c:d1:92:83:a3:c4:43:0c:69:6b:6d:9f:f1:38:
69:ad:49:c5:23:24:58:ff:e5:a1:6a:e3:28:25:bc:
f5:b8:96:d6:44:4b:7f:1f:a8:55:fd:5b:6e:ea:0b:
d1:27:3f:54:f8:0f:24:0b:ea:10:90:01:21:3d:73:
0d:60:af:c0:59:3e:1c:66:75:68:3e:54:ae:96:73:
f0:3f:83:1e:70:cf:bf:61:05:e3:11:34:26:be:7e:
d7:7f:f8:89:4f:2f:fb:af:f1:6d:7e:67:69:51:a5:
71:45:86:5e:03:75:9f:ee:65:1a:40:a4:7e:df:2c:
28:22:0b:87:a4:02:c3:b7:de:db:94:fe:57:c7:0d:
ad:15:3b:35:97:0a:20:88:bf:9e:ec:2e:48:9b:59:
96:97:03:9d:b4:c6:64:e4:36:1c:ca:1d:10:74:c9:
5c:db:3b:78:25:5c:48:ca:79:55:eb:d0:53:f6:47:
bb:3e:8b:4e:34:e9:ff:eb:fd:aa:10:37:84:ae:0b:
a0:00:72:69:b1:15:f8:a9:b0:7e:0e:f6:96:97:59:
6b:96:b4:7e:36:7a:1f:ea:ef:49:57:77:8f:5b:e2:
d0:e6:30:f1:eb:e7:f9:4b:9f:c3:65:e9:e6:66:e7:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:89:D3:F4:5C:14:BD:66:28:5A:95:C6:CF:6E:90:39:CB:7F:7A:32
X509v3 Authority Key Identifier:
keyid:0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/kInT9FwUvWYoWpXGz26QOct_ejI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DroFQi1N1HjI8kt_QwIhO_-CdPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.150.0/24
Signature Algorithm: sha256WithRSAEncryption
84:75:e8:1a:30:69:3d:2e:ff:73:5d:bd:e4:84:86:3e:58:b7:
15:15:17:8e:cc:4c:6e:cd:d1:f5:24:75:26:e0:b1:34:d3:0a:
77:9d:f3:ee:a6:e8:5f:fe:33:51:29:7c:6b:76:43:83:ea:ed:
31:c4:eb:62:b1:93:f5:b3:61:bc:4f:da:20:be:18:35:9b:c1:
7c:68:10:7f:a1:c9:d6:46:f2:e4:97:90:6c:ce:88:63:3a:8d:
46:59:91:92:66:5b:c0:fa:a1:81:ca:bc:4e:a5:00:cc:cb:d7:
93:a5:64:31:7b:6f:56:71:67:bd:00:73:bd:47:98:e0:75:35:
95:3d:8a:62:23:7b:90:db:88:39:69:70:5c:8d:a5:e6:5f:0a:
0e:ad:98:3c:85:c0:40:56:08:4f:54:21:42:23:b6:58:c5:48:
0a:9d:e7:50:e0:fe:a7:05:c6:d5:ae:06:db:96:96:7a:7a:41:
f3:12:78:ae:3f:2c:b2:cc:44:73:c3:f9:df:88:85:a8:b0:0f:
1b:c9:f5:01:f4:05:a9:7a:eb:1e:23:13:5f:8e:63:6b:67:18:
5b:f6:ed:1e:61:08:0a:89:3e:4e:c4:17:78:1c:96:c9:12:34:
6b:68:39:be:bf:e3:28:6b:af:70:02:aa:3e:74:29:4d:72:52:
9d:3a:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:46 2025 by rpki-client