Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/CIlsksrNBBIu_L6V7oTZFmMdCvQ.roa
File: CIlsksrNBBIu_L6V7oTZFmMdCvQ.roa (raw, json)
Hash identifier: QAf1dOKhtdXprXBi16/UXj/d52xft7Tpo4rHfyQR/Vg=
Subject key identifier: 08:89:6C:92:CA:CD:04:12:2E:FC:BE:95:EE:84:D9:16:63:1D:0A:F4
Certificate issuer: /CN=e8bb0e846120af811657611c9acf1afe0bf82751
Certificate serial: 01856F9DE2C751583FD1A98C6E4396F8DC57
Authority key identifier: E8:BB:0E:84:61:20:AF:81:16:57:61:1C:9A:CF:1A:FE:0B:F8:27:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LsOhGEgr4EWV2Ecms8a_gv4J1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/CIlsksrNBBIu_L6V7oTZFmMdCvQ.roa
Signing time: Sun 01 Jan 2023 23:14:56 +0000
ROA not before: Sun 01 Jan 2023 23:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 80.91.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e2:c7:51:58:3f:d1:a9:8c:6e:43:96:f8:dc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bb0e846120af811657611c9acf1afe0bf82751
Validity
Not Before: Jan 1 23:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08896c92cacd04122efcbe95ee84d916631d0af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:f8:12:e5:7e:a6:06:f6:b4:bd:bf:b3:7a:
8d:bb:37:92:e0:fb:33:e7:2d:83:25:36:ed:89:e3:
8c:15:e9:e8:f0:1b:42:71:36:31:51:27:7f:ce:7d:
ce:f6:4b:ee:47:8b:8f:a6:63:2c:dc:ce:f7:ef:78:
2a:74:ec:c2:5b:81:14:fb:97:67:0c:2b:e2:7f:f7:
d1:ab:77:16:a3:68:64:0e:02:15:05:33:6d:db:1f:
c1:8c:33:0c:d5:74:07:ec:8c:1c:b0:0b:af:85:d5:
12:20:f6:26:4a:fe:a8:f9:7e:d0:48:92:01:f9:0d:
e5:84:ed:d5:af:43:c8:07:62:65:80:87:b0:1d:05:
7d:35:3a:fc:65:0c:56:b2:48:ec:d4:6a:85:a3:44:
a2:f7:6e:74:89:02:8e:5c:d0:da:a7:ea:79:01:c3:
cd:47:d2:10:32:a9:59:93:df:86:f2:aa:f2:2c:4f:
57:b7:01:18:6a:2f:59:11:58:c3:cd:86:63:06:a7:
0b:c8:b6:c3:8e:81:48:d0:e9:d6:8e:60:25:44:1c:
03:62:8f:1c:cf:4b:95:b9:02:7f:d0:26:ad:82:e4:
46:1f:dc:60:a1:ab:be:77:b0:53:b6:27:72:b7:71:
64:c5:eb:ae:4a:6c:d3:51:ed:db:d4:cd:2b:c6:28:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:6C:92:CA:CD:04:12:2E:FC:BE:95:EE:84:D9:16:63:1D:0A:F4
X509v3 Authority Key Identifier:
keyid:E8:BB:0E:84:61:20:AF:81:16:57:61:1C:9A:CF:1A:FE:0B:F8:27:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LsOhGEgr4EWV2Ecms8a_gv4J1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/CIlsksrNBBIu_L6V7oTZFmMdCvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/6LsOhGEgr4EWV2Ecms8a_gv4J1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.211.0/24
Signature Algorithm: sha256WithRSAEncryption
83:61:47:b4:b0:07:b6:f6:38:cc:5a:bb:07:d6:72:3c:80:3d:
bb:f7:6d:b2:dd:35:5c:fe:28:26:0b:56:1a:cb:27:6f:2b:25:
7d:2b:3d:49:08:67:24:89:35:22:00:a1:08:29:cb:61:2f:4d:
bd:6f:9c:22:b3:55:26:dc:75:6c:58:99:5a:2d:48:e2:ed:af:
49:f8:d9:99:7d:32:f9:54:46:85:10:c4:df:30:23:5b:52:89:
9c:54:2e:24:79:70:90:97:81:c1:10:aa:a3:ed:95:07:71:37:
85:ba:33:5b:e3:7c:7b:43:5d:03:d6:c3:31:29:9d:8d:d7:0b:
26:cb:1d:2f:04:f2:af:5b:3e:d0:e9:d3:43:49:e5:a7:92:a7:
77:1b:7d:57:46:78:2c:e2:54:5b:b7:85:ce:96:d2:83:55:63:
65:2b:85:f3:d7:90:ef:65:4f:dd:35:d1:6f:6e:65:dd:03:5e:
6c:7e:e1:a6:e4:ca:2e:53:33:5a:34:71:8a:b7:7f:24:49:6e:
99:fa:d1:78:bc:22:c7:f5:3e:86:40:1d:f9:7d:ea:aa:25:b3:
ee:5c:48:8a:db:8b:a0:5a:00:3d:4b:b6:1d:94:63:ec:83:55:
5a:ae:56:28:0c:85:1c:ec:7f:99:c7:27:cf:cb:33:0e:40:b5:
e7:02:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:54 2025 by rpki-client