Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/JcjXafG4BofwokigSUdCSBr42bQ.roa
File: JcjXafG4BofwokigSUdCSBr42bQ.roa (raw, json)
Hash identifier: 0cpQ6g3yUCrAziKP8p9C7llaqH8u8g9un3zH8uX2E20=
Subject key identifier: 25:C8:D7:69:F1:B8:06:87:F0:A2:48:A0:49:47:42:48:1A:F8:D9:B4
Certificate issuer: /CN=e8bb0e846120af811657611c9acf1afe0bf82751
Certificate serial: C3C114
Authority key identifier: E8:BB:0E:84:61:20:AF:81:16:57:61:1C:9A:CF:1A:FE:0B:F8:27:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LsOhGEgr4EWV2Ecms8a_gv4J1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/JcjXafG4BofwokigSUdCSBr42bQ.roa
Signing time: Mon 25 Apr 2022 17:54:40 +0000
ROA not before: Mon 25 Apr 2022 17:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 80.91.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12828948 (0xc3c114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bb0e846120af811657611c9acf1afe0bf82751
Validity
Not Before: Apr 25 17:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25c8d769f1b80687f0a248a0494742481af8d9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:2c:06:aa:ef:06:b4:eb:8e:9d:cd:0f:98:
69:60:79:94:46:9d:62:b4:d3:4b:0d:b3:db:9b:1e:
16:2f:e3:b8:5d:28:25:4f:74:e9:54:1a:03:30:02:
cd:12:73:cc:9e:ae:d2:fd:6d:20:d5:a0:a3:7f:27:
9d:e5:1a:a8:74:b8:cf:b8:c8:a0:0c:a6:6d:c0:3f:
20:1a:f6:d6:c8:38:e0:11:24:d5:91:73:0f:6a:9f:
4c:97:8a:15:11:d8:6c:3c:85:ea:69:3a:16:c0:5c:
95:74:06:ee:5c:40:74:e8:36:1d:ee:ca:49:9f:84:
7b:2f:c1:aa:2f:f6:6c:99:69:ed:99:87:b7:fe:f3:
ad:0f:c9:ca:99:ac:62:c3:e4:03:1e:cb:e7:1d:fd:
be:cc:0c:4e:85:24:9a:71:49:0c:4b:b0:be:7e:f4:
f9:07:c2:4f:ad:7c:34:31:ba:57:e6:5d:92:c6:b8:
e1:bc:d6:e6:79:0b:24:c7:e7:1f:7a:0a:64:df:f1:
ba:03:8d:b0:1f:ec:5f:6c:11:b6:eb:37:ca:ca:56:
ae:ee:87:48:89:8e:67:fa:5e:7a:2c:f7:4b:d4:ee:
0c:39:08:7b:d1:d3:2f:fe:61:1a:22:a9:6c:e3:70:
0f:e4:1d:31:f7:de:8f:95:60:5e:15:5d:5f:00:9c:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:D7:69:F1:B8:06:87:F0:A2:48:A0:49:47:42:48:1A:F8:D9:B4
X509v3 Authority Key Identifier:
keyid:E8:BB:0E:84:61:20:AF:81:16:57:61:1C:9A:CF:1A:FE:0B:F8:27:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LsOhGEgr4EWV2Ecms8a_gv4J1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/JcjXafG4BofwokigSUdCSBr42bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e98bf0-c78a-43b7-a661-24ded67086b4/1/6LsOhGEgr4EWV2Ecms8a_gv4J1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:01:ef:1d:31:13:d0:85:82:de:26:5a:10:f5:6c:dd:5c:c3:
08:45:4a:ff:8b:d8:99:75:86:aa:f6:da:a7:4b:a2:76:7e:80:
90:6b:4f:00:f8:81:50:d7:c1:21:06:21:90:cc:8f:57:df:08:
00:1a:d5:7b:1d:70:ea:8b:75:10:0e:89:87:b3:60:ba:47:38:
b8:fd:94:1f:b7:98:97:ae:62:a8:3e:87:a3:f8:89:e9:bc:a6:
c6:8c:a3:b7:6e:56:7b:c5:21:43:56:15:67:81:14:68:42:7e:
ae:18:13:4f:94:5b:1b:cc:85:f5:87:03:ef:25:5f:3b:ce:af:
9a:07:c8:0c:f8:bd:fa:01:03:27:89:06:ed:e9:7a:96:76:d8:
21:b6:b7:9f:70:a9:08:a7:c0:78:fb:00:89:74:5e:e2:17:e2:
ff:e8:f8:87:1e:49:00:a5:1c:29:b2:a7:e3:db:2d:73:1d:b2:
ce:36:37:f9:31:c8:d5:0e:33:00:15:a9:c8:9f:ed:83:16:43:
df:73:95:af:07:8c:df:e9:8b:04:2b:b7:80:b3:45:d1:4c:2c:
4a:6e:42:3c:9f:0b:a7:f6:6a:db:76:38:66:8a:26:13:08:79:
54:7f:1f:62:21:ab:65:f2:44:ab:31:7f:50:25:90:fc:18:ed:
03:c2:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:00 2025 by rpki-client