Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8UdcEQ4Q2YAt4T_yVLUEO9CdnQ8.roa
File: 8UdcEQ4Q2YAt4T_yVLUEO9CdnQ8.roa (raw, json)
Hash identifier: OLDqYJnzYtPaR2M8z7gy5S163Yyl2gXgH1w15SYRnQ8=
Subject key identifier: F1:47:5C:11:0E:10:D9:80:2D:E1:3F:F2:54:B5:04:3B:D0:9D:9D:0F
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 0192703C49A05405B6D5FCB400E4F477FD28
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8UdcEQ4Q2YAt4T_yVLUEO9CdnQ8.roa
Signing time: Wed 09 Oct 2024 07:44:11 +0000
ROA not before: Wed 09 Oct 2024 07:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15659
IP address blocks: 80.202.0.0/16 maxlen: 16
84.48.0.0/18 maxlen: 18
84.49.128.0/17 maxlen: 17
89.10.0.0/16 maxlen: 16
89.11.0.0/17 maxlen: 17
213.145.160.0/19 maxlen: 19
213.187.160.0/19 maxlen: 19
213.187.190.0/24 maxlen: 24
217.13.0.0/19 maxlen: 19
2a04:980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:3c:49:a0:54:05:b6:d5:fc:b4:00:e4:f4:77:fd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Oct 9 07:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1475c110e10d9802de13ff254b5043bd09d9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:2f:f3:5f:d6:24:17:06:de:83:2e:d2:31:
7a:d4:66:35:c8:52:86:6e:6e:a5:e9:41:b5:64:d4:
f2:9f:cf:01:10:62:5f:86:e7:b4:b7:99:f7:e8:a2:
6b:b6:5e:2d:0b:a7:6f:56:d0:4f:81:df:13:ab:cc:
ee:df:5b:af:0c:82:d0:b3:25:71:a9:74:cb:a9:e5:
78:c3:67:cf:89:35:18:cb:0a:8a:69:11:f9:01:fa:
b0:ab:7f:cd:b4:e1:9f:4a:36:44:a0:15:61:27:d8:
e2:d2:72:2c:24:7f:50:21:17:a3:24:ca:c4:3d:f0:
9a:12:6c:1c:2e:04:68:ea:ed:cc:63:fa:f1:6e:45:
8d:6d:8b:23:88:96:f3:c1:c5:b2:a5:45:47:e4:30:
7c:99:f9:f2:1c:d9:c7:fc:1d:a1:55:e8:ae:89:31:
5d:3b:d6:dc:98:77:ec:0b:68:10:8d:d8:f2:8f:05:
02:e7:ac:b2:fa:5d:91:a4:3a:5e:ca:10:71:64:5a:
d1:82:e7:3f:f3:76:2f:bc:da:46:1c:09:8c:fe:94:
ad:c6:bc:87:aa:c8:fc:40:38:06:a2:09:97:38:7d:
52:0c:78:77:91:92:e8:49:26:0e:2c:72:aa:c2:96:
6f:92:63:51:a5:7d:bd:5f:13:f0:bc:50:01:67:aa:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:5C:11:0E:10:D9:80:2D:E1:3F:F2:54:B5:04:3B:D0:9D:9D:0F
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/8UdcEQ4Q2YAt4T_yVLUEO9CdnQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.202.0.0/16
84.48.0.0/18
84.49.128.0/17
89.10.0.0-89.11.127.255
213.145.160.0/19
213.187.160.0/19
217.13.0.0/19
IPv6:
2a04:980::/29
Signature Algorithm: sha256WithRSAEncryption
65:0e:c1:07:b3:e1:44:f0:85:4f:e3:dc:e5:7b:59:8e:81:76:
b5:ed:4d:d9:ed:24:c0:d2:30:e4:6e:cc:23:0b:2c:54:2f:5f:
5d:9c:99:57:84:6c:e9:ca:1f:3d:1b:f1:70:f6:ce:8d:60:76:
47:fe:81:12:7d:3e:87:c3:29:39:9a:a5:34:7c:a2:b4:6f:bd:
6a:f5:0d:94:7e:28:db:c4:c0:fa:a3:c6:fe:1c:65:19:71:0f:
6e:a1:ef:a5:0a:b1:38:30:29:64:d3:d2:00:dc:46:fe:9f:f8:
61:70:04:f6:c5:37:61:d9:a0:e1:db:d0:52:b9:63:a7:9c:41:
f2:d8:96:d4:0e:0e:ec:92:24:28:dd:36:7c:fb:73:b3:a6:2f:
49:cc:74:c2:87:06:c6:ec:26:9d:47:46:01:f4:cb:6a:57:1c:
a1:68:75:e0:9a:dd:3c:ed:f8:53:5b:ae:aa:62:71:40:b3:ed:
3f:16:fa:b6:c9:b2:de:4d:9e:72:8a:15:d2:69:63:7e:e3:3b:
10:71:a9:1a:d9:63:ab:85:c9:76:d8:a5:d3:7e:93:e9:18:3d:
bc:4b:d3:f4:53:74:08:b6:86:c2:54:0e:97:67:16:2a:7c:0e:
6d:cf:a8:c9:4f:be:14:36:7c:cd:96:84:74:61:03:72:d6:67:
47:45:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net