Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/l8tpUURkVYaF7yuAbriZ4MmgFgk.roa
File: l8tpUURkVYaF7yuAbriZ4MmgFgk.roa (raw, json)
Hash identifier: SlhdXmy1eJSt9BgRVr5ZUZ5xnFvuOtx300dXs3/+luM=
Subject key identifier: 97:CB:69:51:44:64:55:86:85:EF:2B:80:6E:B8:99:E0:C9:A0:16:09
Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Certificate serial: 0190E9DF24F2E747B5897B319A9F4207417F
Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/l8tpUURkVYaF7yuAbriZ4MmgFgk.roa
Signing time: Thu 25 Jul 2024 12:30:33 +0000
ROA not before: Thu 25 Jul 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58222
IP address blocks: 45.80.16.0/22 maxlen: 24
91.210.70.0/24 maxlen: 24
185.234.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:df:24:f2:e7:47:b5:89:7b:31:9a:9f:42:07:41:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b
Validity
Not Before: Jul 25 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97cb69514464558685ef2b806eb899e0c9a01609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:be:c3:98:78:c0:98:72:48:32:eb:56:9e:
e7:87:78:eb:08:9e:fc:25:87:bb:81:03:29:a6:33:
23:b4:69:6c:ef:0f:dd:c8:be:fe:85:57:05:c9:85:
8c:35:bf:4a:1c:a7:c2:1f:0d:ee:2d:ae:af:69:70:
06:88:52:f7:c5:19:5b:a4:86:06:83:dd:5f:ac:85:
c1:d8:01:55:e2:98:9a:a8:d3:c7:f3:e0:59:5f:12:
50:04:a1:f6:cb:46:37:f6:2c:4d:06:e4:7e:96:72:
84:4b:57:54:eb:77:4d:b9:c1:d0:35:ec:fe:b3:64:
d7:95:6c:30:54:06:ff:a4:ca:dd:7a:63:55:bf:d3:
bf:c0:83:00:f8:ff:bc:8d:1a:cc:2b:bd:97:13:71:
65:46:1e:8f:32:72:22:d2:04:c7:89:6d:54:4b:e4:
98:1f:3c:e7:2f:58:bd:f6:c0:15:03:0d:97:dd:57:
45:48:2a:01:03:bc:c9:ca:dc:54:6b:eb:98:ce:91:
11:bd:e2:64:9a:15:25:dc:8b:e2:c0:62:ac:5f:f9:
02:b3:59:a7:08:19:2b:07:c8:fb:2c:41:b8:f7:b4:
5f:14:c8:95:c7:36:ff:51:b8:40:c1:25:26:f3:5d:
e0:e8:1c:8a:d5:85:87:b4:c0:ab:52:25:58:76:d3:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:69:51:44:64:55:86:85:EF:2B:80:6E:B8:99:E0:C9:A0:16:09
X509v3 Authority Key Identifier:
keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/l8tpUURkVYaF7yuAbriZ4MmgFgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.16.0/22
91.210.70.0/24
185.234.16.0/22
Signature Algorithm: sha256WithRSAEncryption
55:7c:17:13:c6:0f:04:21:2d:1c:07:ae:ed:05:58:82:a4:08:
24:8b:63:9d:b1:53:d7:88:cd:bf:f9:e8:cd:e1:ec:80:1d:3d:
4b:d1:37:82:7b:71:09:6f:be:5a:39:80:44:94:17:a7:94:fd:
4b:61:de:09:f8:31:6d:81:ed:ec:5b:ac:00:8c:03:e9:fd:cb:
84:5b:c5:c8:13:a1:bf:60:39:22:31:e8:cc:07:0f:33:19:04:
9d:31:ec:a0:80:ab:30:89:08:e0:f4:36:f5:99:c6:da:0a:be:
c6:78:84:ef:09:25:34:32:65:d7:7c:83:9e:ba:74:5d:56:0e:
7b:2c:62:64:26:39:09:6e:9c:22:d1:c1:2b:ff:7a:40:d5:4e:
5c:ae:3f:f2:4e:b2:a6:57:93:ac:9e:58:36:c2:2c:51:f5:62:
84:4c:46:3d:1c:05:dd:15:d8:26:b9:db:bc:ed:be:fa:3c:c4:
5f:4c:d5:dc:54:bd:56:24:00:ec:32:a9:0f:55:05:22:99:38:
64:ea:03:ec:e2:ec:ad:c8:2c:36:e4:79:4d:0b:88:84:39:41:
21:38:26:ac:e3:f5:42:d2:4d:e0:8c:bd:1c:e5:1a:ea:cd:63:
b6:8b:c0:4e:ad:6d:40:c0:fb:c2:73:bf:f0:d1:1d:8b:52:5e:
d4:72:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:45 2024 by rpki-client on console.sobornost.net