Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/s0-HG1DAdTPY7yNJ1HH2JKFBwoc.roa
File: s0-HG1DAdTPY7yNJ1HH2JKFBwoc.roa (raw, json)
Hash identifier: 2KJKSf4xXmndfHqPQrOpY49o0w0W4g4xN5jpXt9oXiA=
Subject key identifier: B3:4F:87:1B:50:C0:75:33:D8:EF:23:49:D4:71:F6:24:A1:41:C2:87
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018B1BA00CA0597EC53EC695F53704B9F7EC
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/s0-HG1DAdTPY7yNJ1HH2JKFBwoc.roa
Signing time: Tue 10 Oct 2023 22:05:55 +0000
ROA not before: Tue 10 Oct 2023 22:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 80.64.24.0/24 maxlen: 24
80.64.29.0/24 maxlen: 24
80.64.30.0/24 maxlen: 24
80.64.25.0/24 maxlen: 24
80.64.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:a0:0c:a0:59:7e:c5:3e:c6:95:f5:37:04:b9:f7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Oct 10 22:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b34f871b50c07533d8ef2349d471f624a141c287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:d5:07:f5:c6:94:6d:3a:9e:66:cc:80:3f:
a8:98:8c:75:62:be:2a:a0:bd:b7:0c:48:c7:66:3d:
82:41:ac:0c:c6:37:f7:81:f1:11:c3:53:ae:db:85:
cf:f7:51:79:a3:2e:67:ae:2f:80:21:34:3b:b7:ad:
5d:37:b8:b8:ef:b3:12:01:af:b0:5d:4e:5c:ad:90:
6f:bd:62:62:07:7f:71:80:e7:bd:da:cb:d8:cc:21:
d5:e9:ca:91:4a:96:bb:a1:33:72:52:4f:4d:5d:e7:
3c:fc:a2:e4:d3:06:7f:f6:89:ad:83:43:ed:91:0a:
dd:79:65:31:aa:62:81:22:5f:3d:2b:0d:7c:67:d5:
9c:1d:da:2d:ef:2f:ff:7e:cd:ce:1c:21:7c:a2:d1:
f3:fd:5a:d4:fc:c0:d0:9c:49:06:09:d3:21:57:24:
13:63:af:91:d1:a8:f9:f6:b9:f9:18:a1:28:c8:1e:
04:2c:6a:28:37:3e:2d:e6:58:a6:58:ac:2f:1a:cf:
20:84:d9:94:ec:22:11:89:24:c1:56:90:ea:7a:cc:
c2:93:ff:74:ec:a3:68:86:fb:6d:26:83:46:fe:7a:
52:ac:39:7f:17:78:35:8b:25:44:9f:59:f4:ac:56:
9f:aa:7e:b5:64:a2:fa:13:01:78:01:5c:ec:07:b4:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:87:1B:50:C0:75:33:D8:EF:23:49:D4:71:F6:24:A1:41:C2:87
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/s0-HG1DAdTPY7yNJ1HH2JKFBwoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.24.0/23
80.64.27.0/24
80.64.29.0-80.64.30.255
Signature Algorithm: sha256WithRSAEncryption
20:c6:32:bc:7b:8b:1b:f0:26:5d:26:16:aa:20:e6:65:dc:1f:
96:57:c5:71:f6:e6:cd:62:06:d4:0e:65:dd:1e:bd:9f:90:06:
15:85:7b:91:5b:76:11:5e:79:10:b0:c0:95:62:c9:3d:73:b7:
fb:6a:4e:74:48:7e:b0:f6:52:65:d5:99:d5:7e:94:c0:9e:18:
ac:50:de:cd:f9:e8:c0:d3:97:e3:5a:44:31:5e:a5:49:c7:86:
58:4b:a9:23:27:e9:ee:7d:16:fa:2c:d4:fe:aa:48:5e:90:43:
af:a8:13:0c:25:0b:64:7d:f0:75:fe:96:0f:5e:29:3f:86:88:
20:85:80:90:40:84:01:da:d6:c2:8b:92:fd:9f:d5:c7:98:6f:
0c:f6:4e:9a:5d:82:b5:a8:db:d4:84:1a:11:08:cc:49:c3:fb:
ab:32:43:16:4a:25:1b:3d:4e:6e:a3:e8:04:83:e9:d8:ed:c0:
2a:23:85:2e:c0:9d:14:f5:83:64:c5:f7:54:19:7d:c4:2f:21:
04:f9:c7:7e:02:f2:07:8c:23:e9:f4:37:a9:a0:e0:f2:90:9f:
44:a1:be:a4:ec:09:bb:57:83:84:25:23:20:d3:09:2b:e6:04:
56:88:26:f8:0a:79:7a:41:b0:6f:52:d8:b9:58:25:7e:c1:29:
7a:88:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 18:09:05 2023 by rpki-client on console.sobornost.net