Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/XWkDtpDr4D1lxkfuaz2bugqUM5A.roa
File: XWkDtpDr4D1lxkfuaz2bugqUM5A.roa (raw, json)
Hash identifier: bSa11B1HPIUA73oL0xX2UriTUJ7C2b5bjHhWkQRhxSY=
Subject key identifier: 5D:69:03:B6:90:EB:E0:3D:65:C6:47:EE:6B:3D:9B:BA:0A:94:33:90
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 018CEE51644E0C6D74E0A30D74D58053DAB4
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/XWkDtpDr4D1lxkfuaz2bugqUM5A.roa
Signing time: Tue 09 Jan 2024 13:02:40 +0000
ROA not before: Tue 09 Jan 2024 13:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212177
IP address blocks: 80.75.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:51:64:4e:0c:6d:74:e0:a3:0d:74:d5:80:53:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Jan 9 13:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d6903b690ebe03d65c647ee6b3d9bba0a943390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:c3:9e:d8:7c:01:8b:6f:1a:e0:50:92:a0:
22:2b:89:0c:80:5c:86:e7:4f:5a:48:7a:92:f4:9b:
fd:ea:41:af:fb:8a:4a:33:95:65:53:61:5d:3a:7c:
b9:9e:df:89:28:21:62:1c:b5:5f:52:ef:a4:4c:77:
50:f8:ba:61:e2:df:90:16:10:9b:d2:c0:ae:ad:4d:
25:5d:53:06:ee:bc:5b:53:32:e8:3d:c4:18:21:d2:
e9:c6:f8:aa:d0:bd:c0:38:9f:6e:7a:3b:45:95:2a:
7a:3b:08:4f:e3:61:3d:7e:a7:bf:ab:a4:58:73:5b:
7e:af:a8:a0:0f:2f:b7:06:ff:dc:27:06:07:df:97:
c0:15:44:94:d7:90:bf:dc:28:7b:ee:9c:c8:82:81:
17:72:8b:07:10:44:16:a2:b5:69:8b:9a:6c:a3:72:
06:ec:36:31:81:d2:b3:2a:db:52:97:52:83:5e:84:
42:06:06:d0:da:0a:4e:ef:e4:66:36:e2:a0:7d:a9:
0c:76:e3:98:9f:a8:54:c0:fa:02:c2:96:b8:3b:12:
2f:1c:2a:e3:3b:0e:05:53:26:4c:6f:ab:d6:06:8a:
bf:42:75:90:52:29:0f:5c:1b:29:d5:d2:34:2e:e3:
f0:f6:bf:c2:57:e0:1c:3c:ce:dd:d9:e3:a6:42:80:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:03:B6:90:EB:E0:3D:65:C6:47:EE:6B:3D:9B:BA:0A:94:33:90
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/XWkDtpDr4D1lxkfuaz2bugqUM5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:86:c2:b9:e6:6e:93:8e:c5:49:b6:90:ee:f3:f3:34:48:cd:
49:64:fc:36:30:47:8a:76:cf:cd:5f:21:16:91:7c:04:fd:aa:
1d:79:61:ca:fb:e8:5c:1e:a8:eb:a4:ba:fd:b3:38:7c:8f:0f:
3e:bb:bf:02:6b:59:0d:a6:dc:db:ec:ab:7b:f0:8e:72:81:2b:
70:4a:1b:fb:fd:ca:74:61:e9:c3:ad:6e:0a:47:7a:ed:b3:29:
8a:4e:f7:5e:8a:49:f5:66:5c:85:aa:3d:60:05:73:6d:e9:fe:
6c:a5:9e:c8:72:38:cf:a7:4c:8b:3a:68:45:73:cc:f8:f0:af:
b1:77:4b:39:33:f8:17:84:5f:9c:1e:0c:73:ca:d0:5e:08:57:
e5:79:9a:7c:58:92:71:c7:b9:d5:0a:dd:60:3c:eb:c3:20:ef:
c7:a2:e9:36:58:59:3e:1a:a2:26:9f:fa:d6:10:e1:a3:b1:a7:
36:ec:23:0d:59:2a:5b:8a:33:1d:18:d6:0d:1c:1e:39:c0:51:
eb:aa:86:9a:53:68:23:56:a5:16:aa:a7:8d:62:37:30:4e:1c:
6f:94:a5:3f:77:30:f6:1d:27:5a:10:c0:4c:8a:9c:1c:ca:7e:
92:12:a1:23:a6:b0:4d:a5:af:22:26:bb:fc:ee:8c:7b:a8:ae:
a9:99:17:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzuUWRODG104KMNdNWAU9q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3
NGJhMjgwHhcNMjQwMTA5MTMwMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDY5MDNiNjkwZWJlMDNkNjVjNjQ3ZWU2YjNkOWJiYTBhOTQzMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlabDnth8AYtvGuBQkqAiK4kMgFyG
509aSHqS9Jv96kGv+4pKM5VlU2FdOny5nt+JKCFiHLVfUu+kTHdQ+Lph4t+QFhCb
0sCurU0lXVMG7rxbUzLoPcQYIdLpxviq0L3AOJ9uejtFlSp6OwhP42E9fqe/q6RY
c1t+r6igDy+3Bv/cJwYH35fAFUSU15C/3Ch77pzIgoEXcosHEEQWorVpi5pso3IG
7DYxgdKzKttSl1KDXoRCBgbQ2gpO7+RmNuKgfakMduOYn6hUwPoCwpa4OxIvHCrj
Ow4FUyZMb6vWBoq/QnWQUikPXBsp1dI0LuPw9r/CV+AcPM7d2eOmQoAl4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1pA7aQ6+A9ZcZH7ms9m7oKlDOQMB8GA1UdIwQY
MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt
YjIxNzhlZjJmODJmLzEvWFdrRHRwRHI0RDFseGtmdWF6MmJ1Z3FVTTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm
LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEvbMA0G
CSqGSIb3DQEBCwUAA4IBAQBdhsK55m6TjsVJtpDu8/M0SM1JZPw2MEeKds/NXyEW
kXwE/aodeWHK++hcHqjrpLr9szh8jw8+u78Ca1kNptzb7Kt78I5ygStwShv7/cp0
YenDrW4KR3rtsymKTvdeikn1ZlyFqj1gBXNt6f5spZ7IcjjPp0yLOmhFc8z48K+x
d0s5M/gXhF+cHgxzytBeCFfleZp8WJJxx7nVCt1gPOvDIO/Houk2WFk+GqImn/rW
EOGjsac27CMNWSpbijMdGNYNHB45wFHrqoaaU2gjVqUWqqeNYjcwThxvlKU/dzD2
HSdaEMBMipwcyn6SEqEjprBNpa8iJrv87ox7qK6pmRf5
-----END CERTIFICATE-----
Generated at Sat Aug 17 00:22:45 2024 by rpki-client on console.sobornost.net