Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/NItMcfmuUtS9SnSR4ZKm4r93TXs.roa
File: NItMcfmuUtS9SnSR4ZKm4r93TXs.roa (raw, json)
Hash identifier: F3sutapYp582NIFvW6vfwf2KF7d5dSaqH83k0FhwJoc=
Subject key identifier: 34:8B:4C:71:F9:AE:52:D4:BD:4A:74:91:E1:92:A6:E2:BF:77:4D:7B
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01958A42D29FBDF63ADCDDDC22A11371B9DD
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/NItMcfmuUtS9SnSR4ZKm4r93TXs.roa
Signing time: Wed 12 Mar 2025 12:09:49 +0000
ROA not before: Wed 12 Mar 2025 12:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41009
IP address blocks: 80.71.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:42:d2:9f:bd:f6:3a:dc:dd:dc:22:a1:13:71:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Mar 12 12:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=348b4c71f9ae52d4bd4a7491e192a6e2bf774d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:6e:4a:1c:15:f4:91:1d:3a:4f:18:b9:ad:
85:f5:ee:8a:a0:83:ec:9e:64:41:04:41:96:25:68:
b7:31:08:fc:32:b9:a4:2a:3a:34:ca:46:4a:1c:77:
32:62:29:a4:af:10:4c:46:5e:b2:ce:15:8e:45:08:
6a:2c:a5:ee:5e:c7:71:4e:6f:29:1c:23:52:5c:72:
0b:47:29:20:63:6d:bb:37:a5:46:cd:ba:c5:b0:5e:
9b:98:a1:c4:7b:34:dd:a2:0e:39:7f:28:94:83:17:
2c:41:80:1f:d8:b2:71:af:2a:ec:a8:bb:91:50:a7:
cc:2b:74:9b:85:99:20:a1:ea:da:01:2f:51:85:3a:
b4:0c:96:46:5d:a6:27:00:c8:53:ab:74:5d:cd:bd:
c1:33:44:0b:bd:68:03:e4:e1:25:99:fd:12:ff:b3:
0b:92:a4:a6:fb:36:23:20:97:a0:49:fe:f9:44:04:
dc:09:a3:f5:56:9b:be:00:38:6b:68:82:ad:fc:e9:
4b:4f:71:59:64:f9:df:09:79:7a:8b:6b:a7:52:b7:
4f:d5:68:b0:e8:62:67:f4:19:e7:ae:49:37:73:c0:
90:92:69:6e:ae:73:f9:65:a6:8a:70:7d:9c:61:3a:
ca:11:12:ff:85:bd:bc:84:7b:af:0c:33:c3:99:f5:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:4C:71:F9:AE:52:D4:BD:4A:74:91:E1:92:A6:E2:BF:77:4D:7B
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/NItMcfmuUtS9SnSR4ZKm4r93TXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.158.0/24
Signature Algorithm: sha256WithRSAEncryption
89:40:70:6c:20:60:b9:eb:8a:ea:42:a7:03:ad:df:f8:92:98:
e1:a9:04:34:a4:79:68:ef:94:cd:6b:95:b6:37:34:e3:f8:cd:
7e:3f:1b:81:30:e0:6e:3b:54:2a:6d:2b:35:c7:62:84:1e:1f:
e2:9c:af:6c:d4:7d:7a:a6:92:db:c9:03:17:6a:b0:e5:43:4b:
4d:06:7e:ff:59:97:3b:e0:69:cc:71:4d:e4:b7:00:89:58:e3:
d2:14:44:91:aa:76:1c:13:45:dc:13:c9:e0:0f:67:dc:66:2a:
1c:ba:58:46:df:e0:58:5e:9c:40:65:72:df:48:90:3a:21:74:
fb:ae:ef:1a:41:0d:e5:64:4d:d0:a3:bc:81:02:96:4c:30:c9:
f4:69:55:22:f5:18:37:3a:8b:68:7a:6c:4f:a8:a1:8a:1b:32:
fd:49:4c:38:cd:e5:cb:df:5c:55:ef:be:0e:11:44:43:7f:e5:
a9:46:16:66:db:cb:7e:22:42:98:59:77:61:40:65:15:47:68:
56:ac:40:8f:51:eb:33:42:04:42:b0:ee:6f:10:cd:63:d5:68:
61:8f:cd:6b:4c:92:37:a4:08:f9:98:2b:86:ac:36:55:cf:1f:
26:1f:2b:95:42:41:22:1f:35:4e:a4:4c:0a:dd:70:47:59:ad:
af:c6:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net