Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/4x6rjkazNCLflUWUlsTwU4cxca8.roa
File: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (raw, json)
Hash identifier: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=
Subject key identifier: E3:1E:AB:8E:46:B3:34:22:DF:95:45:94:96:C4:F0:53:87:31:71:AF
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 0195C78C37A05935DC8369F319DA0DA4B3FE
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/4x6rjkazNCLflUWUlsTwU4cxca8.roa
Signing time: Mon 24 Mar 2025 09:46:49 +0000
ROA not before: Mon 24 Mar 2025 09:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206575
IP address blocks: 80.253.160.0/22 maxlen: 22
80.253.160.0/24 maxlen: 24
86.54.32.0/21 maxlen: 21
86.54.32.0/24 maxlen: 24
86.54.33.0/24 maxlen: 24
185.155.224.0/23 maxlen: 23
194.5.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:8c:37:a0:59:35:dc:83:69:f3:19:da:0d:a4:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Mar 24 09:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e31eab8e46b33422df95459496c4f053873171af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:b3:81:ce:3d:27:e9:fd:52:19:8c:39:54:
42:f4:32:77:50:28:73:1c:3d:08:e1:78:69:6c:b0:
46:8c:98:a7:5d:1a:74:96:6f:42:3a:e0:b9:b5:00:
2b:2a:58:54:23:42:9f:08:24:c0:e8:5a:7d:a0:7c:
d3:ca:c9:85:1c:4c:a4:c0:77:69:e3:18:98:05:9f:
31:c1:62:11:a6:63:3d:90:bb:3a:cc:8a:1f:3b:0e:
18:47:8d:70:b0:93:8e:cd:46:02:87:9a:7e:f3:5d:
5a:5d:e6:4d:89:e2:9e:60:98:3e:8f:93:55:f8:30:
68:a3:02:6f:ec:fc:7d:27:14:67:f1:10:90:f7:05:
df:ee:d8:60:d7:25:73:de:71:7e:79:2c:ef:ad:e1:
eb:94:9a:8c:39:23:40:be:8a:33:54:43:8b:3b:77:
7e:bb:06:86:15:bb:09:17:33:1d:0d:7b:dc:ea:50:
97:01:c0:f7:ca:de:d1:16:5d:d8:2a:2d:ca:a8:59:
32:76:9d:13:cd:04:ac:3c:fc:53:62:eb:a8:06:3c:
d2:7b:14:e9:a9:a4:1a:6a:7a:be:ef:77:ce:f3:6a:
52:85:12:17:b5:6d:31:c9:8e:7c:39:98:80:b5:fe:
54:02:30:fa:ad:13:e1:83:3a:1a:0e:81:16:56:4c:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:AB:8E:46:B3:34:22:DF:95:45:94:96:C4:F0:53:87:31:71:AF
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/4x6rjkazNCLflUWUlsTwU4cxca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.160.0/22
86.54.32.0/21
185.155.224.0/23
194.5.68.0/22
Signature Algorithm: sha256WithRSAEncryption
43:f2:7d:f0:6f:2a:eb:7a:3d:d8:e2:45:ac:0d:e1:fb:30:5b:
82:34:3f:8a:66:e3:da:4c:73:ec:77:a1:44:f5:c8:09:16:6f:
c6:f9:1b:ce:ae:fd:78:12:ae:6a:3a:c1:f8:91:6d:d7:81:9d:
70:2f:a0:26:71:8b:fe:e1:8f:88:d3:bc:25:bd:27:05:43:82:
94:71:c3:93:ff:a0:09:4b:28:ce:da:a6:7a:0b:33:33:6c:01:
ee:d5:19:49:22:1e:0f:60:77:94:5a:db:8b:4e:10:46:e6:ec:
76:44:ea:90:80:f1:db:b1:5d:dc:c2:c9:7d:6f:df:8e:67:f7:
6c:d5:fb:fa:c5:21:f4:ca:f9:44:da:e1:cb:e3:35:d9:85:0a:
0b:f2:dd:35:90:a6:65:b7:8b:f6:91:25:6b:1d:9f:4a:80:ec:
5f:bd:6d:69:db:c0:f0:7f:53:d7:a4:06:32:c2:9d:a3:f1:21:
26:ab:92:20:1a:d5:33:9c:30:3f:fc:67:94:40:7e:4c:b1:05:
db:92:b6:9c:6f:51:9c:87:8a:b7:ae:96:fe:a7:bc:35:67:39:
46:af:c2:73:0e:4a:35:a8:60:1c:20:3a:f9:2d:eb:81:26:24:
5a:80:e0:ad:0f:6a:5f:2e:1c:09:aa:fb:1e:f2:f6:5a:93:6a:
41:12:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net