Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa
File: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (raw, json)
Hash identifier: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=
Subject key identifier: 22:C9:D7:D3:FC:FA:B1:46:3B:80:CE:38:75:5F:15:CF:D4:F3:F3:83
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 01941F8C31512E9AD6BC48E245B4FAA9CDE6
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16097
IP address blocks: 185.80.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:31:51:2e:9a:d6:bc:48:e2:45:b4:fa:a9:cd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22c9d7d3fcfab1463b80ce38755f15cfd4f3f383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:7d:aa:16:3c:5b:75:3f:7e:8e:e2:08:c1:
39:ce:f4:b9:db:7b:24:b0:b0:ed:06:5d:12:8e:0d:
9d:4a:51:e0:74:1a:02:52:53:fd:32:e8:d6:60:4a:
38:18:5e:93:95:c8:37:2c:5e:cf:25:64:e5:a8:da:
f8:59:36:ce:8b:7d:b4:88:23:e7:53:92:4f:5a:95:
73:ef:41:a1:61:d1:bf:7f:ff:2c:5c:60:52:bd:96:
7b:d3:f4:65:d8:b2:2e:3a:7d:45:8b:a1:b8:de:68:
de:83:1d:5e:a2:79:a0:ad:3e:83:36:c3:8d:38:71:
d1:5c:bc:ac:fd:46:cd:6e:9d:85:2d:31:8d:94:13:
5b:10:f5:9e:c8:cc:e4:07:c6:0e:0e:80:ac:98:ee:
6e:11:a5:af:39:33:cc:8c:51:07:ea:84:3f:a9:46:
31:c7:f4:04:f6:ec:c1:b9:11:e9:a7:c8:25:8a:71:
72:49:ec:67:aa:24:7a:4b:e6:c4:47:f8:c5:20:6e:
b2:a4:54:63:7f:5b:c4:55:43:c3:e4:01:94:2e:5a:
6c:a1:3e:07:a2:06:49:39:fc:d3:da:d2:f4:56:b3:
56:20:7c:ff:b1:5f:c4:61:02:4e:eb:96:48:df:00:
af:80:de:fa:bd:7b:64:40:a2:8a:7d:64:bc:64:fc:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:D7:D3:FC:FA:B1:46:3B:80:CE:38:75:5F:15:CF:D4:F3:F3:83
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:3c:05:98:c8:f3:5e:ff:72:9d:50:16:c3:7b:21:71:eb:ab:
fd:c2:b1:82:be:6f:6f:d3:e1:cc:b9:39:a5:98:eb:79:cd:19:
15:7a:89:35:05:f7:f8:54:7f:94:84:bc:a2:69:03:4b:75:80:
40:e4:7d:67:b4:b3:64:0d:8a:04:8b:2a:0c:ff:c3:8c:0c:ac:
90:61:8a:96:7e:55:0e:f2:2a:2d:00:13:ef:32:f0:23:63:73:
8d:90:55:c8:da:2f:93:04:99:44:c6:f7:fe:f1:0a:73:49:05:
fc:cd:1c:bb:9f:99:77:0f:96:86:30:61:1d:7e:f1:53:65:c2:
ae:3f:7e:0a:7f:8f:27:aa:9d:07:6d:1c:60:11:93:7d:1e:07:
a0:60:2f:32:59:f5:86:dc:2c:de:43:19:3c:3d:b0:ab:38:74:
7e:4a:91:8e:9b:12:e3:a0:33:d7:dd:cb:9a:42:ce:e7:62:fe:
b8:7e:1e:be:8c:39:53:b2:d8:d9:20:6a:ad:2b:86:1d:5e:3d:
51:76:b7:81:d9:d8:e3:90:19:c4:3b:a2:3a:4b:3f:39:35:1f:
49:ea:42:bd:a2:7a:8d:d4:bc:58:0c:55:cc:12:1a:f6:94:16:
ac:f7:1c:54:26:cd:6c:18:11:f6:64:f1:58:86:55:d5:0c:ea:
11:e6:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net