Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/Eh5XcZTOlwwjICZ8D5e6YinN9to.roa
File: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (raw, json)
Hash identifier: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=
Subject key identifier: 12:1E:57:71:94:CE:97:0C:23:20:26:7C:0F:97:BA:62:29:CD:F6:DA
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 019425215BE8F3DC149CA0C1B49501185EF6
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/Eh5XcZTOlwwjICZ8D5e6YinN9to.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61964
IP address blocks: 80.244.32.0/24 maxlen: 24
80.244.33.0/24 maxlen: 24
80.244.39.0/24 maxlen: 24
185.17.202.0/24 maxlen: 24
185.199.11.0/24 maxlen: 24
2a0a:9741::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5b:e8:f3:dc:14:9c:a0:c1:b4:95:01:18:5e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=121e577194ce970c2320267c0f97ba6229cdf6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:e3:23:09:db:c6:0e:6d:a1:ad:81:30:11:
4f:5b:26:13:b1:39:ea:f5:52:b2:8a:ba:3a:b6:e0:
d0:29:64:57:00:b6:1b:79:2a:be:24:bc:8b:31:5d:
86:dc:97:2e:2e:30:dc:3e:d3:13:5e:23:52:83:b0:
7d:57:6d:ce:b6:14:51:50:a1:32:62:ec:61:8b:1c:
0b:a9:2e:a8:05:7c:f2:c5:26:f1:c7:dd:4a:78:3e:
64:ae:e6:fa:9a:45:84:c2:a5:6b:f7:89:36:96:d1:
64:6f:2f:e2:25:5f:41:f8:db:20:51:a0:bd:db:7c:
87:07:af:18:75:8a:cf:94:41:83:cd:92:10:97:69:
28:a1:62:86:25:85:5f:8b:04:7b:44:d0:19:ab:f4:
55:1d:67:e5:64:26:b1:10:59:97:b6:ab:9b:19:4a:
70:68:2a:e0:5a:82:c8:d4:59:c0:d7:45:62:af:cd:
ce:e8:f3:ef:be:ea:ce:fd:33:5a:49:68:41:01:73:
85:03:bc:fd:9e:a9:b4:7e:81:fb:98:57:9e:73:45:
cb:a1:23:c8:9a:c8:0a:3f:70:c6:12:41:50:fd:9c:
66:09:68:75:d6:18:79:4f:8e:f2:c5:15:ed:bd:c6:
24:15:22:5c:f6:60:47:78:8b:cc:66:27:21:eb:56:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:57:71:94:CE:97:0C:23:20:26:7C:0F:97:BA:62:29:CD:F6:DA
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/Eh5XcZTOlwwjICZ8D5e6YinN9to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.32.0/23
80.244.39.0/24
185.17.202.0/24
185.199.11.0/24
IPv6:
2a0a:9741::/32
Signature Algorithm: sha256WithRSAEncryption
00:8d:5d:b5:46:b6:bf:77:e5:d3:c0:78:c3:4a:b8:6b:8f:55:
f9:0f:db:63:f0:1a:79:ca:6b:9c:22:10:fd:90:62:34:bb:7e:
76:6d:8f:74:8b:1e:99:28:41:bc:64:48:43:2b:4a:72:97:48:
e9:d8:6f:1d:19:55:7c:5a:60:c0:ba:7c:b6:50:e4:70:f5:08:
b9:5f:cf:31:ae:8b:a9:a6:2a:36:e7:4f:ee:52:04:57:42:5d:
bb:0e:9c:bf:7b:b9:10:ad:ee:04:a3:f9:a0:b9:be:cc:c5:b1:
c4:9a:3c:e8:ac:0f:f0:98:3b:52:fe:c6:43:bd:de:ac:c9:79:
0f:21:f4:26:b8:1b:c1:67:02:92:8b:b9:e5:8e:e0:18:3e:d9:
04:ae:4c:62:ae:6f:e1:ba:3c:2f:4c:4c:2c:04:f9:b7:89:a9:
a0:39:03:51:5f:e3:f3:42:19:3b:5d:6a:45:b9:ea:49:aa:97:
42:36:35:45:75:63:99:3b:1e:55:91:eb:4a:aa:3d:c8:9d:7b:
0d:34:1b:bf:0c:18:b1:d6:be:43:22:20:50:06:00:d2:a4:cb:
94:04:b2:9f:ad:26:f3:dc:c3:67:15:9d:76:37:23:54:e7:4d:
31:9a:dd:69:1e:b3:12:9c:ff:3e:dc:9a:96:c0:68:75:1e:13:
ab:72:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net