Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/_8GeUycs83lRu9jroip2TNtqpH8.roa
File: _8GeUycs83lRu9jroip2TNtqpH8.roa (raw, json)
Hash identifier: xKuAFuMNSLN3xOnIRiVJqWVq/u5hK123DBKLWdaFAC0=
Subject key identifier: FF:C1:9E:53:27:2C:F3:79:51:BB:D8:EB:A2:2A:76:4C:DB:6A:A4:7F
Certificate issuer: /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial: 0195ADD0FDDD83740D22FBA77C5BBC69EE9B
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/_8GeUycs83lRu9jroip2TNtqpH8.roa
Signing time: Wed 19 Mar 2025 09:51:49 +0000
ROA not before: Wed 19 Mar 2025 09:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35546
IP address blocks: 80.241.144.0/21 maxlen: 21
80.241.153.0/24 maxlen: 24
80.241.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:d0:fd:dd:83:74:0d:22:fb:a7:7c:5b:bc:69:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
Validity
Not Before: Mar 19 09:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffc19e53272cf37951bbd8eba22a764cdb6aa47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:51:dd:e5:ff:76:21:a7:fb:97:59:3a:78:
fe:9b:25:16:54:49:50:95:28:c4:8f:24:1f:9e:44:
ed:41:5a:52:87:19:f4:70:32:3a:58:da:2a:ca:16:
9e:a7:f4:31:5c:6b:d1:4e:e3:d2:c7:b7:9b:2c:7d:
59:62:35:ad:c7:ee:c8:6c:54:ee:c2:9e:ae:b9:ac:
ca:ea:97:78:36:b6:9e:fd:9f:73:22:b6:8a:10:37:
b7:aa:94:50:e8:8b:11:e8:52:f4:37:c8:5c:8c:0d:
d9:db:da:a4:9e:df:c9:d8:c7:3c:c4:79:13:32:40:
bc:03:7c:78:2f:40:bd:83:86:94:dd:a1:b4:05:ec:
a0:83:4c:59:55:d9:27:a7:e9:c4:12:76:2e:f6:82:
f5:72:f8:56:6a:ec:24:ab:f6:08:79:11:46:95:cc:
6f:34:d0:5a:85:48:f6:fb:2b:3a:d4:b4:94:9d:67:
2a:88:3a:1d:6c:d4:d8:4f:9c:56:55:cb:df:7d:7c:
29:5e:b7:7f:19:f8:b1:3b:24:2b:38:86:a2:73:87:
a5:3a:48:31:3f:9f:78:09:5c:bc:77:ee:92:35:34:
20:b8:97:cc:0f:8e:64:9d:01:60:3e:54:eb:7f:2d:
bf:e4:6d:3e:7e:33:62:62:46:00:97:94:7b:c6:92:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:9E:53:27:2C:F3:79:51:BB:D8:EB:A2:2A:76:4C:DB:6A:A4:7F
X509v3 Authority Key Identifier:
keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/_8GeUycs83lRu9jroip2TNtqpH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.144.0/21
80.241.153.0-80.241.154.255
Signature Algorithm: sha256WithRSAEncryption
06:6f:24:9b:e1:91:9c:be:f2:70:3f:45:e0:08:61:5b:6f:be:
37:c0:91:1a:ec:f8:4f:af:a3:14:9c:b0:85:00:32:17:d0:c7:
dd:9b:c0:88:20:4b:07:3b:82:b0:b3:36:cb:df:fc:e6:c3:13:
09:cc:87:7d:9f:55:e3:3b:1a:67:55:ea:2c:ef:08:b6:9d:54:
c4:66:5e:dd:88:82:17:3a:22:a2:e8:63:2c:5c:97:92:13:9a:
be:50:46:52:2c:24:29:94:bd:aa:8d:0e:5c:e4:be:46:a5:2a:
81:95:13:fe:8a:f5:f1:0f:33:ea:c3:2a:38:79:32:25:72:bc:
f5:f9:e3:f4:0f:cb:d7:c4:b2:cc:ba:4a:63:52:5f:66:1a:83:
8a:c8:62:3e:05:70:da:17:87:53:06:52:7c:00:c0:73:8d:e4:
35:fa:7f:e8:58:f9:63:10:52:7d:73:21:2a:a3:81:7c:3b:f7:
f2:89:68:02:0c:59:11:5e:26:d0:0a:47:6f:56:e6:ce:cf:f4:
86:81:9d:e9:c3:9f:6b:8b:e4:a5:64:b3:f2:61:6e:b8:d8:85:
06:2e:cf:be:21:55:87:d8:6b:11:d6:e2:9a:2a:54:b0:80:56:
57:1a:12:58:9e:e1:95:86:90:b6:a7:38:3b:a6:a8:85:88:59:
9e:0a:8c:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net