Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/SZHDj7ewaK3mtvIFL9GdVPPdeiA.roa
File: SZHDj7ewaK3mtvIFL9GdVPPdeiA.roa (raw, json)
Hash identifier: R2OQhDOkjCw4D4/knxrU8/GjfDnxF4+KIOHcbLgJk/0=
Subject key identifier: 49:91:C3:8F:B7:B0:68:AD:E6:B6:F2:05:2F:D1:9D:54:F3:DD:7A:20
Certificate issuer: /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial: 01945EBC12988B3D1070E97FE78CB3AA2C55
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/SZHDj7ewaK3mtvIFL9GdVPPdeiA.roa
Signing time: Mon 13 Jan 2025 08:16:11 +0000
ROA not before: Mon 13 Jan 2025 08:16:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42781
IP address blocks: 80.184.3.0/24 maxlen: 24
80.184.9.0/24 maxlen: 24
80.184.10.0/24 maxlen: 24
80.184.11.0/24 maxlen: 24
80.184.12.0/23 maxlen: 23
80.184.17.0/24 maxlen: 24
80.184.19.0/24 maxlen: 24
80.184.21.0/24 maxlen: 24
80.184.24.0/22 maxlen: 22
80.184.29.0/24 maxlen: 24
80.184.55.0/24 maxlen: 24
80.184.56.0/24 maxlen: 24
80.184.77.0/24 maxlen: 24
80.184.85.0/24 maxlen: 24
80.184.95.0/24 maxlen: 24
80.184.107.0/24 maxlen: 24
80.184.109.0/24 maxlen: 24
80.184.110.0/24 maxlen: 24
80.184.117.0/24 maxlen: 24
80.184.120.0/22 maxlen: 22
80.184.124.0/24 maxlen: 24
80.184.125.0/24 maxlen: 24
80.184.127.0/24 maxlen: 24
80.184.135.0/24 maxlen: 24
80.184.140.0/23 maxlen: 23
80.184.144.0/22 maxlen: 22
80.184.148.0/22 maxlen: 22
80.184.165.0/24 maxlen: 24
80.184.190.0/24 maxlen: 24
80.184.200.0/24 maxlen: 24
80.184.204.0/22 maxlen: 22
80.184.216.0/22 maxlen: 22
80.184.221.0/24 maxlen: 24
80.184.224.0/22 maxlen: 22
80.184.229.0/24 maxlen: 24
80.184.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:bc:12:98:8b:3d:10:70:e9:7f:e7:8c:b3:aa:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
Validity
Not Before: Jan 13 08:16:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4991c38fb7b068ade6b6f2052fd19d54f3dd7a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:e6:8b:22:57:27:7b:ba:4e:05:53:f0:7d:
75:ae:dd:d4:67:d3:c0:d8:02:96:c0:e9:d6:bb:9d:
fd:1e:af:74:c7:4b:18:74:5b:be:d3:55:9b:8b:27:
4e:84:e5:b9:b7:50:85:63:bb:ea:4e:30:44:b3:2d:
5f:3c:6f:b1:fd:fd:d8:db:b9:32:31:52:18:f2:d3:
b2:b3:f0:dc:e6:09:8f:f4:92:89:9d:92:98:c4:7f:
1b:e0:c4:a5:08:55:6e:0d:d4:ea:1e:1d:74:14:e4:
84:77:fb:e1:f8:59:25:c7:d2:fe:cf:a8:8f:bf:7f:
1e:93:1f:c8:db:3b:03:b1:b1:da:da:94:3e:db:7a:
f1:e7:5e:88:2a:ff:54:e2:ca:78:68:b0:e2:51:b7:
f4:15:b4:fb:d4:06:fe:eb:59:42:ae:90:e1:5b:47:
6a:8f:15:17:c3:47:f7:07:d7:45:24:d1:8b:c8:e1:
87:84:32:22:a9:71:54:f6:7d:ff:1b:59:29:78:fa:
aa:6b:7e:8f:b7:1c:2f:af:31:36:b2:e9:e3:be:3d:
24:9f:71:f7:04:dd:fb:ee:aa:02:84:a8:d6:00:65:
d4:e4:89:28:e2:f0:c1:9f:06:f8:63:0e:cf:21:f9:
d5:8c:47:9e:d6:8a:b1:c6:f5:f2:76:03:2c:ed:9e:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:C3:8F:B7:B0:68:AD:E6:B6:F2:05:2F:D1:9D:54:F3:DD:7A:20
X509v3 Authority Key Identifier:
keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/SZHDj7ewaK3mtvIFL9GdVPPdeiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.184.3.0/24
80.184.9.0-80.184.13.255
80.184.17.0/24
80.184.19.0/24
80.184.21.0/24
80.184.24.0/22
80.184.29.0/24
80.184.55.0-80.184.56.255
80.184.77.0/24
80.184.85.0/24
80.184.95.0/24
80.184.107.0/24
80.184.109.0-80.184.110.255
80.184.117.0/24
80.184.120.0-80.184.125.255
80.184.127.0/24
80.184.135.0/24
80.184.140.0/23
80.184.144.0/21
80.184.165.0/24
80.184.190.0/24
80.184.200.0/24
80.184.204.0/22
80.184.216.0/22
80.184.221.0/24
80.184.224.0/22
80.184.229.0/24
80.184.245.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a9:79:f3:0b:30:4d:34:58:c3:04:e7:5a:67:07:c3:1b:7a:
4b:3a:88:7b:52:d6:45:da:c7:5a:7e:38:75:4c:02:2a:0b:4a:
1d:99:44:96:fc:1e:da:74:3e:51:5c:6e:66:e4:8c:02:5f:de:
34:95:90:2b:bb:d2:a5:a7:b6:68:59:c1:0c:63:35:64:45:9d:
94:e0:45:c3:85:1d:65:79:54:57:03:5b:0c:7f:64:96:54:12:
1a:67:7e:bc:37:24:03:ff:3e:d7:f4:70:79:6b:f2:a8:ff:05:
01:05:15:7d:32:a7:6b:9d:a4:7d:7c:ff:7c:d0:78:36:46:d4:
56:85:1c:7f:7b:4e:81:91:30:cc:bb:32:6a:fa:b7:d9:2c:ee:
08:55:71:14:07:8b:89:d7:0e:f4:85:b2:9f:72:c2:c2:f1:e6:
29:bd:eb:1d:a4:b3:4a:cc:b1:d8:59:9b:22:d0:a1:4f:8b:3b:
fb:56:67:7e:25:5e:ad:5f:95:03:4c:36:d1:40:32:11:c3:e2:
53:7a:10:78:33:34:2b:73:d9:32:95:24:57:1f:75:db:cd:4a:
06:19:94:77:31:62:3d:aa:20:79:9f:a6:e9:a7:a9:da:5e:d6:
59:16:da:88:bf:79:5d:21:f8:19:f5:ec:b8:58:5b:3a:c8:28:
5e:a4:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net