Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/BkEdaSmk8_s1kJBjHs7NOcHl-oo.roa
File: BkEdaSmk8_s1kJBjHs7NOcHl-oo.roa (raw, json)
Hash identifier: WHjLll9cwNlzIII+/YhKzBNY/4DLOr78MvIHYoYeF2Q=
Subject key identifier: 06:41:1D:69:29:A4:F3:FB:35:90:90:63:1E:CE:CD:39:C1:E5:FA:8A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0195137AB1A58A3A91F8AFD5EBE83DA9629C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/BkEdaSmk8_s1kJBjHs7NOcHl-oo.roa
Signing time: Mon 17 Feb 2025 10:36:02 +0000
ROA not before: Mon 17 Feb 2025 10:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 80.71.228.0/24 maxlen: 24
80.71.230.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:7a:b1:a5:8a:3a:91:f8:af:d5:eb:e8:3d:a9:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 17 10:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06411d6929a4f3fb359090631ececd39c1e5fa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:76:60:1e:36:e8:84:38:07:94:db:bd:a7:d5:
0a:60:58:19:3d:bf:41:47:3f:d5:3f:59:3f:0e:b0:
b3:66:02:47:ec:6c:a9:ba:49:8e:b4:52:3b:b4:c5:
df:25:2e:58:0f:97:16:4e:53:7e:cf:d6:59:1c:f6:
06:8f:ab:0d:26:6b:b1:17:c9:59:02:2d:9d:a9:24:
8e:d5:2e:6f:c8:2d:af:3c:45:73:1d:71:81:a6:6a:
0e:26:35:9a:e9:09:3b:b7:83:1a:91:b9:27:3e:c5:
84:08:d8:3c:b3:98:d7:a5:a0:9c:28:b4:68:31:7e:
37:ff:81:57:1e:da:ae:d1:27:13:34:48:9f:d9:cd:
92:2d:6b:04:6d:a8:fd:47:1f:e2:8c:7b:c6:eb:cb:
2d:23:0f:2c:80:b1:c5:e4:df:de:fb:71:17:58:ab:
79:5f:14:37:c8:16:76:92:8a:1a:0f:ac:28:c9:ec:
39:27:ba:f5:2d:f3:3b:98:46:86:d8:a7:6c:5a:3f:
fa:fb:bf:93:16:a0:df:86:e8:c7:8c:e2:68:e4:d6:
7a:d8:24:cb:73:16:e9:50:14:50:c3:8b:3e:05:cf:
92:f8:b8:31:ce:c8:9b:e6:e7:29:5c:38:d7:d8:eb:
19:0b:7c:6d:f4:fb:93:fe:95:0e:87:cf:f2:20:1a:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:41:1D:69:29:A4:F3:FB:35:90:90:63:1E:CE:CD:39:C1:E5:FA:8A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/BkEdaSmk8_s1kJBjHs7NOcHl-oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.228.0/24
80.71.230.0/24
81.29.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ef:b3:ff:16:3e:e3:5e:41:14:56:57:98:de:db:48:b7:d3:
3e:cc:03:50:a8:ab:4e:65:cf:3f:8a:c0:44:57:23:b5:76:5f:
e6:48:cf:bb:56:d3:fa:1f:62:b7:09:4e:52:a7:d5:3b:a9:c0:
de:da:e5:89:cf:da:04:4a:3e:9b:fd:32:c0:03:fc:96:7a:60:
a8:6b:78:a8:c6:28:8a:58:21:1e:14:51:ac:94:5c:71:c9:16:
d7:11:aa:78:de:64:71:be:55:a1:0c:77:d1:4c:23:ee:00:3d:
12:8c:87:00:d6:ad:49:12:be:97:f5:f9:a6:4a:89:ad:1b:69:
f8:54:a9:08:21:fb:dc:0f:c8:40:8d:81:40:4b:72:54:e4:77:
73:92:29:24:7a:c7:ab:94:1a:0d:81:0b:06:d9:4a:42:de:93:
1a:85:f7:ac:58:b4:9e:c7:9b:25:d6:70:a3:42:ea:c5:c7:50:
d0:0c:ad:c5:8f:5e:cc:41:65:f0:4b:6c:f0:b5:b4:0d:48:dc:
c3:53:2c:d8:90:b3:2b:01:c6:ec:f3:9b:68:ee:c0:5b:7c:35:
e3:8a:72:11:dd:f2:7f:56:9f:d2:ca:18:80:fd:95:47:06:c8:
ad:9a:40:4e:8a:5f:c5:51:ce:85:82:0f:a5:89:0f:42:a9:45:
7d:14:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:51:05 2025 by rpki-client on console.sobornost.net