Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/ect9rt1iTOwU4l499MLwvhBDleI.roa
File: ect9rt1iTOwU4l499MLwvhBDleI.roa (raw, json)
Hash identifier: uzI2RBjcPd1qUaeOmN2JzrZzLgn4U0x7LpGFh6u7YtQ=
Subject key identifier: 79:CB:7D:AE:DD:62:4C:EC:14:E2:5E:3D:F4:C2:F0:BE:10:43:95:E2
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0194266C363CD7EEF40B59518C9DF564595D
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/ect9rt1iTOwU4l499MLwvhBDleI.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199308
IP address blocks: 80.245.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:36:3c:d7:ee:f4:0b:59:51:8c:9d:f5:64:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79cb7daedd624cec14e25e3df4c2f0be104395e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:21:69:6b:70:46:06:92:f8:ee:4b:f8:3d:
97:c8:b3:83:67:51:02:97:4a:81:db:5f:17:e2:aa:
c5:d8:9f:f1:8c:87:95:98:5b:89:c6:18:e1:a3:fc:
3d:5f:92:9e:03:bd:d5:7a:dc:ab:ba:fe:07:ce:cb:
9f:78:4f:9a:30:07:35:0f:bb:eb:14:30:45:35:70:
65:73:a8:c1:21:84:f8:4d:e8:4e:39:a8:c9:63:1b:
21:d3:99:2d:7c:16:d1:eb:93:c7:c5:c0:0b:01:4f:
b8:05:d2:b5:eb:6b:a7:0d:a6:cb:cb:94:14:40:2b:
68:e2:14:cd:45:e4:44:23:11:b2:05:8c:7d:db:4f:
6c:fe:73:3b:49:51:25:88:cd:0b:21:4f:92:e0:70:
31:49:f0:71:90:49:42:d4:d4:b2:fc:dc:8a:66:c7:
65:61:a3:cf:79:c8:53:a1:ad:fe:28:4b:43:f2:50:
31:31:d6:e2:58:96:2b:40:51:a3:ef:df:3c:aa:52:
96:6b:55:08:43:4a:96:28:11:75:e2:93:76:7b:8a:
dc:c4:b8:eb:6b:37:2d:1c:9b:8d:29:fa:66:09:5e:
c9:fc:4b:c7:d2:7a:a9:93:3a:70:f2:eb:66:96:28:
02:92:b6:41:f4:54:8a:df:bc:35:3b:a5:81:c0:fe:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:7D:AE:DD:62:4C:EC:14:E2:5E:3D:F4:C2:F0:BE:10:43:95:E2
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/ect9rt1iTOwU4l499MLwvhBDleI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.93.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d5:35:15:c3:ea:cf:8d:41:24:07:8b:06:95:aa:6b:aa:40:
5f:97:15:5a:96:d7:4e:b8:65:9f:89:7e:bb:a9:a5:14:85:66:
6a:54:33:45:3f:84:07:dd:34:52:7b:8d:1c:4d:7d:81:41:e0:
33:dd:49:a4:2c:cc:05:d6:e8:97:26:4e:4d:1e:3f:d9:65:d0:
07:91:3e:b8:ec:e5:92:85:e3:c7:c0:0e:2c:42:a4:01:7e:ba:
3b:15:9a:c0:cf:cc:19:b3:8a:87:3f:21:5a:2c:ad:10:34:57:
16:23:20:06:23:54:b6:0c:e3:e8:d7:60:45:9a:4a:90:5e:a8:
ef:a7:94:e7:72:b2:4f:2f:df:78:f8:d0:2b:e4:2d:54:b6:77:
77:6b:84:9e:ed:79:08:0a:ab:b6:45:1c:3b:4d:a1:2b:74:fc:
07:a6:46:a5:08:2e:6c:9c:86:2f:3a:82:58:82:33:7c:4f:53:
bf:f7:3d:56:2c:b2:56:8b:a8:47:3f:89:a5:5a:ec:48:66:43:
89:df:7a:4d:8e:48:61:cb:fd:e3:59:68:44:dc:b8:ae:95:fd:
b3:fb:d3:5c:42:b6:c2:43:80:68:c6:45:9c:c4:80:75:00:cb:
93:66:93:ec:b0:cd:84:70:40:24:20:b9:0a:e3:7c:93:96:0b:
6a:7a:14:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net