Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa
File: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (raw, json)
Hash identifier: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=
Subject key identifier: D5:CC:8F:71:DD:95:9E:C7:A9:8F:FB:10:B2:60:50:B8:82:B0:24:6E
Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial: 01942143CC57F17C8E714A9E3DFE4D4497A1
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30873
IP address blocks: 185.80.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cc:57:f1:7c:8e:71:4a:9e:3d:fe:4d:44:97:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5cc8f71dd959ec7a98ffb10b26050b882b0246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:55:ea:b3:ff:9f:c3:2e:7f:dd:8f:21:b0:
55:80:70:d0:de:0a:ed:7b:9b:01:4c:93:1e:98:1b:
21:76:1e:9b:bd:a4:48:62:9b:a0:93:02:24:59:9d:
54:98:fa:0b:77:41:5f:5a:a4:53:3b:01:49:ac:da:
64:0a:1c:6b:0c:e2:f3:3c:3b:f4:7f:3c:ae:6e:41:
9c:7c:83:f0:64:f6:af:2e:bd:4c:03:fc:8b:ff:2f:
d1:54:b8:18:b5:ea:ec:6a:48:5d:d1:99:3c:b3:98:
d4:49:92:40:d7:92:b7:dc:9b:2b:26:62:b2:80:b1:
a4:14:95:d2:05:72:2f:0f:aa:fb:05:32:c3:7c:12:
98:24:42:c9:f5:d2:1f:27:ea:87:bc:5b:b6:5a:c1:
22:b8:92:d9:0d:40:2c:d3:97:2d:c5:69:81:37:0c:
06:63:13:2a:73:82:bd:1a:cc:b8:65:3c:1d:15:fa:
4c:b2:26:56:90:12:dd:90:e7:e9:82:05:93:9d:9b:
33:d3:50:df:d1:b7:c3:65:1c:b9:b0:e8:87:79:ae:
33:30:af:59:79:06:d3:e9:68:fc:de:a9:5c:63:96:
69:62:9c:b5:7d:32:4e:29:8f:85:f8:2a:78:22:99:
52:a5:4e:f5:1e:f9:68:d3:e3:3d:e9:64:bd:f9:8c:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:8F:71:DD:95:9E:C7:A9:8F:FB:10:B2:60:50:B8:82:B0:24:6E
X509v3 Authority Key Identifier:
keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:d1:fb:ef:92:95:fa:05:b5:db:a2:95:74:15:98:c5:db:c7:
29:1b:01:19:7d:6b:b4:8d:18:b0:3d:49:2c:43:47:1e:91:4b:
61:41:e2:ee:ca:7a:36:00:f4:83:a3:33:5e:cc:41:f2:63:39:
70:6d:d2:16:f0:f8:c1:85:1e:a1:f5:42:c4:bc:cb:f7:0a:ef:
df:ef:b1:35:76:7e:53:e7:dd:5b:34:0d:f9:b3:6a:18:d0:db:
c1:da:4c:54:8b:eb:80:5a:c7:80:cd:6e:be:f4:45:28:6e:4c:
a0:2d:b0:20:27:ec:25:7f:3e:23:58:ab:71:fb:ac:ec:21:7f:
d5:59:42:7c:a0:dc:7e:91:7c:14:2f:0e:a7:ec:36:47:07:72:
1d:11:cc:cf:9c:64:ed:8e:02:7a:a3:a3:89:31:5b:8b:86:1a:
2a:7d:8a:37:a5:ec:cb:4b:34:7b:d8:1c:24:0c:85:32:6c:d7:
bd:83:78:08:1f:5d:a5:e3:92:25:e7:06:53:d4:43:7e:30:ea:
db:9a:0a:fd:0a:10:a9:cc:cf:00:6d:e4:4d:b8:ed:d6:5e:5c:
a1:da:e7:f3:3b:8d:91:1b:be:9f:e6:d6:21:e7:bc:28:2a:73:
23:f0:11:82:61:47:2b:6e:77:14:f6:67:30:e9:13:18:41:0a:
7b:8a:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net