Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0e76pYN1rHBm-Lq5nyouwfj-h4I.roa
File: 0e76pYN1rHBm-Lq5nyouwfj-h4I.roa (raw, json)
Hash identifier: YymeJZTQRLFobGcWWfPm9IxoYzpN4dUw1Tamr3iE8s4=
Subject key identifier: D1:EE:FA:A5:83:75:AC:70:66:F8:BA:B9:9F:2A:2E:C1:F8:FE:87:82
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D785BCFE24E2713215CDBA2F233685
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0e76pYN1rHBm-Lq5nyouwfj-h4I.roa
Signing time: Wed 01 Jan 2025 21:48:34 +0000
ROA not before: Wed 01 Jan 2025 21:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57318
IP address blocks: 80.233.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:85:bc:fe:24:e2:71:32:15:cd:ba:2f:23:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1eefaa58375ac7066f8bab99f2a2ec1f8fe8782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:85:9b:92:ff:05:1b:ce:ed:70:f6:41:f3:
d3:2a:f9:4b:4f:7f:25:64:34:32:2d:b3:06:de:a2:
12:18:f5:a3:6e:40:a5:d9:98:02:c7:e4:bd:b6:00:
4b:b2:45:e9:30:31:63:a4:53:50:4d:c2:e2:d8:52:
93:8e:9d:49:7f:5d:cf:c9:22:7e:01:5f:b5:92:64:
d7:9e:2d:2e:02:1d:c6:cd:90:10:03:65:1b:15:d4:
19:44:44:b5:0d:aa:b7:03:81:10:f4:40:d8:9c:5a:
bf:d2:69:dc:da:de:9e:7a:86:6d:60:41:4c:69:3c:
58:cb:7b:25:f2:61:9a:98:eb:86:63:90:58:7c:1f:
66:bf:ae:25:97:ba:01:5f:1d:81:d5:b9:d3:da:3b:
d7:1a:d2:ce:75:71:76:f4:83:98:96:08:cf:e2:09:
94:8d:ca:83:10:e0:fe:91:5e:41:65:f8:68:83:31:
2d:9e:ed:a2:28:c7:15:be:f6:51:c2:ee:e1:26:b6:
d0:a4:cc:e8:cb:47:f9:6d:5f:3d:ad:dc:4d:52:a6:
82:78:fe:11:45:c6:94:bc:2b:ed:9e:9a:f2:b4:c8:
fb:bd:85:39:74:b4:04:d3:e5:83:d3:c3:64:8a:18:
e9:56:8b:bc:2c:b0:57:75:e2:81:91:49:9c:fc:ed:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:FA:A5:83:75:AC:70:66:F8:BA:B9:9F:2A:2E:C1:F8:FE:87:82
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/0e76pYN1rHBm-Lq5nyouwfj-h4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.130.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f7:58:66:fd:40:01:da:96:8b:f9:0b:14:37:1a:74:c0:30:
4c:c8:02:99:65:c0:64:65:32:6d:90:ec:31:70:0f:72:4d:d0:
5b:3b:1b:2d:bf:50:e2:b6:80:3e:15:bd:77:95:f2:08:c1:8d:
c1:17:fd:22:75:a3:a8:46:64:c4:c0:4e:a2:d4:2d:94:4c:ea:
cc:fe:6e:f2:86:ea:9b:42:8a:f1:a5:52:49:a8:b4:8c:06:76:
25:7c:91:29:95:4a:8a:07:30:82:7a:43:55:2b:d1:93:8b:af:
f1:0f:ed:52:e8:48:85:72:05:66:e1:bf:c3:9c:99:57:d2:6d:
a9:a7:9a:db:22:37:77:cf:af:3c:a8:2e:fb:00:27:d3:84:bc:
cb:8f:76:81:18:9a:aa:ca:12:5c:26:3a:fc:f6:05:17:2f:53:
3c:93:82:91:84:00:c1:b2:11:86:9f:b5:8d:19:01:d1:8a:3f:
e9:f1:c6:f8:f5:71:70:8b:6b:44:94:8d:a8:c4:2d:0b:9b:fe:
ba:b3:3c:67:04:67:7b:0f:ef:67:07:07:34:93:3d:be:d7:82:
14:fa:06:2a:89:7b:a1:cb:c5:9c:16:e6:28:bf:de:6c:c5:ca:
50:01:21:90:5a:2e:c7:5f:bb:b0:c8:9f:9b:b2:c4:40:69:84:
9e:51:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net