Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZcpjtStd_w8BRIt8TqTYfTpdsKw.roa
File: ZcpjtStd_w8BRIt8TqTYfTpdsKw.roa (raw, json)
Hash identifier: zHNJDDwOGxBXPf3WZNEJ+sgExHvdbfFfWxzOgMUwLic=
Subject key identifier: 65:CA:63:B5:2B:5D:FF:0F:01:44:8B:7C:4E:A4:D8:7D:3A:5D:B0:AC
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77DF5F2AAE51D3BB4A2C43E705CF6
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZcpjtStd_w8BRIt8TqTYfTpdsKw.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35108
IP address blocks: 80.233.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7d:f5:f2:aa:e5:1d:3b:b4:a2:c4:3e:70:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65ca63b52b5dff0f01448b7c4ea4d87d3a5db0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:3e:14:6b:d8:28:a1:2b:59:41:02:11:3e:
4d:c7:e7:1a:2c:2b:c3:dc:29:5c:8b:74:85:02:78:
b6:89:69:e9:75:f1:12:d8:d6:6b:fc:f5:2f:48:13:
84:32:fc:c9:f2:6a:26:a1:bd:a7:2f:4d:07:ea:bf:
d0:80:32:f8:b4:14:85:bc:b4:e4:2c:5d:e6:a7:4b:
f5:02:fd:98:ed:54:51:fc:42:f8:99:42:1b:34:ca:
5d:bc:3b:37:fa:8f:06:02:6e:88:e5:00:59:90:7e:
43:c0:c9:e4:8c:1e:b4:b3:23:73:9f:96:94:ca:f3:
5c:9d:31:4f:46:61:14:6f:29:8c:96:32:18:ee:fb:
7f:68:78:9c:64:b9:a7:c0:69:00:73:ae:b9:f3:37:
99:e2:8a:d7:29:94:79:c0:19:5f:a9:f9:a5:94:a4:
73:02:ff:52:3b:0a:81:93:45:bc:3a:17:31:d5:f9:
1a:d2:95:80:d4:90:55:40:48:66:0b:e4:cb:c4:06:
be:75:9d:ca:b7:eb:89:e1:47:eb:d3:5f:0e:27:a1:
78:67:8d:20:69:40:00:e8:95:73:55:83:1c:47:20:
3a:bf:4c:b8:c6:2e:97:36:a1:55:6b:75:50:25:44:
25:16:4f:89:46:2c:cf:db:51:f7:0e:9f:31:ce:66:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:63:B5:2B:5D:FF:0F:01:44:8B:7C:4E:A4:D8:7D:3A:5D:B0:AC
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ZcpjtStd_w8BRIt8TqTYfTpdsKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:6e:b5:c1:80:f9:a4:c2:35:fa:f8:16:89:cf:09:09:de:05:
81:5e:45:72:c1:bb:84:93:d1:7a:6f:d7:6d:51:43:cb:7e:a0:
fb:2b:79:28:f8:b1:78:1c:cb:62:55:b9:f4:be:e6:c4:bd:8c:
13:83:f2:e6:81:a3:6c:8d:1e:97:d6:ee:ed:d9:41:7e:d5:37:
08:fe:13:cb:30:4f:27:34:ac:bf:7e:ae:ab:cf:dc:15:6b:48:
00:6f:c1:49:68:2d:ef:95:ae:eb:8e:cf:7e:6d:12:87:8f:8b:
02:2f:2e:6a:3d:a0:49:1f:e8:d8:d6:9f:d0:0e:11:57:af:21:
96:a1:e3:13:8c:f9:14:b7:06:f0:ff:a3:be:4d:a2:90:9d:da:
97:21:3e:ef:c5:bb:1b:50:46:62:2c:16:45:cf:08:bc:81:2f:
92:c8:45:0a:fc:8d:2b:bb:f7:74:68:cf:b8:43:19:26:86:56:
64:2a:ac:0f:79:03:f8:30:4f:c4:bb:35:1b:b4:fb:0a:aa:3d:
06:ca:7b:8a:66:80:6b:8d:6c:30:a4:a2:20:44:87:e9:df:0d:
4e:62:9b:a8:ae:89:6a:11:88:d0:f1:b8:df:30:af:a9:79:7c:
5d:7e:13:ff:c8:91:d3:9d:d8:f7:5f:ac:35:11:a3:ff:fe:66:
4d:1e:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net