Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_ce2-H8ORJy5IMcG6NzwfcCJvoQ.roa
File: _ce2-H8ORJy5IMcG6NzwfcCJvoQ.roa (raw, json)
Hash identifier: a3l2cZMc3c3NCGiU9y17nZjdAdQ2nqkWmINPjJh9bTY=
Subject key identifier: FD:C7:B6:F8:7F:0E:44:9C:B9:20:C7:06:E8:DC:F0:7D:C0:89:BE:84
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D7825BDEF47CD41DECA80578D8C8C1
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_ce2-H8ORJy5IMcG6NzwfcCJvoQ.roa
Signing time: Wed 01 Jan 2025 21:48:33 +0000
ROA not before: Wed 01 Jan 2025 21:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47499
IP address blocks: 80.233.160.0/23 maxlen: 24
80.233.228.0/23 maxlen: 24
80.233.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:82:5b:de:f4:7c:d4:1d:ec:a8:05:78:d8:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc7b6f87f0e449cb920c706e8dcf07dc089be84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:63:dd:95:44:b6:1d:92:7e:3d:f6:ae:ac:
14:38:aa:24:45:27:31:7f:ab:f4:3f:01:e3:15:55:
50:b5:88:e9:34:c1:ce:f4:76:9b:a2:cf:83:b1:47:
a8:84:ce:d6:12:7a:ce:8b:59:96:33:ec:d6:5e:5e:
49:70:f9:78:a2:a2:57:fc:d9:7d:e6:88:c4:02:49:
e1:03:cd:5a:c3:9a:9e:e2:c1:a8:f3:b7:d9:dd:83:
73:de:20:cf:34:3b:a5:6a:3b:ce:f0:d2:38:bc:f0:
95:79:36:64:a5:64:ec:26:de:87:20:7e:2f:e5:2e:
1a:0e:cc:b5:2b:ff:6b:1a:56:16:05:a9:e5:82:6c:
19:60:8b:75:b0:f2:3e:da:e3:6c:90:09:ed:b5:a6:
c5:b9:de:cc:61:a5:80:6b:50:c6:61:51:b6:ba:90:
46:29:59:94:4a:95:4b:29:84:01:b1:6e:74:3a:df:
f5:d0:31:cf:d3:a7:d2:16:0c:b5:30:81:32:10:66:
38:ae:76:d9:cc:8a:d8:4d:87:04:e9:76:d9:5d:f6:
aa:dd:ad:43:6f:94:9d:c9:0f:5f:fa:a4:f3:7a:57:
4a:c3:41:8d:48:2e:25:f1:97:6c:ab:bc:91:85:95:
95:8c:4c:8b:ea:c2:6c:f5:17:b4:16:d3:29:b3:99:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:B6:F8:7F:0E:44:9C:B9:20:C7:06:E8:DC:F0:7D:C0:89:BE:84
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_ce2-H8ORJy5IMcG6NzwfcCJvoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.233.160.0/23
80.233.228.0/23
80.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:58:b3:96:77:0b:c6:73:a5:e9:f4:38:fe:d9:2d:22:e7:c1:
76:b5:b3:ec:6c:b1:86:1c:08:7d:0c:3f:e4:87:cc:07:9e:52:
c8:06:77:95:42:b0:fa:e1:31:d0:13:1f:df:e7:f0:31:8b:9c:
bc:11:06:b2:fa:ee:77:b6:c2:9a:4d:a7:6d:98:54:49:58:03:
13:3e:41:de:33:d0:34:27:c1:03:91:8d:a8:2a:70:c4:58:2c:
46:63:10:8e:a8:7a:23:9e:3c:a5:a8:62:1b:bb:bf:25:82:1d:
00:53:b9:24:16:e1:21:aa:65:5d:f4:ac:7f:ff:cd:34:78:aa:
61:b4:c1:41:25:83:b1:89:7c:3f:5e:75:0b:93:0b:d0:18:d1:
5f:ee:70:ec:b5:3d:69:f4:db:8e:0f:f6:b1:53:9b:c0:c4:13:
a8:c5:49:5f:0e:d9:df:2c:74:b5:c0:eb:79:0e:00:4b:10:a7:
eb:20:cf:9e:34:b0:34:cb:24:b6:ca:99:52:07:4a:a1:7c:c4:
a8:01:f4:6f:c0:cf:d8:ed:9b:f5:f4:f1:29:e5:ff:14:57:e7:
60:02:63:4c:94:08:61:f4:f7:0c:aa:c8:c6:82:7f:16:1d:bc:
1f:d4:10:29:c8:e0:1a:32:f0:69:4d:46:b5:1c:10:f2:f1:9a:
b3:57:bc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net