Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa
File: BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa (raw, json)
Hash identifier: ldPOE/oD2Qugz9ughj/HvF9vyb/+1i8BwkvXApLfgvQ=
Subject key identifier: 05:58:A5:85:2F:54:AF:93:D6:F6:E7:C9:9C:A2:49:83:33:CA:F6:85
Certificate issuer: /CN=94dec641051b026b95c8459150ca47ddaec89668
Certificate serial: 019426D8F43F8B25CCF1788E2B3832973D09
Authority key identifier: 94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa
Signing time: Thu 02 Jan 2025 11:48:59 +0000
ROA not before: Thu 02 Jan 2025 11:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21282
IP address blocks: 80.241.0.0/20 maxlen: 20
80.241.1.0/24 maxlen: 24
80.241.2.0/24 maxlen: 24
80.241.3.0/24 maxlen: 24
80.241.4.0/24 maxlen: 24
2a01:7640::/38 maxlen: 38
2a01:7640::/48 maxlen: 48
2a01:7640::/64 maxlen: 64
2a01:7640:0:1::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:f4:3f:8b:25:cc:f1:78:8e:2b:38:32:97:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94dec641051b026b95c8459150ca47ddaec89668
Validity
Not Before: Jan 2 11:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0558a5852f54af93d6f6e7c99ca2498333caf685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:df:35:8a:a3:41:86:27:f3:bd:61:bf:5b:
d2:26:bd:06:8a:9d:c1:b6:d5:81:28:49:a8:ab:bd:
04:16:86:37:f0:3e:95:4b:79:c8:86:14:6e:5a:65:
28:af:8a:43:c5:d6:fd:4f:86:bc:76:10:42:97:5d:
1a:07:cc:93:c8:8d:04:bd:1c:f1:17:ab:ce:c0:39:
49:1a:8b:8a:a9:82:8b:14:3c:90:83:06:12:b8:04:
f6:84:2c:5b:77:f2:ad:93:5e:45:01:92:5d:f8:b5:
7e:d6:6e:c5:e5:6d:4b:d7:ef:89:96:ca:a8:b1:9f:
a2:62:49:94:29:42:2f:bb:61:69:c1:88:99:17:32:
14:5a:9e:ad:c4:9a:ae:a8:eb:42:6d:db:c8:80:cd:
ad:79:44:44:b2:53:d0:ec:0b:ba:d2:49:44:d9:40:
6c:13:d1:04:54:cc:27:25:e0:88:71:06:ff:18:b1:
a7:4f:08:55:23:68:15:89:ce:72:ae:11:5f:3c:58:
d5:5e:c5:f3:2a:4f:ee:4a:87:19:d0:02:26:83:9b:
22:98:a3:8c:cc:e5:58:5f:93:6e:40:15:d4:69:67:
af:fd:3c:96:ac:35:65:4a:bc:3d:2d:e0:34:ca:8c:
9b:58:7f:14:ab:32:b1:a2:ba:a6:5d:dd:00:c9:ee:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:58:A5:85:2F:54:AF:93:D6:F6:E7:C9:9C:A2:49:83:33:CA:F6:85
X509v3 Authority Key Identifier:
keyid:94:DE:C6:41:05:1B:02:6B:95:C8:45:91:50:CA:47:DD:AE:C8:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/BVilhS9Ur5PW9ufJnKJJgzPK9oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/351113-ed85-42b2-b64f-9ea64862a9ab/1/lN7GQQUbAmuVyEWRUMpH3a7Ilmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.0.0/20
IPv6:
2a01:7640::/38
Signature Algorithm: sha256WithRSAEncryption
28:4b:31:20:64:54:2b:9d:59:31:f1:75:ab:d3:ee:02:11:5a:
d1:22:79:5c:52:f3:4f:2c:31:0b:10:d8:8c:bc:95:c8:11:92:
d1:c2:a8:8c:6d:a3:8f:7b:18:cc:85:5b:e2:06:2a:99:e9:6d:
29:df:ee:de:c1:84:e7:af:9b:a1:4a:15:31:dc:6d:5c:65:20:
0c:7b:74:db:08:71:ad:2f:53:2b:3c:5b:e5:df:a5:f3:ed:ea:
b7:ef:65:64:b1:87:5a:ed:dd:98:27:a8:cf:13:db:8d:75:76:
44:dd:a2:cc:cd:1f:c1:5c:fa:51:f4:7c:6f:11:f3:fc:87:df:
95:06:91:4b:17:55:9a:a7:38:8f:22:e0:bf:09:ef:c3:93:da:
7b:16:e2:04:7c:b7:44:8e:97:c3:81:1a:d8:3b:34:a4:f9:a5:
47:ef:aa:21:e9:c8:69:ad:53:53:dd:ce:e7:63:7b:e1:7e:89:
65:d9:4e:a2:2d:22:99:7f:04:b8:93:76:cc:19:14:9d:bd:38:
36:a9:28:41:23:64:f4:0e:d0:c1:27:6c:ed:29:db:18:52:05:
a0:59:19:d0:64:92:3a:5e:53:c8:e6:16:97:1e:3c:db:b8:99:
0f:06:b4:ac:4a:09:87:84:56:8c:a9:d5:ce:c6:62:6c:c5:42:
17:4d:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net