Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/uo3I45HXu40pb8JAg4x-iMt72NU.roa
File: uo3I45HXu40pb8JAg4x-iMt72NU.roa (raw, json)
Hash identifier: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=
Subject key identifier: BA:8D:C8:E3:91:D7:BB:8D:29:6F:C2:40:83:8C:7E:88:CB:7B:D8:D5
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01954DC9B6531E68C1A1724EAFF18E5A5046
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/uo3I45HXu40pb8JAg4x-iMt72NU.roa
Signing time: Fri 28 Feb 2025 18:20:19 +0000
ROA not before: Fri 28 Feb 2025 18:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47600
IP address blocks: 80.91.89.0/24 maxlen: 24
82.138.86.0/24 maxlen: 24
217.71.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:c9:b6:53:1e:68:c1:a1:72:4e:af:f1:8e:5a:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Feb 28 18:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba8dc8e391d7bb8d296fc240838c7e88cb7bd8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:6f:57:ed:e2:59:f5:38:ea:57:d3:7a:9d:
81:48:57:01:da:98:36:a1:43:0e:84:2f:8f:df:e5:
87:8e:f8:d2:96:2d:7b:a6:f5:1a:07:97:9c:68:59:
64:c6:48:b7:44:99:d7:3b:e5:56:ec:51:c5:4b:17:
bf:e2:eb:28:cf:f3:fc:07:0e:2a:4e:e7:2f:46:b1:
04:45:52:f3:a7:3f:ad:cc:1d:a8:a3:a0:ba:2c:67:
60:52:e6:55:5f:81:2c:49:e0:00:94:fd:6b:b5:f2:
72:dc:80:74:c6:87:41:a1:1f:46:4d:1e:78:87:67:
68:9b:43:17:2e:4a:d5:34:57:ed:2e:af:48:4a:62:
8d:35:98:06:2a:86:f8:06:df:1c:1f:a8:6e:4f:8c:
f3:59:72:49:c9:95:11:e5:8e:ab:67:60:0e:99:bd:
a1:1c:a8:f2:65:ba:e5:db:ba:9a:77:d4:d0:43:9d:
99:20:b2:bd:b9:da:5f:0f:93:95:e3:b6:04:6c:fd:
56:9e:4e:f9:ac:78:32:4e:4c:a4:6e:d5:94:f6:a3:
8d:47:fb:d5:4f:ef:db:7c:73:dd:d1:c9:4b:5c:3c:
ac:31:3f:9b:49:a4:37:0e:70:bb:5c:82:15:05:07:
9e:ae:08:f0:88:c6:12:b9:e2:0a:33:74:e5:92:18:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8D:C8:E3:91:D7:BB:8D:29:6F:C2:40:83:8C:7E:88:CB:7B:D8:D5
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/uo3I45HXu40pb8JAg4x-iMt72NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.89.0/24
82.138.86.0/24
217.71.114.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7f:a6:cd:dd:7f:e8:62:c1:fa:b1:06:27:20:a3:12:0b:98:
d8:3d:c6:f3:0a:78:79:9b:34:3a:f4:6b:b2:c4:99:80:b7:ba:
e7:4e:47:5b:09:11:11:71:f5:db:e9:46:c8:19:ae:06:c0:6d:
8c:3f:7f:e9:28:98:04:74:64:53:3d:75:7b:8b:e4:d5:d7:8a:
fe:0f:bb:c8:c8:f6:68:c4:79:7e:d8:8a:14:3a:a5:34:cd:6d:
c9:5b:29:c5:ff:d3:b4:7f:1f:1b:bf:ba:f3:4a:4a:f9:62:c0:
33:10:7e:77:02:e0:8b:a9:ef:7f:de:75:47:ad:34:1f:e8:ba:
f6:27:97:c7:e5:49:32:52:0b:6e:95:0c:4d:80:a6:56:87:30:
4a:30:53:c8:0d:18:15:ef:c2:34:dd:ea:d2:df:27:5b:ba:5c:
98:52:f0:9f:41:b0:00:a8:d7:98:b2:ca:a4:68:53:af:29:7d:
1a:73:8e:79:18:41:7f:4f:bb:d1:8e:cb:ef:42:87:1d:45:35:
30:79:60:dd:89:e6:a5:43:49:82:54:0f:50:87:89:5c:28:d9:
9c:8d:17:8a:bf:dc:91:46:73:7f:6f:31:19:06:b8:45:0e:35:
1f:50:6b:8b:d5:51:6c:85:4f:8a:f2:2f:b9:6e:1b:37:5e:2e:
22:08:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net