Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/4eUzX53KjKiFABS1AxLPvZ5r-bY.roa
File: 4eUzX53KjKiFABS1AxLPvZ5r-bY.roa (raw, json)
Hash identifier: 7YG9ahRtvq/YQgGSsJQAoRx/DWLAGEIhFL7ghXNU9R4=
Subject key identifier: E1:E5:33:5F:9D:CA:8C:A8:85:00:14:B5:03:12:CF:BD:9E:6B:F9:B6
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019423D702790433BD918AFF6B7939B2E562
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/4eUzX53KjKiFABS1AxLPvZ5r-bY.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209638
IP address blocks: 80.249.112.0/24 maxlen: 24
80.249.113.0/24 maxlen: 24
80.249.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:02:79:04:33:bd:91:8a:ff:6b:79:39:b2:e5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e5335f9dca8ca8850014b50312cfbd9e6bf9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:60:26:a9:89:a2:1b:c3:e8:67:40:14:a8:
bc:83:e7:79:34:d1:e4:71:96:ed:50:44:3a:03:c2:
2a:75:e6:e3:63:3b:7d:4e:0a:67:5f:ad:61:cf:4c:
c5:ae:55:24:a2:24:2a:02:34:33:47:17:5d:b9:a4:
6e:71:d8:58:75:04:9a:65:82:f5:1c:9c:74:e4:22:
34:4b:e2:1e:1e:03:6a:bf:9c:92:e8:ab:61:ef:0e:
fd:fc:6b:5d:e6:8f:59:60:85:e6:55:c3:ff:74:79:
21:01:db:98:77:1f:dd:d5:52:82:bf:fd:6a:8c:7a:
bf:21:bc:83:f9:5b:c2:71:61:19:7f:e6:c9:97:6d:
50:48:0b:9c:8b:9d:bb:78:37:cf:9c:3d:c9:0c:f6:
f9:de:69:ac:f8:11:6c:ae:67:96:b1:8e:32:ec:f2:
49:3b:e8:62:eb:18:8f:a2:c2:4f:a8:00:43:df:68:
f6:65:a4:ac:44:dd:3d:37:62:21:56:0f:41:44:bf:
6d:0b:22:7b:75:7b:aa:bd:7a:94:42:ea:43:dc:f9:
4d:a8:a5:3f:f8:f9:f3:40:ae:34:ad:37:a0:16:e6:
09:4a:b4:c5:ba:53:f8:e5:38:bb:ff:36:62:19:49:
86:b9:9a:80:d7:f1:24:b6:e4:0a:04:be:5e:41:45:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E5:33:5F:9D:CA:8C:A8:85:00:14:B5:03:12:CF:BD:9E:6B:F9:B6
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/4eUzX53KjKiFABS1AxLPvZ5r-bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.112.0-80.249.114.255
Signature Algorithm: sha256WithRSAEncryption
0f:ae:ef:5b:e5:df:b4:3a:19:11:9e:f0:eb:cc:7c:73:c0:ba:
8d:e9:ee:ca:90:2e:97:9a:28:95:20:b5:1c:63:56:be:a8:8c:
21:bf:bb:28:dc:d4:79:79:20:23:be:5f:20:6f:a1:c1:d3:0c:
10:19:fc:86:80:32:cf:f0:19:f4:ed:d0:d7:ad:f9:24:ac:c2:
12:7e:21:15:c0:62:94:44:22:30:fe:bd:ee:47:94:2c:fc:3e:
85:eb:c5:06:d1:16:23:b4:d1:04:80:77:d4:bb:dc:68:9c:03:
4f:4f:aa:9b:37:4e:9b:3c:97:56:60:0c:65:ab:82:d4:c7:56:
55:81:06:89:d5:22:d8:43:b5:03:fd:35:af:4b:c4:50:f6:d0:
14:46:79:4b:bf:fc:07:6c:b8:6b:cc:0d:3f:44:5c:e3:a8:03:
e8:2b:61:61:44:43:c8:3f:5a:81:42:ce:19:90:76:58:e6:b3:
b6:1e:db:c3:1c:ec:a3:4b:1c:90:1b:d3:da:9f:dd:1c:3e:a6:
e7:df:31:db:17:4a:fa:f4:a5:ff:cc:bb:81:49:de:ee:22:29:
71:09:00:0e:ee:ac:05:a5:ec:f5:c8:28:ef:8c:a4:bb:8c:58:
33:24:6f:ca:49:b6:ab:35:92:7d:d2:9b:db:5d:ee:7f:06:e5:
4c:22:32:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net