Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa
File: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (raw, json)
Hash identifier: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=
Subject key identifier: B9:4F:21:83:C5:DF:49:EE:A6:C1:7D:EE:79:6E:68:60:3A:D1:17:44
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 019426D8727EA4649BA5825508F9C3DADC1E
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa
Signing time: Thu 02 Jan 2025 11:48:26 +0000
ROA not before: Thu 02 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43220
IP address blocks: 80.70.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:72:7e:a4:64:9b:a5:82:55:08:f9:c3:da:dc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jan 2 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b94f2183c5df49eea6c17dee796e68603ad11744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:92:80:d5:aa:78:df:ab:ef:6d:d9:10:b3:
69:ca:37:e9:65:30:9a:8a:78:47:0d:4c:46:1a:70:
b5:2c:1c:10:b8:c6:b3:1e:c9:a9:fb:84:50:dc:5e:
a8:52:61:fe:c8:f7:06:36:56:3d:b8:28:4e:c5:64:
6b:35:b7:2b:f8:b8:ba:aa:c1:82:fb:21:db:07:79:
6a:f4:39:61:bd:97:f2:04:c1:5b:83:62:66:54:9f:
54:74:e5:5f:a3:44:d3:d1:f4:4f:89:50:d2:2f:3e:
2c:3a:7a:f1:e0:9a:c7:6d:1c:19:5d:77:73:5c:17:
fa:a0:0d:7c:a5:af:4f:73:69:df:38:c4:ca:2d:c1:
82:87:52:48:63:ae:05:9c:e1:08:42:62:31:d2:61:
23:66:5a:d3:23:14:02:cd:ed:ff:39:3a:6e:5f:53:
85:0b:f1:68:28:0a:37:35:57:07:fa:2c:2c:16:15:
c1:c2:77:84:fb:3b:d7:25:cb:20:9d:71:25:a3:6a:
1e:a5:ca:ab:33:07:bc:a8:a3:ff:fb:19:7f:0a:69:
2d:1b:d5:45:9f:a2:0a:95:6d:1e:db:5e:88:d2:59:
3c:87:37:0e:e2:b8:21:b6:c4:e7:72:f9:3c:dc:65:
e6:e2:d4:ee:4c:9f:d8:90:70:dd:ef:c0:e9:ff:e8:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4F:21:83:C5:DF:49:EE:A6:C1:7D:EE:79:6E:68:60:3A:D1:17:44
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.7.0/24
Signature Algorithm: sha256WithRSAEncryption
17:80:2d:a3:cd:bc:d6:e3:dd:7c:9e:44:8e:67:38:64:e4:47:
91:96:f9:4a:24:45:e0:0b:6f:a7:b9:6b:3c:03:72:32:b9:23:
59:75:2c:fe:b3:08:2f:48:ad:91:dc:ca:80:55:8e:7d:56:b4:
15:4b:5d:ab:7f:b9:91:eb:66:cc:cf:10:d2:d8:e3:f3:8a:1a:
4a:81:5e:cc:b1:24:c6:7a:4c:61:02:88:17:bc:0f:3f:05:a1:
85:63:36:27:06:99:2a:0c:dd:14:ef:c2:12:2d:11:29:da:71:
e9:54:d0:0b:09:f7:bd:ca:2b:09:8a:65:0c:ff:31:92:ed:11:
05:f5:c0:e2:90:6d:70:a8:e8:df:ba:9c:df:f3:6e:a0:c9:c5:
22:33:fd:d3:31:79:d0:90:ad:68:10:30:aa:77:a4:e4:7a:64:
c3:db:b5:b8:c5:f6:93:84:36:a3:fd:84:27:11:1d:a5:ff:84:
9f:71:f0:31:b6:dd:e4:77:90:cd:1d:50:c5:e9:55:47:65:2d:
ef:7e:d6:f7:d8:65:bf:d9:4f:3e:c0:1f:a3:9c:f7:c3:92:94:
e1:ee:69:5d:1e:15:51:6c:a9:a5:a8:81:0f:57:e4:d8:b1:9d:
a9:43:4b:6c:4b:89:96:68:fe:2a:cb:bc:cc:a8:f6:f5:bc:bf:
bb:73:4c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net