Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/VWwybFqWy2MXRW4GlH3TydNfWoU.roa
File: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (raw, json)
Hash identifier: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=
Subject key identifier: 55:6C:32:6C:5A:96:CB:63:17:45:6E:06:94:7D:D3:C9:D3:5F:5A:85
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 01942444D2C837283B71FD750FBB22C1AE64
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/VWwybFqWy2MXRW4GlH3TydNfWoU.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 81.20.40.0/24 maxlen: 24
81.20.41.0/24 maxlen: 24
2a00:1fd0:ae00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d2:c8:37:28:3b:71:fd:75:0f:bb:22:c1:ae:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=556c326c5a96cb6317456e06947dd3c9d35f5a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:93:21:8a:32:d8:76:c4:1a:93:3a:94:d7:
02:8a:c8:e7:1f:6c:9f:ab:0b:71:6b:13:a4:fe:6e:
ea:b6:d2:c2:b0:cb:c4:84:44:fc:87:d8:11:8b:a7:
23:7a:9d:fd:29:45:e6:72:50:2c:53:6f:a9:97:cf:
50:de:f6:40:36:3a:39:9c:87:42:71:26:5f:f5:9b:
8c:00:24:f7:30:5a:c3:a8:c1:7d:3a:47:32:ba:b3:
98:a4:75:29:aa:ee:2b:bf:85:6d:7b:40:75:ff:e6:
56:10:0b:e5:69:eb:22:0f:2e:bd:11:2d:e6:53:11:
f7:26:4c:90:19:dd:ce:65:d7:7a:0a:39:e1:f1:0d:
5b:31:c1:c7:5b:1b:27:99:3d:6f:f4:c3:90:d6:44:
aa:e3:79:3f:56:c3:1f:23:42:04:17:ec:5c:2e:67:
7e:ae:90:d2:fc:f6:49:41:3e:b6:b0:bb:56:9e:90:
4d:38:e0:60:21:57:fb:32:e6:45:8d:9e:87:4d:1c:
c3:a4:78:30:c8:e0:59:6d:53:a9:c7:a9:0a:ba:1d:
2d:0a:29:12:8f:99:cc:b4:78:29:51:98:8f:a9:74:
c8:ae:58:c1:ab:ad:02:c9:21:f9:39:4c:6d:7f:15:
d1:10:9a:36:98:73:e6:59:54:df:0b:a9:b5:e9:d5:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6C:32:6C:5A:96:CB:63:17:45:6E:06:94:7D:D3:C9:D3:5F:5A:85
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/VWwybFqWy2MXRW4GlH3TydNfWoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.40.0/23
IPv6:
2a00:1fd0:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
1d:29:18:e6:2e:41:81:76:1a:3c:ea:19:35:17:15:71:85:d6:
95:14:32:8b:1f:71:e8:14:9e:1e:07:14:23:74:dc:db:db:00:
46:af:f8:a5:c7:ec:1b:c9:ed:68:92:41:f8:9e:60:a4:a2:8e:
c5:1e:5a:32:d9:e6:9b:c8:7c:5d:6a:56:c7:72:38:26:6c:38:
c1:ac:99:49:8d:6a:b3:39:2c:45:47:06:5d:34:57:67:25:bd:
dd:c2:5f:07:a9:dc:3c:2c:01:c7:16:f4:4a:79:ef:47:eb:b0:
6f:ef:67:14:c9:e0:e8:35:76:88:0d:50:66:da:11:dd:ce:96:
76:0c:6a:28:f9:48:b1:ee:34:db:44:d2:1f:28:f1:95:9a:2d:
01:c3:32:3a:b5:74:68:1b:a8:e2:05:6b:7d:5f:16:ea:a5:78:
d7:2f:8d:c9:45:df:5c:37:70:1c:f7:7a:18:4b:df:d2:bd:56:
7f:e2:2b:af:c3:f8:64:f4:30:48:5d:d2:89:d4:6d:0a:95:53:
04:c2:c2:3f:45:1a:76:99:dd:e4:0b:ac:7c:b2:e1:7f:ce:f3:
94:87:ef:a7:af:ac:30:3d:35:bd:a4:a0:65:7e:ec:36:68:fb:
51:56:c3:1d:a9:da:c1:5e:cd:c9:c7:57:70:ae:74:2e:79:91:
5f:54:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:09:56 2025 by rpki-client