Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/8VaQ82ZryDMVhLF74kkDZS6j6DI.roa
File: 8VaQ82ZryDMVhLF74kkDZS6j6DI.roa (raw, json)
Hash identifier: z38t6PdNLkPZ2szG+0Or75sMOj0FJdoOei/522ppdpg=
Subject key identifier: F1:56:90:F3:66:6B:C8:33:15:84:B1:7B:E2:49:03:65:2E:A3:E8:32
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 01856E8208088A5B0A62A59DD66C894FBDF1
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/8VaQ82ZryDMVhLF74kkDZS6j6DI.roa
Signing time: Sun 01 Jan 2023 18:04:53 +0000
ROA not before: Sun 01 Jan 2023 18:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25577
IP address blocks: 81.27.64.0/19 maxlen: 19
31.3.208.0/20 maxlen: 20
2001:9d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:08:08:8a:5b:0a:62:a5:9d:d6:6c:89:4f:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Jan 1 18:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f15690f3666bc8331584b17be24903652ea3e832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:06:7a:7a:fc:67:46:d5:61:6d:5b:87:68:
84:10:f6:60:3e:c9:08:ce:fc:c5:09:0b:0e:11:de:
f7:52:d2:f7:10:1a:af:d2:66:2d:b7:c3:75:8f:00:
5b:e4:eb:03:e7:9b:f2:04:87:ff:2d:14:4c:3f:6e:
0a:66:c0:84:f3:a6:2c:e5:51:db:12:78:65:e7:59:
c3:fa:d6:a1:45:e5:bd:55:9f:c6:cb:9f:36:36:a2:
a6:cf:fa:23:d0:3d:1c:b5:c7:be:7e:42:3b:a6:6a:
b6:af:ee:06:5b:84:8b:60:7a:21:b3:cf:25:01:40:
eb:79:24:3d:99:9d:9f:19:e0:c5:4d:1e:18:58:a3:
8f:cd:fd:09:1d:cc:bf:5a:bc:42:77:ac:08:fb:2c:
b3:d0:e9:0a:f4:35:2a:38:93:97:02:12:ea:ae:1d:
3f:db:47:34:66:a0:07:5f:a6:03:5f:46:90:2d:3d:
4c:0f:25:6d:3e:41:31:1d:6b:10:86:88:9d:d9:b0:
01:34:91:fb:bf:98:fd:52:49:ab:21:be:75:a3:80:
5b:c1:41:14:e6:d9:e1:51:77:c8:4f:3e:ac:3a:2c:
a5:d7:83:eb:1e:4e:6e:67:17:9d:9d:66:8c:f9:9a:
8e:33:92:16:74:9e:58:7d:bb:91:50:38:18:e1:ef:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:90:F3:66:6B:C8:33:15:84:B1:7B:E2:49:03:65:2E:A3:E8:32
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/8VaQ82ZryDMVhLF74kkDZS6j6DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.208.0/20
81.27.64.0/19
IPv6:
2001:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
3b:ef:79:16:cc:a7:fc:7b:0b:97:13:e6:6a:3a:b5:56:84:d5:
be:3d:d5:cd:b8:01:96:42:49:eb:bd:d2:b7:1c:10:a7:6b:68:
65:cb:3c:f2:5f:d3:bd:d4:7c:62:2b:54:8f:e0:a0:83:4b:c1:
22:d1:af:7b:71:36:34:67:a5:0b:89:ba:18:bc:26:35:a9:6c:
a2:0c:52:02:67:86:b4:47:33:b4:f5:93:3e:2f:32:2a:cb:4c:
2e:77:16:fe:ac:4a:61:c7:5b:be:85:ab:95:ab:75:a9:52:11:
b0:a5:1f:bf:c8:55:f6:25:07:ba:18:64:60:c0:50:bb:8b:de:
63:0e:d5:cd:2f:b0:59:28:5e:dd:43:ea:5e:a1:52:f4:f8:fd:
4b:e9:68:f5:df:1d:b6:65:5a:d4:5b:0c:6c:c6:df:cf:18:17:
67:62:f7:68:9b:82:7b:9a:e0:78:75:72:db:21:4c:3f:e7:f5:
a9:df:4b:80:3f:a5:16:a7:07:81:fe:53:16:ed:22:a7:74:c5:
11:8e:26:2e:ff:cf:5a:5e:15:b7:a7:24:a1:62:e9:b4:16:f7:
4e:72:1e:2b:53:c5:d2:2a:8f:99:a4:31:d1:bc:24:45:e7:d1:
ec:49:3e:2c:b0:4e:63:04:63:d1:8b:f1:71:b7:b7:0b:7d:1d:
0f:f9:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:04 2025 by rpki-client