Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/JuG1VrutV5Ik927Fot6P5zejPXM.roa
File: JuG1VrutV5Ik927Fot6P5zejPXM.roa (raw, json)
Hash identifier: YStXScHprZKeA62Yc/G5e0pOczTsa3hLMNXNM55SmKQ=
Subject key identifier: 26:E1:B5:56:BB:AD:57:92:24:F7:6E:C5:A2:DE:8F:E7:37:A3:3D:73
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0193FBCC2058A71059E12F28351C1EE4FBD7
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/JuG1VrutV5Ik927Fot6P5zejPXM.roa
Signing time: Wed 25 Dec 2024 03:11:19 +0000
ROA not before: Wed 25 Dec 2024 03:11:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395374
IP address blocks: 81.199.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:cc:20:58:a7:10:59:e1:2f:28:35:1c:1e:e4:fb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Dec 25 03:11:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e1b556bbad579224f76ec5a2de8fe737a33d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:c2:ab:b1:ac:f2:61:c3:21:52:6d:07:40:
a0:b0:08:38:85:2f:e2:cc:6e:63:49:eb:9f:78:e2:
6e:c3:99:94:ab:84:00:32:8e:46:cd:01:28:06:87:
ef:de:db:60:6d:83:c8:61:a1:3d:58:71:90:d0:c2:
63:b4:e2:e9:5a:e4:6e:11:4b:85:e0:de:d8:63:68:
75:57:8d:1f:27:f5:ee:06:be:4e:73:d6:53:f4:e3:
27:71:85:9c:17:54:89:f5:5f:22:91:2d:06:ae:87:
58:47:da:10:97:b7:d9:e8:8e:1c:ee:c6:11:f0:1f:
0e:72:e4:cc:90:f6:f3:cf:47:ae:2d:b5:bd:72:15:
a6:91:76:20:71:9f:b8:40:4b:47:93:b1:af:05:d3:
ae:be:c5:8f:08:91:ab:6e:41:1c:09:bf:c1:e0:9d:
f9:61:20:66:07:48:76:d2:b2:b0:55:7d:52:37:91:
e7:58:fb:81:14:34:bd:fb:71:d9:eb:f0:69:0b:99:
39:e1:fd:9b:81:60:88:d4:6d:03:8d:ec:94:04:81:
87:17:29:64:ec:e9:77:4a:88:04:93:89:4a:b1:a0:
d3:99:1f:65:e5:73:0b:89:4d:51:b8:ea:2a:6a:db:
d0:99:54:aa:5b:de:20:eb:b9:2a:70:f5:eb:d9:86:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:B5:56:BB:AD:57:92:24:F7:6E:C5:A2:DE:8F:E7:37:A3:3D:73
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/JuG1VrutV5Ik927Fot6P5zejPXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:18:86:26:8e:2b:9b:cc:f9:01:1b:66:e8:bb:e3:0d:69:1a:
1f:1f:2b:dd:32:18:9e:48:bc:e3:8c:29:fd:ee:6e:9c:c4:c3:
5a:47:b5:7d:ea:fe:d8:09:3d:61:5a:ce:05:c4:eb:4b:9c:9a:
52:d5:f5:11:3c:b9:05:82:86:0c:3d:86:96:e7:bb:44:48:80:
d8:e5:d3:9d:a2:72:bf:73:60:c7:3c:4b:c4:b6:5a:89:9c:a2:
c3:b8:3e:b2:b6:8e:ba:74:67:d7:e1:ae:44:fd:e1:ab:50:12:
2b:81:51:ca:06:5a:21:3f:31:f4:e4:5b:d5:3d:d0:64:a2:69:
d9:9a:a4:99:fe:be:94:85:8f:63:9e:b1:2f:76:e7:2f:be:1b:
b1:f7:d8:3d:9a:91:f6:39:88:08:b5:c4:60:87:ee:cd:1c:12:
3e:0b:9e:c2:d5:fa:40:1f:e2:8b:47:14:92:87:a6:0d:3c:23:
37:33:5a:88:3c:93:e3:d7:9f:2a:eb:45:20:5e:1f:d0:c9:18:
9b:98:5d:61:a9:62:2b:4b:f4:ec:d9:33:79:4e:0e:e3:2c:25:
cf:36:64:b5:3b:f1:65:57:77:b0:93:21:ef:97:fa:33:00:a8:
fe:83:a2:eb:1e:5d:04:8b:fa:6b:32:a9:90:70:96:31:a3:5b:
d2:81:87:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:18 2025 by rpki-client