Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/y2v6-6CCLmifQ83qZdjogrFre-M.roa
File: y2v6-6CCLmifQ83qZdjogrFre-M.roa (raw, json)
Hash identifier: oYIyUisFgSWQrEZe7E7GOqu26OhZjK1CM4VjnsKMVLo=
Subject key identifier: CB:6B:FA:FB:A0:82:2E:68:9F:43:CD:EA:65:D8:E8:82:B1:6B:7B:E3
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019421444A7C18F36440A4F53C778645A00D
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/y2v6-6CCLmifQ83qZdjogrFre-M.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35508
IP address blocks: 81.27.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4a:7c:18:f3:64:40:a4:f5:3c:77:86:45:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb6bfafba0822e689f43cdea65d8e882b16b7be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:8b:39:16:4d:7a:fc:ed:7e:f3:e5:41:f7:
fc:34:ce:6a:d9:9b:c3:65:cf:a1:56:18:00:0b:44:
a0:74:e3:5a:d5:a6:6f:88:74:09:34:31:57:b1:1f:
7a:74:8d:3a:3b:fe:00:24:a2:4b:6a:fc:65:9a:ca:
b0:a9:6f:2f:87:1a:be:f5:39:8e:b1:28:e5:61:cb:
0e:a8:2f:66:8a:77:51:3b:b0:04:93:45:e3:6a:05:
9c:83:2d:76:f1:21:68:39:66:a2:02:28:5f:7e:a7:
f5:48:f2:26:6d:51:c6:fc:7f:28:32:55:9d:a6:12:
ea:ea:9c:5a:de:c6:66:da:3e:be:55:35:85:48:8a:
c3:5e:bf:88:4c:8d:95:78:2c:af:73:24:42:f8:8b:
46:5d:34:a4:43:74:9c:b6:20:06:23:81:e9:1f:e0:
1e:d5:06:90:ca:b6:83:4c:66:38:fd:60:6c:95:c7:
79:f3:ca:2b:bf:aa:a6:12:5e:7b:a6:38:ae:ab:f3:
09:aa:c9:4b:ac:83:77:3a:05:00:d7:ec:58:e9:8f:
2f:ab:a5:53:e5:28:cd:2f:af:7f:da:5a:69:d7:f8:
ee:73:87:83:9a:94:a6:f4:73:06:88:94:08:d8:8a:
be:18:f2:9d:44:b6:ac:7c:8a:84:d6:99:2c:33:e3:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:FA:FB:A0:82:2E:68:9F:43:CD:EA:65:D8:E8:82:B1:6B:7B:E3
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/y2v6-6CCLmifQ83qZdjogrFre-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.244.0/24
Signature Algorithm: sha256WithRSAEncryption
22:32:77:a1:bd:de:96:6e:84:c2:e6:69:d4:9f:02:79:de:34:
23:de:76:0d:aa:35:69:71:d1:b3:54:62:df:23:fc:04:a2:67:
75:e2:d0:4a:82:dc:a2:cf:da:cc:d8:77:a0:06:a8:eb:47:bd:
8f:a6:5a:7e:47:e7:00:1b:51:1c:49:ae:a1:b4:d0:b2:a1:ac:
26:0b:70:e0:8f:da:6c:03:24:18:17:73:a9:72:df:24:ab:b6:
21:fb:36:02:f9:d1:9a:54:8f:18:5f:ea:14:67:1c:1b:78:ce:
c7:bb:b1:aa:43:7f:2c:1c:a6:1c:7a:90:02:e7:e5:78:c7:3b:
c5:63:16:d4:8b:91:79:f7:a8:d5:b6:d2:6d:62:26:e0:d9:90:
b1:5e:00:dc:ae:a1:9d:68:e4:88:d8:44:61:aa:c3:ac:89:52:
87:80:99:e6:69:95:8b:97:c4:1c:64:c4:c1:83:e7:24:f2:6a:
1b:da:e7:28:61:bb:ec:17:ef:9a:3a:f5:52:19:ca:86:3a:1d:
34:79:94:44:25:47:d9:f2:7e:eb:09:e9:35:93:f1:09:58:ab:
76:16:38:60:3d:13:a1:03:cf:ee:d6:3f:47:51:12:84:3f:71:
2f:1c:c4:f7:b5:01:a4:76:3c:86:82:98:b9:b9:6c:2f:d4:ff:
f6:33:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:28 2025 by rpki-client