Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/au3QsLFo03d8LYUAjCFPkrVh1G4.roa
File: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (raw, json)
Hash identifier: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=
Subject key identifier: 6A:ED:D0:B0:B1:68:D3:77:7C:2D:85:00:8C:21:4F:92:B5:61:D4:6E
Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial: 019421B20AB1FD83C4CAF70CAB704804729B
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/au3QsLFo03d8LYUAjCFPkrVh1G4.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 81.90.143.0/24 maxlen: 24
2a00:e20:143::/48 maxlen: 48
2a00:e20:150::/44 maxlen: 48
2a00:e27:143::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0a:b1:fd:83:c4:ca:f7:0c:ab:70:48:04:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aedd0b0b168d3777c2d85008c214f92b561d46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:a2:95:84:1f:41:d7:fa:35:5b:f3:23:df:
c6:b7:e9:21:87:17:7d:0f:a7:4d:62:cc:3f:0a:d5:
29:09:b7:65:f5:f4:bc:d2:9b:36:3f:6e:91:9b:9c:
38:92:75:92:15:ca:89:87:49:b1:3b:3d:5c:82:b5:
f6:e7:9c:12:1b:63:58:54:19:b9:38:ad:e7:8a:cb:
62:75:f3:0f:d8:1e:bc:46:0f:48:e5:34:72:24:4f:
a6:aa:ee:30:5f:df:ec:ee:62:cb:00:29:d2:a9:f2:
cd:4e:2f:44:46:a8:13:e7:1c:71:fe:28:5d:be:43:
7a:89:20:90:17:bd:69:72:8f:f4:15:23:82:b6:e3:
66:3a:b1:45:17:b7:1e:10:32:fe:8d:05:d9:9a:11:
e4:9d:b8:38:8c:b1:e4:57:bc:24:53:37:ff:7c:50:
0d:9e:9c:38:10:8f:a3:0b:38:ef:1c:4e:a5:33:7c:
42:10:cd:51:1f:45:33:06:67:55:54:81:4d:7b:41:
eb:7c:f4:d9:03:de:41:c9:12:7f:38:e2:f1:da:c8:
dd:e7:5a:40:98:c6:68:98:e5:3c:14:40:7a:dc:b9:
ff:c5:27:e6:5f:e1:54:bd:20:b7:70:c5:bd:8e:9a:
b1:a1:21:3e:9c:13:16:54:d8:06:ff:0f:70:31:f8:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:D0:B0:B1:68:D3:77:7C:2D:85:00:8C:21:4F:92:B5:61:D4:6E
X509v3 Authority Key Identifier:
keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/au3QsLFo03d8LYUAjCFPkrVh1G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.143.0/24
IPv6:
2a00:e20:143::/48
2a00:e20:150::/44
2a00:e27:143::/48
Signature Algorithm: sha256WithRSAEncryption
02:1a:29:00:9f:8e:ef:64:46:8d:fc:56:d1:0e:4b:ad:54:7a:
24:cf:f6:4f:73:9f:d6:23:04:85:dd:42:c7:d8:a5:78:46:6b:
24:d5:f4:50:1f:07:fb:be:a9:46:60:46:ad:65:7a:76:3f:b7:
27:48:30:65:35:07:88:2e:e6:cf:b8:4d:94:6e:ee:02:d2:4e:
e0:5c:fb:56:51:b8:42:74:24:98:f8:6f:a7:07:5b:85:05:65:
f9:ad:b3:15:3d:65:d5:cd:c1:63:a5:a5:d6:01:76:5e:36:06:
1d:04:3e:bf:34:79:7d:81:db:ee:f3:87:5a:5e:6b:14:41:eb:
de:9c:95:1d:cd:ae:1d:23:a5:9c:5d:31:08:d8:e4:10:27:56:
d4:c6:d4:bb:30:f5:f2:9b:24:58:09:d6:8b:66:c3:c9:79:c0:
b1:97:bc:ad:0e:03:e4:f1:6a:c3:ab:bd:11:a7:1c:e4:c4:96:
cd:92:c8:2d:f0:4e:2c:b5:ee:61:58:61:0a:df:f5:0a:7c:82:
1f:71:f7:57:e9:44:aa:a9:7b:61:06:0a:eb:fe:4e:9e:9f:38:
b3:2e:ab:e3:0d:2d:29:2d:6f:3e:3a:36:13:2a:2a:3d:fe:35:
cd:ff:40:67:ee:af:b3:da:17:9a:cc:49:c2:5e:38:6e:3a:57:
a7:4d:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:48 2025 by rpki-client