Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hc_3S_D1aHQsqZfc_IDc5_nJHrY.roa
File: hc_3S_D1aHQsqZfc_IDc5_nJHrY.roa (raw, json)
Hash identifier: /Vym3higxZOi1zWgvaaJX2wCi+ppwidzCf9eirJcp5g=
Subject key identifier: 85:CF:F7:4B:F0:F5:68:74:2C:A9:97:DC:FC:80:DC:E7:F9:C9:1E:B6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B22E6460DC9D00046DA88921DD0BC9
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hc_3S_D1aHQsqZfc_IDc5_nJHrY.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204301
IP address blocks: 81.15.191.0/24 maxlen: 24
81.15.201.0/24 maxlen: 24
88.220.48.0/24 maxlen: 24
88.220.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:64:60:dc:9d:00:04:6d:a8:89:21:dd:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85cff74bf0f568742ca997dcfc80dce7f9c91eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:b9:3b:21:a5:e5:3e:00:58:df:2d:d5:07:
57:9d:d4:a1:33:7a:c3:1b:a5:8d:2c:93:f0:d5:ef:
0c:6f:5f:1d:ec:7f:04:d3:d0:bf:93:18:ec:01:b0:
90:c6:a9:dc:f3:bf:d6:2e:28:60:f0:20:05:3c:b9:
0c:cb:57:51:04:7d:94:e7:44:03:7a:27:4e:06:e4:
d1:0d:02:f8:a0:e0:a2:bb:f0:f1:b7:37:0c:1a:8b:
31:08:5f:a1:7f:f0:9c:c4:92:e4:bd:90:56:65:be:
46:31:80:0d:42:8a:0b:9c:d8:d9:c5:03:54:22:ba:
f4:96:a3:70:b5:6e:2c:f3:8f:7d:65:bc:f8:84:7a:
1a:78:1a:12:de:c3:6b:86:8a:c4:61:e8:37:d9:0c:
70:83:88:42:67:1e:92:b3:93:f6:89:af:05:af:f5:
08:f5:34:39:c9:6d:f6:20:cc:ee:c0:2e:1e:22:d1:
ca:29:9b:e3:08:db:23:e0:8f:55:1e:5d:96:60:90:
6d:64:d0:d6:58:4e:7b:7a:79:96:ff:b9:47:38:c8:
48:1b:98:ed:49:da:d1:ca:2c:37:45:25:3b:f4:fb:
06:cc:75:c9:bc:d0:4b:3b:28:56:db:ec:a9:c5:86:
e9:35:aa:f9:1f:40:5b:6d:2c:ae:a8:ee:87:f8:8e:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CF:F7:4B:F0:F5:68:74:2C:A9:97:DC:FC:80:DC:E7:F9:C9:1E:B6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/hc_3S_D1aHQsqZfc_IDc5_nJHrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.191.0/24
81.15.201.0/24
88.220.48.0/24
88.220.84.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b0:d3:f0:80:6f:fc:89:9d:79:a5:4c:93:68:d0:e5:79:f2:
b0:7c:98:39:39:fc:30:ca:b8:9c:08:1a:92:67:8d:77:4d:89:
71:8a:24:fe:9c:89:c5:78:e0:b2:55:36:19:c9:2e:fe:03:66:
57:80:8d:17:dc:02:3c:13:9c:82:e6:8f:ef:81:27:32:75:50:
82:78:9f:94:6a:af:fb:0c:0b:ba:f1:88:c0:7d:3f:2c:c6:e2:
0d:52:b4:28:50:97:c4:96:d6:78:cf:21:69:e0:7e:02:1b:17:
e8:40:0a:6c:37:59:79:93:b6:90:64:4c:8a:bc:10:04:b1:41:
32:12:48:f9:d8:c9:05:d6:47:ad:4d:9d:91:2a:7c:7e:9f:db:
32:af:1f:3c:61:1b:83:b7:75:77:5d:70:71:f8:27:26:21:04:
9c:01:ec:39:fa:27:f5:dd:78:df:39:3e:2c:3d:1f:22:bc:be:
9c:27:a0:f7:8c:0f:c8:dd:9c:34:8a:d6:9d:b2:82:69:58:6f:
f0:75:05:7f:77:1a:82:59:4d:ae:fe:7d:3b:c1:1a:ed:95:a6:
d1:78:b9:20:94:64:3e:4b:a4:37:c8:84:0a:7a:e5:78:3b:2f:
87:43:06:80:e2:19:c8:aa:91:31:b1:f7:b1:4d:ee:42:49:70:
8f:de:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:44 2025 by rpki-client