Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/JT1Gn4I1wojtyOsoos31LCYAw2E.roa
File: JT1Gn4I1wojtyOsoos31LCYAw2E.roa (raw, json)
Hash identifier: 0iaF6eooA8uQ67V8JvWKeNDGxUJHLFAo4B/klqFC+qI=
Subject key identifier: 25:3D:46:9F:82:35:C2:88:ED:C8:EB:28:A2:CD:F5:2C:26:00:C3:61
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D58331C488854BCBB3F1B91A7216
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/JT1Gn4I1wojtyOsoos31LCYAw2E.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 81.29.148.0/24 maxlen: 24
81.29.153.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d5:83:31:c4:88:85:4b:cb:b3:f1:b9:1a:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=253d469f8235c288edc8eb28a2cdf52c2600c361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:99:53:af:90:94:6c:8b:de:2c:b6:ef:00:
32:3a:57:b5:6f:53:35:87:24:fb:2f:d3:ed:61:50:
05:a8:20:99:8c:1c:64:55:2c:d3:93:57:1f:2c:42:
b8:5e:26:7f:46:a2:a4:09:c2:e8:e1:32:95:4e:84:
27:4c:8d:08:0d:46:1d:a4:e7:10:2b:fb:25:25:c1:
bd:a5:e3:7a:c6:c7:4c:dd:1f:46:d6:d9:fe:cf:c9:
6a:96:cd:2e:04:e9:df:ad:a0:64:ce:bd:af:04:18:
36:c5:ad:45:1c:90:9a:29:f6:73:4d:d7:ff:8f:c7:
9d:f7:89:d0:19:df:a7:13:40:37:ca:ef:40:ce:7b:
8e:4d:42:47:4b:1f:6f:04:4d:3d:e4:68:ef:2d:12:
b2:bb:bb:ad:c2:7a:1f:bb:d0:26:68:6e:f0:45:be:
fb:c7:cb:33:59:22:2f:3e:d4:fd:54:84:ab:64:ce:
e0:6b:fd:71:ec:28:98:f3:db:ce:e0:dc:ca:bb:fa:
ed:78:7c:03:40:76:7d:28:22:0d:7c:f4:21:f7:06:
f2:f5:47:30:f9:46:fd:aa:b8:ac:fc:6f:d8:8d:b6:
87:d7:3f:1b:e9:97:c4:fb:13:dd:f1:21:1b:34:df:
9c:ae:4f:4a:8d:86:2e:cb:19:85:be:e3:93:95:f6:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3D:46:9F:82:35:C2:88:ED:C8:EB:28:A2:CD:F5:2C:26:00:C3:61
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/JT1Gn4I1wojtyOsoos31LCYAw2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.148.0/24
81.29.153.0/24
81.29.155.0/24
81.29.157.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7e:02:d6:66:9e:7d:77:1d:1b:a6:d6:eb:68:1e:4f:81:fd:
4f:54:48:a8:41:7a:3d:6a:59:5e:dd:7d:a0:bb:0d:ec:1e:b5:
d2:18:4a:62:85:b5:73:80:f1:d7:73:19:32:4e:88:69:b5:d1:
9e:43:15:57:77:0a:0f:e5:7d:0c:e8:59:ca:1d:44:5d:6c:0d:
76:fd:ac:b2:61:47:ac:50:d5:3e:9e:17:c9:c2:7e:a7:eb:b3:
c1:52:51:52:92:8d:50:f4:f1:e1:cf:e6:1a:49:46:d9:1d:6a:
cc:ab:16:37:f1:02:6b:26:7b:02:9a:3e:70:9a:59:cd:67:47:
31:fb:03:bd:4e:f4:3f:68:49:b6:96:6b:a2:7d:c2:ba:9b:63:
79:8d:09:f2:c5:e1:63:10:87:44:8c:f6:d3:1c:cf:fd:8c:54:
0d:9b:28:5b:32:d0:70:bf:79:46:86:41:b3:e6:91:30:1b:95:
e1:7b:33:52:b6:1b:58:71:e5:73:2b:b8:7f:12:b7:64:8e:9f:
8a:9a:76:f2:79:d9:6e:43:2e:65:64:f8:20:b8:e2:41:5f:bf:
8e:e5:f8:b3:d2:57:fb:c4:da:6d:c4:e3:ee:14:ca:b2:5a:5f:
d0:29:0c:db:d5:dc:dc:2a:49:a7:fc:b9:72:39:8d:d8:e5:b6:
ec:51:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:55 2025 by rpki-client