Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/IefeYi4YnGA5-Btgta25kSVWpXo.roa
File: IefeYi4YnGA5-Btgta25kSVWpXo.roa (raw, json)
Hash identifier: wXwoabDrm1OGUarx1OccGEgXSjlxtoxh6QKkXSRruII=
Subject key identifier: 21:E7:DE:62:2E:18:9C:60:39:F8:1B:60:B5:AD:B9:91:25:56:A5:7A
Certificate issuer: /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Certificate serial: 019423D7977019869EE38D54E472BD9083D8
Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/IefeYi4YnGA5-Btgta25kSVWpXo.roa
Signing time: Wed 01 Jan 2025 21:48:38 +0000
ROA not before: Wed 01 Jan 2025 21:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52209
IP address blocks: 81.30.107.0/24 maxlen: 24
2a09:cbc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:97:70:19:86:9e:e3:8d:54:e4:72:bd:90:83:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Validity
Not Before: Jan 1 21:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21e7de622e189c6039f81b60b5adb9912556a57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:f7:91:a8:d9:1f:d6:eb:f4:87:ad:29:82:
c6:ad:75:93:10:c0:67:0f:63:ad:7c:e4:ac:fa:c3:
ec:41:36:d9:55:0d:75:da:ec:e7:25:3b:d2:0b:4c:
39:70:e6:2d:57:ef:95:87:37:31:87:75:95:85:72:
ba:22:69:0f:28:a2:0e:c7:4b:f1:c7:b4:d2:fc:b9:
44:b4:17:75:63:f4:a4:03:ff:67:d4:06:b4:b6:33:
d0:e9:2e:24:d5:f2:23:cf:3f:b3:90:d7:e8:5b:fb:
97:83:18:d2:22:af:19:5f:b1:9b:d3:8f:47:b8:57:
32:e2:04:3c:68:b8:1f:07:c2:ea:f1:3e:c2:c9:cb:
e1:91:d5:fe:f2:45:d9:f6:87:f4:81:62:48:5f:3e:
67:88:51:40:00:f1:c4:73:ad:b5:04:64:de:e1:62:
62:72:d9:43:bf:ec:1d:a3:da:45:94:a4:e9:da:fb:
11:04:8d:95:c9:73:f7:5f:b1:00:8b:46:25:98:c0:
4e:f9:db:df:26:45:2b:bf:a4:32:37:1f:68:32:30:
ec:0e:a8:e2:6e:1c:c6:05:58:8b:12:33:77:75:d1:
b7:14:b5:5a:6f:b0:90:57:19:74:04:61:2c:3a:9c:
b9:af:63:ab:eb:d9:d8:16:c7:97:03:29:6d:ee:3c:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:DE:62:2E:18:9C:60:39:F8:1B:60:B5:AD:B9:91:25:56:A5:7A
X509v3 Authority Key Identifier:
keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/IefeYi4YnGA5-Btgta25kSVWpXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.107.0/24
IPv6:
2a09:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
40:d6:46:28:6b:e3:ae:d8:6c:a7:86:fa:3c:22:85:33:b3:b6:
db:4b:d4:b1:b9:cf:11:dd:b5:25:3d:ff:f0:90:6f:a9:b6:d1:
55:4b:68:9b:5a:d8:f1:c8:27:0d:e7:9b:12:fa:d3:fc:92:3a:
57:3b:ba:f8:ba:a0:a5:fb:5e:2c:f7:dc:ae:7f:25:c6:eb:37:
0e:4a:ad:69:02:ff:8a:eb:ed:01:bc:30:66:e7:1d:45:45:5c:
8e:cc:66:d1:07:7e:d1:3c:9e:43:18:e8:87:de:9b:f6:5d:cd:
e4:dc:01:1e:d8:2a:24:ab:f4:fe:24:50:65:87:11:cb:a3:c5:
45:57:08:93:b6:e0:64:32:0a:b9:80:97:5e:c9:40:7a:2e:eb:
63:23:c3:1e:c3:79:8c:e6:ea:a7:f8:81:c7:5d:05:a6:fb:3a:
c4:9a:0a:4b:88:aa:44:3d:16:e4:21:20:43:1f:9b:98:ab:da:
0a:a2:96:4b:5c:b1:50:69:f7:e2:dd:85:46:bd:bf:84:5a:22:
3e:b5:7f:9f:13:71:ea:ea:f6:aa:33:33:ed:42:c5:f5:80:82:
c9:29:45:59:92:dd:64:49:e7:02:8e:4c:da:8d:48:54:fc:e7:
af:58:80:d1:a8:b6:16:f7:e7:e3:f4:63:ff:23:10:e3:0e:0a:
75:c1:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:54 2025 by rpki-client