Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6ryL7xgxhsZom-o4rqt8N_6EERU.roa
File: 6ryL7xgxhsZom-o4rqt8N_6EERU.roa (raw, json)
Hash identifier: iZ5D9WPFwkte76AJtt5SAmdyj4KpT56giQyy1S846SA=
Subject key identifier: EA:BC:8B:EF:18:31:86:C6:68:9B:EA:38:AE:AB:7C:37:FE:84:11:15
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195606AB3A25ECF206EBB32819425889F81
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6ryL7xgxhsZom-o4rqt8N_6EERU.roa
Signing time: Tue 04 Mar 2025 09:09:20 +0000
ROA not before: Tue 04 Mar 2025 09:09:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 81.168.119.0/24 maxlen: 24
82.152.131.0/24 maxlen: 24
82.153.50.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:6a:b3:a2:5e:cf:20:6e:bb:32:81:94:25:88:9f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 09:09:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eabc8bef183186c6689bea38aeab7c37fe841115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:0c:78:4e:97:c0:1f:ed:ea:0f:ec:3b:8e:
b4:2f:a7:ca:2f:c9:92:c4:1c:4c:72:22:8f:38:ac:
cf:fa:4f:6f:19:cf:c3:ed:16:12:55:e9:de:ad:5a:
ba:b1:2f:08:f4:8e:69:de:92:46:b8:b2:3c:8b:83:
bc:d5:f5:17:96:ce:83:18:f7:68:19:10:41:3f:8c:
ae:61:93:c7:dc:eb:f0:3d:f7:cb:5b:22:e8:27:91:
b9:da:83:67:bd:63:0a:0e:a8:37:af:3e:16:3c:06:
19:45:75:e5:eb:1f:2f:a7:4c:d9:6e:cc:64:84:fd:
9e:33:b5:44:ad:70:7c:15:c7:24:29:fc:04:88:09:
d6:ee:8c:48:11:45:29:af:a1:90:43:3f:e4:e0:f0:
ad:d0:4b:4f:b1:07:8a:e0:5b:fd:30:cf:f1:55:c3:
fd:bf:c3:1a:2e:5d:7d:1f:90:1c:7c:d6:0d:a1:e4:
7d:96:3a:95:af:7f:9c:e0:99:22:7d:43:b5:e6:9d:
1c:c0:b1:13:7e:a4:f9:97:1e:d2:35:da:dc:03:45:
7b:1a:ea:56:62:74:4a:5b:6e:87:38:fb:8a:bf:74:
bf:c4:a5:c9:42:de:82:76:29:4d:a0:19:fa:ca:d6:
e3:05:73:23:98:c3:46:b0:4e:ae:d8:f9:b5:bd:e9:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BC:8B:EF:18:31:86:C6:68:9B:EA:38:AE:AB:7C:37:FE:84:11:15
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6ryL7xgxhsZom-o4rqt8N_6EERU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
82.152.131.0/24
82.153.50.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
02:66:c7:1c:21:b3:ff:33:ee:8d:9f:e7:92:1e:2e:97:df:04:
8f:1d:51:a0:99:79:db:ea:2c:9c:b5:62:77:90:84:9c:89:c3:
b8:fb:7d:c3:4e:4a:0b:37:f3:94:1f:45:1b:7d:50:5d:eb:4d:
e4:a2:f2:60:19:2e:1f:a8:fd:8e:b6:2b:e4:69:25:79:59:97:
af:bf:22:97:6f:b5:18:9c:4a:16:5c:ac:8a:25:23:25:62:5e:
6e:c0:a6:75:58:15:c3:76:f8:b9:f1:72:d6:b2:71:d1:9a:73:
ee:da:06:a0:00:78:80:d7:c2:db:4c:f1:bd:ca:35:36:4a:00:
1a:91:3c:47:0a:91:56:cc:03:17:38:78:8f:2e:9e:99:93:c0:
b9:f0:fa:96:93:3c:cb:f5:9d:9e:ee:b5:d6:f1:50:8c:3a:5d:
b0:05:d9:c8:ca:e5:f1:31:c3:be:9f:fb:70:b7:cc:b0:ee:a1:
dd:f5:92:7e:0c:19:16:82:d2:54:ca:ed:6f:6a:7b:cb:50:5e:
3e:7e:40:b1:85:6f:6b:b5:7e:57:7f:b0:d8:b9:85:eb:b4:75:
71:70:2c:5d:80:5e:fa:93:6d:86:08:33:1e:1f:ca:fb:ba:6c:
bf:19:df:4a:0c:8f:96:9f:ee:8a:65:d6:ee:5b:d1:e3:19:a6:
a6:5d:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:03:42 2025 by rpki-client