Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i2J6KFzbcxCQIFRmCpuuYgjiEXY.roa
File: i2J6KFzbcxCQIFRmCpuuYgjiEXY.roa (raw, json)
Hash identifier: I97FVi6IEK6U9ZplORSN2pLcX52Z0JjGfjodF9LX5ls=
Subject key identifier: 8B:62:7A:28:5C:DB:73:10:90:20:54:66:0A:9B:AE:62:08:E2:11:76
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01958AF9364A01319224853CF1B1D42D98E6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i2J6KFzbcxCQIFRmCpuuYgjiEXY.roa
Signing time: Wed 12 Mar 2025 15:29:02 +0000
ROA not before: Wed 12 Mar 2025 15:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213918
IP address blocks: 81.168.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:f9:36:4a:01:31:92:24:85:3c:f1:b1:d4:2d:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 12 15:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b627a285cdb7310902054660a9bae6208e21176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:71:d1:c8:3b:bf:c4:5d:09:d6:4b:3d:65:
f7:cc:b4:0a:14:19:35:c5:ae:75:3f:8f:1b:d8:f4:
1a:6c:b9:54:a7:1f:f7:c5:c4:18:3d:6b:2e:67:a3:
db:68:53:97:df:f6:ad:b0:e3:b8:ff:e7:df:37:12:
9f:0c:1f:d9:bb:17:04:ee:05:91:56:22:36:53:bd:
f3:00:6b:2f:be:2f:8d:e9:f9:8f:4c:a5:58:cc:94:
30:f4:19:11:2a:0b:bd:3f:fe:9e:17:5c:9c:4f:72:
15:3b:d8:b3:f5:ae:49:93:8d:9b:2d:9c:b8:60:31:
f9:89:bb:cf:4e:6f:61:1c:54:a4:ad:e7:5e:80:32:
94:06:c3:b6:a7:47:d8:68:3b:a1:d2:5e:05:80:53:
7d:82:d2:e9:f6:4d:74:6f:e2:64:33:90:6f:66:e0:
ef:78:5e:02:47:98:25:bc:06:bf:71:16:8d:34:5d:
70:a7:08:06:6c:df:3b:9b:4f:4f:d3:1d:b4:ff:8f:
7e:d9:fc:48:96:b4:a5:ac:3f:00:a1:00:22:5f:5d:
d8:1f:4c:54:2d:fd:bd:7c:a0:7d:f6:5a:2b:7f:4e:
ba:56:37:4d:c4:7c:98:c3:d1:0d:ef:fc:1c:eb:39:
44:c2:86:57:80:0e:29:09:41:c4:b1:b3:0f:29:1c:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:7A:28:5C:DB:73:10:90:20:54:66:0A:9B:AE:62:08:E2:11:76
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i2J6KFzbcxCQIFRmCpuuYgjiEXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:dd:cf:92:3a:c0:f4:96:46:b5:ca:38:59:6f:01:27:6a:b8:
a8:94:66:51:59:7c:c0:5a:f2:75:9e:19:02:58:c9:d7:34:f2:
24:38:08:73:7f:7d:64:0d:d7:88:27:da:96:a5:9b:7d:4c:9b:
ab:7e:2b:e6:12:19:8b:59:ea:e9:b9:a8:e4:8b:76:4e:4b:23:
b5:6a:4f:d3:b3:56:34:43:0c:54:53:2d:70:e7:eb:1a:37:d8:
0b:68:a7:87:4d:b8:76:5a:b0:48:a1:4a:e5:91:cc:f0:f1:3b:
36:d2:11:93:44:f0:13:8e:53:f6:0d:8f:43:b3:10:e4:d6:4d:
2c:fb:72:66:5f:75:c4:29:32:a9:7c:3d:4b:4f:d4:fa:82:12:
d0:fd:00:08:de:10:43:69:fb:d3:6d:d6:cc:6e:e1:40:cb:de:
ca:85:d6:e9:4f:09:e3:c2:95:19:64:0a:3f:d7:6b:a7:c8:76:
84:17:21:70:27:e5:8b:88:12:a5:95:cb:88:95:a0:9c:12:89:
11:ab:8d:9f:6a:02:d0:22:b3:d6:6b:96:13:8f:a7:bb:1e:81:
90:a7:d1:86:ce:b6:8d:58:83:4b:63:ee:2d:8a:e5:f8:dd:37:
67:70:52:b5:75:fe:5c:d6:f0:fb:50:55:e0:03:3f:58:b1:b2:
20:24:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:47 2025 by rpki-client