Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3cf8e5-a6bd-4e2c-8a69-201c2017fd28/1/Unj4i3___yJRYROSZOOSy6k5ZHU.roa
File: Unj4i3___yJRYROSZOOSy6k5ZHU.roa (raw, json)
Hash identifier: PSOiMKNhJ0p6lEGvrjdf0KwPggD6QU/g6DQtWR0FI60=
Subject key identifier: 52:78:F8:8B:7F:FF:FF:22:51:61:13:92:64:E3:92:CB:A9:39:64:75
Certificate issuer: /CN=95cbc784c8ef6588c1159e34671f76d67c5dd81c
Certificate serial: 018CC9BCEE7E1599DED9CD86B7A7D605386A
Authority key identifier: 95:CB:C7:84:C8:EF:65:88:C1:15:9E:34:67:1F:76:D6:7C:5D:D8:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcvHhMjvZYjBFZ40Zx921nxd2Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3cf8e5-a6bd-4e2c-8a69-201c2017fd28/1/Unj4i3___yJRYROSZOOSy6k5ZHU.roa
Signing time: Tue 02 Jan 2024 10:34:11 +0000
ROA not before: Tue 02 Jan 2024 10:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 81.94.240.0/20 maxlen: 24
185.119.180.0/22 maxlen: 24
2a01:9b80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ee:7e:15:99:de:d9:cd:86:b7:a7:d6:05:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cbc784c8ef6588c1159e34671f76d67c5dd81c
Validity
Not Before: Jan 2 10:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5278f88b7fffff225161139264e392cba9396475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:5d:ea:40:b7:be:a4:b6:26:2e:8b:d3:ce:
2b:cd:6a:c8:cd:0b:cc:2e:24:89:77:02:5e:d8:d4:
77:6d:ad:32:85:96:ba:51:9b:d0:37:1c:ba:7c:e2:
a4:4e:5c:c5:7a:f4:72:a0:93:2d:fb:43:20:2a:31:
16:10:b2:35:0f:73:5a:42:0d:65:49:79:a8:36:e6:
c3:ac:ba:ac:7e:cb:2a:a6:d8:c8:9c:5e:97:1b:68:
eb:5f:26:32:7b:22:64:b9:a9:57:50:7f:14:a0:de:
69:39:c9:87:4f:bf:d8:8c:a4:ec:ab:89:20:f0:c0:
cf:7a:11:77:e6:99:18:10:ea:21:54:1c:be:bc:66:
ea:ca:07:54:0e:2c:0e:22:7a:b0:63:9f:41:2c:c2:
1c:45:ff:24:96:f3:fc:81:75:ee:e5:06:b2:05:e3:
1a:ce:30:e6:58:26:96:ff:74:a4:fc:70:14:7a:22:
2e:db:83:33:a9:54:44:55:92:01:14:34:6e:84:ac:
f5:37:73:a3:86:f5:44:40:35:1c:7e:c0:c9:94:a0:
8c:31:c0:53:98:d3:6a:70:93:ca:77:35:59:bb:d0:
e8:35:2a:19:c4:2c:8e:8c:7d:7d:f0:4c:f0:d4:21:
f9:89:74:3f:ff:1b:65:11:47:e2:c5:66:50:8c:29:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:F8:8B:7F:FF:FF:22:51:61:13:92:64:E3:92:CB:A9:39:64:75
X509v3 Authority Key Identifier:
keyid:95:CB:C7:84:C8:EF:65:88:C1:15:9E:34:67:1F:76:D6:7C:5D:D8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcvHhMjvZYjBFZ40Zx921nxd2Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3cf8e5-a6bd-4e2c-8a69-201c2017fd28/1/Unj4i3___yJRYROSZOOSy6k5ZHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3cf8e5-a6bd-4e2c-8a69-201c2017fd28/1/lcvHhMjvZYjBFZ40Zx921nxd2Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.240.0/20
185.119.180.0/22
IPv6:
2a01:9b80::/32
Signature Algorithm: sha256WithRSAEncryption
aa:98:05:5f:9d:b0:68:99:29:74:b4:30:5c:6d:4e:c0:2b:bb:
f9:5c:c2:85:ff:87:2e:58:3a:04:ed:5e:05:44:40:c9:95:51:
c9:d7:a8:08:57:1a:db:36:b0:31:34:60:59:b2:f8:44:14:eb:
df:97:3c:41:fb:57:23:81:56:0d:ff:2d:8c:0f:d4:0c:99:bc:
71:83:bd:65:93:9a:13:f9:83:48:3d:fd:84:9f:42:15:c8:c4:
5c:b7:71:cd:bf:d5:3b:dc:c8:54:75:c6:4d:08:4e:bf:51:11:
26:9e:cb:94:b3:e2:49:02:b5:15:86:c1:a5:b2:0e:24:df:66:
51:49:10:04:31:39:0e:d5:69:86:ef:72:e7:7f:21:c2:72:a6:
65:73:b8:4d:7c:4e:bf:f5:49:5b:36:c0:87:4a:88:e0:89:c8:
36:2b:68:34:88:59:f1:84:51:ab:de:91:ac:f4:27:42:5d:8e:
3b:22:a0:f8:cb:8f:b6:20:5c:c5:c0:01:cc:c5:cf:ec:a8:b7:
0f:5f:6f:f3:0e:03:7e:da:86:3d:2e:6f:3b:eb:e7:d1:f6:9a:
d4:e3:9b:88:0e:62:8e:92:f2:ab:99:5f:c6:a6:4d:8a:40:74:
d5:48:e8:5e:47:13:62:08:23:05:72:8a:a1:dd:5e:0c:ab:17:
28:c6:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:45 2025 by rpki-client