Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/InIRujvheMSnuntsvHJjTs5su2U.roa
File: InIRujvheMSnuntsvHJjTs5su2U.roa (raw, json)
Hash identifier: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=
Subject key identifier: 22:72:11:BA:3B:E1:78:C4:A7:BA:7B:6C:BC:72:63:4E:CE:6C:BB:65
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3F3C48651F26007A06FF73C9E6D22
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/InIRujvheMSnuntsvHJjTs5su2U.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 45.81.149.0/24 maxlen: 24
185.202.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f3:c4:86:51:f2:60:07:a0:6f:f7:3c:9e:6d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=227211ba3be178c4a7ba7b6cbc72634ece6cbb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:0f:ff:24:3a:b8:61:56:75:ae:7c:5a:0d:
9b:e4:3e:86:fa:50:11:45:a4:ae:64:dd:a7:eb:36:
9b:fe:ef:17:95:9b:92:fa:58:05:a9:d4:39:ff:de:
b7:92:41:54:a6:e1:c8:9e:04:33:ea:2c:9c:f7:6a:
a5:99:f3:65:06:bb:eb:f5:88:d5:a6:b4:66:2b:75:
96:7f:8f:26:cd:d0:b0:0c:eb:4e:fe:8b:62:d5:28:
b3:4a:8c:c8:0f:bb:f2:6b:87:b8:1d:54:f1:1b:85:
02:44:64:53:6e:3d:8a:2e:13:fa:14:02:dc:20:fb:
35:e7:84:1d:5f:9d:49:86:50:a7:43:e7:03:08:d8:
5e:d6:8b:08:24:3f:4f:d0:c8:27:0e:b6:f4:b6:d2:
e5:46:b4:27:58:29:1d:f6:8b:59:42:94:9a:1d:75:
63:21:82:97:be:8c:ab:c0:bd:d5:bd:e0:ea:3e:c1:
37:9b:19:72:d2:19:9f:4d:0e:93:2c:92:51:ae:8b:
12:7f:0f:83:34:da:a5:f5:f6:fe:e0:1f:9a:00:75:
eb:f6:87:f5:2c:10:9e:d5:fb:1f:dc:b0:37:d9:5a:
b0:3a:9c:43:37:c3:1f:23:8f:81:75:f3:98:48:69:
4a:88:28:3f:45:0d:fe:1e:6d:0b:ca:b3:5f:ed:cb:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:11:BA:3B:E1:78:C4:A7:BA:7B:6C:BC:72:63:4E:CE:6C:BB:65
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/InIRujvheMSnuntsvHJjTs5su2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.149.0/24
185.202.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:79:ad:7c:d0:a1:30:7d:cf:6e:6d:d0:a8:87:d1:9a:f5:ef:
30:50:02:f5:be:fd:26:bb:26:40:d0:34:be:d6:72:7e:32:ff:
fd:de:93:72:a4:5f:88:0b:f3:4b:14:4b:2c:bf:73:fa:db:54:
1c:b7:43:dc:c8:c9:9d:39:b3:72:e4:1e:78:e1:31:e4:b0:3d:
cd:32:cf:24:52:d7:f7:d6:df:1d:55:ee:b1:ca:2d:32:98:4a:
03:42:69:cd:c5:30:98:5c:15:ff:cf:46:da:2a:f1:9c:4e:be:
69:c4:0b:83:c4:49:41:6d:8a:67:50:f5:ff:cd:a8:6e:1f:f4:
5d:65:c3:2f:2b:e2:d4:ee:02:2b:63:2f:85:b3:dc:62:69:9b:
ea:8e:a0:86:82:0a:d2:76:12:42:94:65:f9:1b:b0:ca:10:f2:
bd:a4:86:ff:22:b7:1e:20:f7:6f:61:e5:eb:0e:b4:6f:7d:89:
36:07:3c:48:a9:3f:a0:5f:a5:24:a1:8d:a0:8d:08:d9:17:49:
73:dc:e6:db:f5:df:53:81:2e:a9:90:b4:e6:df:d3:0d:c9:45:
cb:aa:74:90:e1:72:ca:e2:c5:cf:eb:fd:44:ab:ef:b2:2b:e2:
35:49:c9:d1:ce:84:34:49:2d:77:02:33:09:20:0c:d2:66:3f:
63:f1:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:39:04 2025 by rpki-client