Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa
File: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (raw, json)
Hash identifier: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=
Subject key identifier: B5:5F:29:63:60:1A:16:84:E1:B3:B6:92:47:FA:D5:44:A3:38:B9:9F
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BE9B1350DA59FA7CF11817FD6F099
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1729
IP address blocks: 81.228.8.0/24 maxlen: 24
81.228.9.0/24 maxlen: 24
81.228.10.0/24 maxlen: 24
81.228.11.0/24 maxlen: 24
131.115.0.0/16 maxlen: 24
131.116.0.0/16 maxlen: 24
192.16.152.0/24 maxlen: 24
192.16.154.0/24 maxlen: 24
192.150.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:b1:35:0d:a5:9f:a7:cf:11:81:7f:d6:f0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b55f2963601a1684e1b3b69247fad544a338b99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:e8:e9:07:b2:de:a6:f2:7c:3e:f6:18:e1:
46:c7:56:17:cf:cb:e0:eb:c5:3a:73:a9:07:8b:35:
47:31:2f:18:fb:4d:06:e2:8f:30:62:b4:a6:8b:ff:
c3:41:8d:19:04:02:f4:32:c5:7d:f4:63:cc:e9:1e:
d2:83:a5:08:a9:00:44:fe:3b:80:ac:23:48:39:22:
ee:e9:b1:35:2e:c9:f9:bc:8f:1e:58:ee:49:2b:65:
09:56:3e:57:27:7b:61:bc:21:cd:b9:da:8f:07:c0:
a1:08:81:dc:9b:2f:36:5d:eb:70:9c:85:a0:a3:1f:
71:08:c9:d6:77:9e:67:ed:21:0e:1c:c6:46:7a:30:
d0:dd:f9:ae:03:3b:24:31:b3:2a:e5:0e:b0:46:88:
b2:df:86:e7:f9:af:4e:5f:2c:13:0e:f3:84:a1:cd:
d0:79:77:34:23:2b:1f:f3:6d:0d:6c:49:64:4d:27:
b4:a2:50:22:79:20:03:9c:bb:ce:24:a9:3d:c4:32:
0c:fb:a6:a5:35:95:4f:c0:28:b8:8b:c1:71:c5:53:
f9:18:c4:8a:eb:70:1b:e8:83:0b:aa:4a:42:fe:dd:
b2:bd:ab:53:fd:ec:f3:5d:ed:0b:7e:94:f0:4f:1f:
9e:2c:be:36:e7:0d:c0:b5:00:f9:66:87:c6:1d:a0:
f7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:29:63:60:1A:16:84:E1:B3:B6:92:47:FA:D5:44:A3:38:B9:9F
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.228.8.0/22
131.115.0.0-131.116.255.255
192.16.152.0/24
192.16.154.0/24
192.150.84.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:7c:8d:88:9c:a3:19:0d:6a:bf:8f:05:96:50:71:24:43:f5:
32:29:ba:b2:6a:a5:7c:94:3c:59:24:f9:24:a7:fc:04:66:32:
33:c9:7e:3b:63:43:b6:3b:ef:8f:b2:a5:6d:21:33:1d:db:11:
b4:d4:18:52:6e:80:f1:93:48:38:e0:ca:6c:16:82:80:d4:a7:
fd:bc:7f:60:6f:9a:51:25:36:f3:97:d6:57:a8:e5:04:5b:cb:
b5:09:31:60:b4:25:d2:ca:2a:62:c9:2a:92:57:83:b4:13:af:
46:14:3f:a9:3a:98:b4:f0:97:87:29:97:52:4f:a6:bf:3b:01:
eb:1f:5f:8e:ff:86:0a:8c:fc:73:30:49:c2:fe:e6:ec:7a:ea:
8f:9a:e0:af:92:77:5a:51:7c:a5:e8:ae:92:17:c4:0e:ba:4b:
1c:de:c2:e4:d5:fa:9f:6e:89:71:e3:e7:34:77:df:76:db:ee:
29:5d:ee:b4:a9:f4:52:25:cc:5c:aa:78:04:25:d6:db:0b:2c:
52:bb:09:b5:00:d3:5a:24:f6:92:d5:4e:4d:67:8c:5c:d9:c9:
6e:8d:59:7c:c2:d5:17:2e:90:16:e5:06:a4:5f:a2:9e:89:3b:
46:e7:ea:07:3c:bb:99:36:7e:3d:14:0b:d0:18:5a:fd:b0:14:
34:3e:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:26 2025 by rpki-client