Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/aLyfJT6We20ULVg1UbujnE5UVaI.roa
File: aLyfJT6We20ULVg1UbujnE5UVaI.roa (raw, json)
Hash identifier: XttwXUAYz6CHALtumX6fckhDuT6Y4LNJR+NAILB010U=
Subject key identifier: 68:BC:9F:25:3E:96:7B:6D:14:2D:58:35:51:BB:A3:9C:4E:54:55:A2
Certificate issuer: /CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Certificate serial: 0194266BB970FDE9322D41B720BEDE1F1807
Authority key identifier: A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/aLyfJT6We20ULVg1UbujnE5UVaI.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34390
IP address blocks: 81.95.195.0/24 maxlen: 24
81.95.197.0/24 maxlen: 24
81.95.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b9:70:fd:e9:32:2d:41:b7:20:be:de:1f:18:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4824308bc83b4ee56f1c0c1b9fbfc311b0cd44a
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68bc9f253e967b6d142d583551bba39c4e5455a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:bc:6d:3f:a9:2f:cb:f7:64:c8:01:22:fc:
8f:02:da:4b:57:d9:20:da:0c:2a:a5:6c:1d:2d:25:
8c:ae:93:4a:fa:b2:6e:57:30:c6:7a:a2:ef:98:36:
c4:4b:42:98:8e:49:48:8a:8c:46:37:1e:0a:3e:2a:
cb:6c:c3:58:d1:a5:e5:ca:56:9d:cd:c9:2d:4a:e3:
1b:ee:05:8b:bb:19:cf:a5:51:04:aa:ff:e4:98:f2:
a4:3b:c9:29:9e:88:f5:06:4c:ab:60:ea:02:d3:ed:
ba:94:49:65:6a:ac:43:ed:52:7a:12:cc:22:42:fe:
5a:79:33:9b:6a:80:34:fd:6c:a2:f2:7a:ae:d6:81:
23:fd:f2:f1:bd:d0:a0:e5:9e:42:e6:98:92:43:66:
d4:b8:51:f9:d6:e9:ce:6f:3f:82:dd:47:fb:14:16:
23:61:9f:58:19:19:e3:87:2d:bf:55:d6:05:66:9b:
95:6d:e9:b9:51:d6:a7:05:40:13:b0:92:b3:4a:4c:
14:14:af:35:32:38:85:06:03:e8:3e:08:ce:13:9d:
b7:45:02:85:c3:f2:e4:31:5b:2c:b6:1e:2a:a8:c9:
47:37:32:03:74:38:3a:5f:28:dc:85:c1:81:d9:a5:
53:d0:e6:72:4e:0e:38:90:6f:38:91:50:16:0a:59:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:9F:25:3E:96:7B:6D:14:2D:58:35:51:BB:A3:9C:4E:54:55:A2
X509v3 Authority Key Identifier:
keyid:A4:82:43:08:BC:83:B4:EE:56:F1:C0:C1:B9:FB:FC:31:1B:0C:D4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIJDCLyDtO5W8cDBufv8MRsM1Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/aLyfJT6We20ULVg1UbujnE5UVaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5feb13-9e43-4325-85c9-196e6f375fd6/1/pIJDCLyDtO5W8cDBufv8MRsM1Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.195.0/24
81.95.197.0-81.95.198.255
Signature Algorithm: sha256WithRSAEncryption
57:af:3a:79:38:16:e5:08:34:10:19:2a:7d:89:10:e6:81:64:
83:f3:99:10:26:0a:c8:ef:fa:15:ce:78:18:93:b3:9e:03:ac:
08:1f:b5:70:b9:c1:18:50:4e:03:9f:27:dc:42:01:6c:61:81:
e8:20:0d:15:1c:14:a9:6e:54:60:ce:a8:6f:23:d0:f7:b9:8c:
1c:bf:16:75:f0:be:3e:bb:bf:ba:60:63:d8:56:e4:a8:fe:23:
ad:1f:dc:d1:0e:c3:8e:31:25:17:bd:04:3a:3b:84:49:e5:89:
0f:18:45:35:75:5f:31:ac:ff:d5:57:fd:e8:ce:5f:1a:bf:a5:
51:91:cf:73:f9:fa:ad:80:30:d5:cf:e2:13:76:6a:da:7a:0a:
97:0c:ad:17:ad:df:29:9a:73:28:94:38:5e:38:0b:c8:5b:14:
8c:d9:6f:33:6c:8f:42:06:26:00:71:90:fc:e2:31:5e:87:1d:
2f:39:38:83:99:c7:99:76:99:e2:6e:c3:e9:b4:80:96:2d:12:
ae:99:17:d8:df:40:d7:38:9e:75:1e:eb:d6:25:d8:09:0e:f0:
5a:0f:56:b2:c6:4c:d8:78:3d:b9:e2:8c:38:a1:65:79:45:d1:
75:1b:3a:8d:ee:12:7d:e0:c4:3a:57:86:ee:f9:bd:97:dd:da:
84:22:78:ab
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQma7lw/ekyLUG3IL7eHxgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODI0MzA4YmM4M2I0ZWU1NmYxYzBjMWI5ZmJmYzMxMWIw
Y2Q0NGEwHhcNMjUwMTAyMDk0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGJjOWYyNTNlOTY3YjZkMTQyZDU4MzU1MWJiYTM5YzRlNTQ1NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlei8bT+pL8v3ZMgBIvyPAtpLV9kg
2gwqpWwdLSWMrpNK+rJuVzDGeqLvmDbES0KYjklIioxGNx4KPirLbMNY0aXlylad
zcktSuMb7gWLuxnPpVEEqv/kmPKkO8kpnoj1BkyrYOoC0+26lEllaqxD7VJ6Eswi
Qv5aeTObaoA0/Wyi8nqu1oEj/fLxvdCg5Z5C5piSQ2bUuFH51unObz+C3Uf7FBYj
YZ9YGRnjhy2/VdYFZpuVbem5UdanBUATsJKzSkwUFK81MjiFBgPoPgjOE523RQKF
w/LkMVssth4qqMlHNzIDdDg6XyjchcGB2aVT0OZyTg44kG84kVAWClnE3QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFGi8nyU+lnttFC1YNVG7o5xOVFWiMB8GA1UdIwQY
MBaAFKSCQwi8g7TuVvHAwbn7/DEbDNRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1Yzkt
MTk2ZTZmMzc1ZmQ2LzEvYUx5ZkpUNldlMjBVTFZnMVVidWpuRTVVVmFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ZmViMTMtOWU0My00MzI1LTg1YzktMTk2ZTZmMzc1ZmQ2
LzEvcElKRENMeUR0TzVXOGNEQnVmdjhNUnNNMUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAUV/DMAwD
BABRX8UDBABRX8YwDQYJKoZIhvcNAQELBQADggEBAFevOnk4FuUINBAZKn2JEOaB
ZIPzmRAmCsjv+hXOeBiTs54DrAgftXC5wRhQTgOfJ9xCAWxhgeggDRUcFKluVGDO
qG8j0Pe5jBy/FnXwvj67v7pgY9hW5Kj+I60f3NEOw44xJRe9BDo7hEnliQ8YRTV1
XzGs/9VX/ejOXxq/pVGRz3P5+q2AMNXP4hN2atp6CpcMrRet3ymacyiUOF44C8hb
FIzZbzNsj0IGJgBxkPziMV6HHS85OIOZx5l2meJuw+m0gJYtEq6ZF9jfQNc4nnUe
69Yl2AkO8FoPVrLGTNh4PbnijDihZXlF0XUbOo3uEn3gxDpXhu75vZfd2oQieKs=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:49 2025 by rpki-client