Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/9VNJyGhtdrmHGQAZEvdunGX3dJQ.roa
File: 9VNJyGhtdrmHGQAZEvdunGX3dJQ.roa (raw, json)
Hash identifier: OgGbQdydkIAMlbCyu/O50mEAMl1YktwPyLnW3AdBOw4=
Subject key identifier: F5:53:49:C8:68:6D:76:B9:87:19:00:19:12:F7:6E:9C:65:F7:74:94
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019566741A34B931011C6E1EA17A94DA6E98
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/9VNJyGhtdrmHGQAZEvdunGX3dJQ.roa
Signing time: Wed 05 Mar 2025 13:17:19 +0000
ROA not before: Wed 05 Mar 2025 13:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 81.30.105.0/24 maxlen: 24
95.215.56.0/24 maxlen: 24
121.127.37.0/24 maxlen: 24
185.56.162.0/24 maxlen: 24
194.164.245.0/24 maxlen: 24
202.49.176.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
203.31.40.0/24 maxlen: 24
2a13:d207::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:74:1a:34:b9:31:01:1c:6e:1e:a1:7a:94:da:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Mar 5 13:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55349c8686d76b98719001912f76e9c65f77494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:40:0f:4f:15:f4:75:32:41:a2:f5:87:43:
22:a3:a1:5a:4d:e3:36:a4:b7:01:4a:a4:0a:14:1d:
70:cf:8f:fa:08:29:5e:17:50:33:de:ed:48:44:66:
d7:8d:12:17:19:d2:cf:6d:e2:b7:bb:82:dd:7a:e5:
5b:53:ca:4d:1b:39:2b:95:6b:d4:0f:27:bc:e9:b0:
15:9e:09:b0:7e:ef:f9:7c:79:92:da:b1:dc:6d:2c:
a6:2b:0e:cd:6b:80:4f:2d:8d:40:3d:39:4c:9b:7c:
e3:5b:7c:97:42:08:f4:e3:2a:68:2e:42:92:bf:75:
2f:c9:05:9b:a9:31:fe:b8:02:0a:bd:aa:04:a0:0b:
da:f2:df:74:68:f2:3b:c6:db:02:f0:8d:59:4f:41:
63:0e:82:e2:7f:d1:72:e0:3c:20:53:0e:86:8f:c4:
b0:47:ec:55:56:53:b1:d3:df:28:40:4d:52:63:bf:
ae:b4:33:00:fd:f7:96:ca:a3:6e:82:8d:18:2a:d8:
8d:76:bd:70:2b:d5:07:eb:1a:45:36:f0:d5:9e:ea:
e4:7f:7b:e4:79:61:14:61:f5:09:02:87:1f:64:24:
75:7f:0a:1d:a9:10:87:0f:7a:54:45:57:41:3d:7e:
10:6a:ff:8c:ec:81:9c:45:f5:80:21:c6:77:6d:4e:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:49:C8:68:6D:76:B9:87:19:00:19:12:F7:6E:9C:65:F7:74:94
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/9VNJyGhtdrmHGQAZEvdunGX3dJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.105.0/24
95.215.56.0/24
121.127.37.0/24
185.56.162.0/24
194.164.245.0/24
202.49.176.0/24
202.181.148.0/24
203.31.40.0/24
IPv6:
2a13:d207::/32
Signature Algorithm: sha256WithRSAEncryption
85:d8:d8:4c:97:4b:d4:90:8b:7a:e1:49:1d:02:4a:52:89:d0:
5c:1d:1a:ff:e3:61:46:7e:93:bc:a8:67:6e:14:e4:8a:7e:bb:
ea:4b:f6:c6:69:da:98:e0:c8:7e:43:5c:5c:e2:14:d0:0c:fc:
cf:ff:6c:78:ab:b2:5b:23:5b:89:05:28:b9:9a:8b:a6:d7:7d:
6c:4e:37:3a:dd:a2:fd:fc:64:3d:14:ba:0b:e3:e5:47:c1:c1:
ee:59:79:56:0b:3d:15:7d:51:ec:b2:34:13:da:e3:65:8e:7c:
79:55:75:cb:c2:18:98:32:01:d5:09:39:7a:c6:ba:c9:53:b4:
22:a2:76:5c:1f:3e:cc:21:19:41:d6:c0:ca:d2:06:75:2d:6f:
71:33:1b:cc:aa:04:0a:52:95:f2:74:91:a1:33:cc:e8:bd:5a:
a5:c7:ee:2b:f9:e9:10:d1:a5:6a:0e:5f:48:35:6a:6d:c1:9f:
56:b9:d3:46:94:b9:98:6b:18:2d:d7:8c:92:99:a1:f5:90:37:
8d:98:30:a4:e0:d9:d7:77:b5:f5:33:a5:2c:0d:03:01:ba:3a:
3a:fa:83:48:b1:dd:6f:5f:5b:2e:fa:fb:69:8a:03:65:de:69:
32:06:2e:c0:66:df:9b:52:8d:c1:30:82:a9:b7:87:0c:0a:c1:
14:62:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:22:40 2025 by rpki-client