Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa
File: Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa (raw, json)
Hash identifier: venzuXtyA6pfuSkX79kUouNpzvrMCwT4iuXrBYS2hF0=
Subject key identifier: 06:47:F5:27:18:CF:7A:E8:65:7B:B3:7E:78:E1:BE:E2:FF:F7:1E:34
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA59AE3D6AFDF6D0F4C7635C6ED0B0
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204834
IP address blocks: 81.12.92.0/23 maxlen: 23
81.12.92.0/24 maxlen: 24
81.12.93.0/24 maxlen: 24
87.107.94.0/23 maxlen: 23
87.107.94.0/24 maxlen: 24
87.107.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:59:ae:3d:6a:fd:f6:d0:f4:c7:63:5c:6e:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0647f52718cf7ae8657bb37e78e1bee2fff71e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:62:ef:8b:50:1c:7f:6d:07:27:84:27:4d:
9f:c6:dd:ff:22:11:2e:0f:b1:49:8c:e2:2c:5c:00:
d4:2b:8b:25:e6:ae:93:26:f4:ce:9a:45:62:f5:c1:
82:3d:1f:72:45:5a:11:6f:18:f1:d1:aa:d6:cf:19:
5e:20:a3:2f:64:96:df:26:3b:52:a4:36:4a:56:eb:
c5:19:83:dd:8b:0f:82:09:e5:02:d4:87:83:da:41:
2a:cc:26:1d:f7:99:8c:3e:78:ca:b3:6a:95:ef:ed:
db:8c:0e:1e:34:01:3b:84:a9:e4:2c:6f:51:d2:aa:
4f:d7:cc:f8:bb:c7:6b:ff:f9:a5:78:de:3c:e1:5a:
e7:8c:a9:6c:db:75:6d:06:79:e7:41:2d:dd:c3:fe:
69:ff:68:29:51:48:70:a3:d9:10:2d:6e:e2:fb:d4:
78:69:54:09:1a:fa:71:dd:79:1b:ed:1c:19:8b:06:
66:d0:af:36:4e:a7:69:d5:92:77:a0:62:ff:f7:8a:
49:a4:fe:7c:89:20:26:d6:fe:f3:af:b6:da:09:93:
6e:52:7d:52:62:a0:ff:82:f3:c7:ab:30:61:20:6f:
54:f4:29:fb:aa:50:f6:50:cb:fe:fa:ad:f6:b3:f6:
de:83:02:c9:cb:7d:4d:f2:61:e8:9d:a1:e7:9a:6a:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:47:F5:27:18:CF:7A:E8:65:7B:B3:7E:78:E1:BE:E2:FF:F7:1E:34
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Bkf1JxjPeuhle7N-eOG-4v_3HjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.92.0/23
87.107.94.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:2c:e9:24:3a:b5:51:02:bb:5e:87:95:3b:3d:90:ea:e7:36:
7b:9b:b5:0b:d0:db:77:ff:76:ae:3b:1e:d0:4d:16:c1:ce:e2:
fd:95:d6:da:02:44:8d:c9:7d:82:0f:c9:dd:34:b3:75:49:42:
2c:87:d7:25:b0:9f:9b:96:a9:89:10:e8:cb:63:73:38:8b:84:
26:d4:90:30:18:dc:ce:7e:dd:9a:4e:88:6b:dc:21:91:8a:b7:
2b:35:a0:62:62:de:fe:94:5d:f6:11:25:e9:15:f7:64:23:7c:
21:9f:1e:ab:8b:58:94:7b:43:e1:ab:aa:1c:11:6c:b8:0a:31:
49:d8:9d:ef:7e:72:38:78:50:8e:89:71:9b:45:f8:b4:13:80:
82:56:72:9f:a7:00:a5:b7:2f:4d:b2:dc:0d:05:42:7d:c9:e5:
fa:7c:f5:d4:c3:9d:65:90:eb:3b:23:fb:71:23:f8:25:fc:3f:
55:ab:06:8c:66:a5:6d:2b:34:ea:9b:6f:4b:98:77:bb:97:07:
2d:56:d4:f7:c4:2d:29:8a:cb:e8:52:8e:ff:c4:11:fe:28:00:
a5:c5:1f:6f:d2:d5:e5:ea:c2:1f:d7:12:bd:1c:bd:56:4c:f3:
b9:c7:44:65:cc:a9:09:c2:93:5b:e2:28:c8:51:d8:25:8b:82:
57:7d:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:40 2025 by rpki-client