Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa
File: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (raw, json)
Hash identifier: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=
Subject key identifier: 9C:0A:F9:4D:C6:DA:45:A5:20:BC:6B:3A:1A:1A:04:31:96:30:DA:4E
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 01942748704F7208DDAFDD1D5AF55EE3DA38
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30778
IP address blocks: 81.6.128.0/21 maxlen: 21
81.6.136.0/23 maxlen: 23
81.6.138.0/24 maxlen: 24
81.6.140.0/22 maxlen: 22
2a00:cd80:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:70:4f:72:08:dd:af:dd:1d:5a:f5:5e:e3:da:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c0af94dc6da45a520bc6b3a1a1a04319630da4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:0d:5a:10:23:90:9d:e5:b7:74:38:68:5e:
75:a0:d1:8b:e4:df:ac:e7:3d:33:6c:ca:79:2b:b3:
9b:29:4a:b2:34:c8:6b:2f:8f:8e:13:0b:e6:02:29:
0d:ff:f1:d2:0a:4e:ae:2c:ff:1f:e8:81:bc:9b:74:
a7:94:06:9e:3b:90:48:4d:e5:20:bb:74:42:90:b2:
ac:0d:c3:d3:42:e7:3c:c1:98:79:3f:2e:b2:01:d6:
8a:33:f9:41:6c:d6:14:41:2b:bc:86:f2:f6:f7:23:
36:e2:7c:55:46:e3:44:b6:c9:6d:74:ff:ca:a8:5c:
f5:05:3a:b5:92:80:3d:79:87:e4:04:a4:09:43:9f:
8d:db:bf:b3:b2:85:57:eb:2b:d7:ad:4e:25:c1:86:
ed:e3:67:5d:a6:31:35:cd:29:50:23:99:6c:97:2b:
2c:ec:67:3b:c3:c8:f7:3c:74:07:06:8a:36:b3:10:
6f:3a:e7:7f:cc:df:bb:a8:14:28:c1:31:e7:03:95:
4f:d3:1e:61:ff:44:28:45:a7:0c:9a:bd:17:fd:e5:
77:47:48:10:f4:62:09:71:a0:59:c6:4c:ab:f8:cc:
0d:57:fc:d4:4f:31:1b:23:16:50:39:88:cf:67:90:
a2:79:ae:07:ec:cf:aa:fe:6a:21:c1:9b:5c:ea:63:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0A:F9:4D:C6:DA:45:A5:20:BC:6B:3A:1A:1A:04:31:96:30:DA:4E
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.128.0-81.6.138.255
81.6.140.0/22
IPv6:
2a00:cd80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
7f:e4:e3:cc:b7:88:3b:74:b3:dc:0c:6e:79:50:b2:9b:0a:69:
e1:8e:9c:b3:87:62:97:7f:b5:bd:60:6d:94:37:82:1c:9e:55:
17:08:d3:09:ce:62:ad:9c:15:06:64:0d:3f:87:11:76:f9:95:
e3:5b:09:36:82:a7:26:ec:c9:e6:d8:74:24:34:d7:e1:30:36:
e2:40:10:f4:fb:12:ea:0e:21:8b:ae:35:ca:a2:eb:d3:77:8e:
d6:bf:e4:f2:e6:ca:87:4d:89:a3:1d:37:40:48:57:8a:90:6a:
8c:21:12:24:4d:ca:95:98:1d:6a:5f:1e:fe:53:f7:db:07:47:
d8:b2:b9:6e:96:e8:2d:fb:f1:60:39:05:7e:cb:ed:4a:08:a5:
50:86:90:d6:9d:d7:04:c8:e9:a8:e0:65:33:7f:53:54:f0:f2:
22:52:e1:04:c3:1c:0b:6b:de:86:e6:d1:00:cb:76:49:3f:fb:
ab:46:a5:92:68:b2:6f:a6:0d:11:37:f7:64:7a:e6:5e:97:d0:
25:3e:83:6e:a1:be:ab:cd:e6:71:90:bf:93:4c:94:c1:ab:56:
b0:41:af:48:96:e5:1d:71:45:61:51:7a:dc:da:47:81:91:ba:
eb:f1:6d:27:97:98:3c:d4:02:5b:8b:cc:19:95:2a:28:d2:e7:
82:3c:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:40 2025 by rpki-client