Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/qH4AOngGgCDKos4oiBE8L48PaSU.roa
File: qH4AOngGgCDKos4oiBE8L48PaSU.roa (raw, json)
Hash identifier: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=
Subject key identifier: A8:7E:00:3A:78:06:80:20:CA:A2:CE:28:88:11:3C:2F:8F:0F:69:25
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 0194274870C0E863CC986B5E4D9701B40A0F
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/qH4AOngGgCDKos4oiBE8L48PaSU.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48227
IP address blocks: 81.6.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:70:c0:e8:63:cc:98:6b:5e:4d:97:01:b4:0a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a87e003a78068020caa2ce2888113c2f8f0f6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:16:c9:2b:1a:45:c0:fe:8d:9e:3c:1e:cf:
de:d4:8d:3c:a3:aa:90:2a:fb:36:ec:e5:9e:68:e1:
46:33:33:c6:6b:74:99:f5:6b:09:db:49:97:86:1a:
c7:38:01:0c:c6:f8:44:5a:ae:f1:af:c2:0c:34:ed:
a3:b7:e8:3b:2e:74:46:c4:85:1d:2b:5b:d3:ba:bd:
f0:eb:39:ad:cb:78:84:ae:89:b9:69:08:7d:83:a7:
b8:9f:e4:17:e8:0b:22:24:2a:99:ef:0e:a5:24:a3:
fe:47:4f:9a:19:4c:0b:43:fe:78:40:58:86:f4:93:
5b:2e:4d:bb:7d:15:09:2c:c2:c9:08:a8:9f:c5:8b:
41:0a:17:72:3e:30:ed:d2:52:48:d4:64:36:e8:ea:
25:b3:36:d5:b2:83:78:10:3b:50:7a:0f:ec:86:a6:
5a:34:b1:37:48:08:b2:6e:d1:8e:d5:d8:5d:ae:31:
33:c1:de:90:02:f1:8e:78:60:5f:b6:6f:8d:a2:75:
b4:25:8c:68:cc:67:86:a3:a4:c8:6b:d7:87:15:1f:
c7:05:bd:91:86:f0:08:ff:bd:b6:58:bd:8d:91:1c:
98:36:b3:3b:38:10:bb:dc:47:98:44:3c:ee:3c:44:
0f:d0:28:7f:32:2d:97:2b:25:73:00:0e:c7:37:8c:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:00:3A:78:06:80:20:CA:A2:CE:28:88:11:3C:2F:8F:0F:69:25
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/qH4AOngGgCDKos4oiBE8L48PaSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.187.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:87:2f:d5:1e:b7:93:f3:4c:08:aa:54:ab:5f:6d:5d:2c:25:
2b:e2:56:e0:51:24:c2:d3:c8:88:d0:d8:73:7f:28:6d:ec:f4:
b3:4d:86:41:b1:ac:ae:17:49:18:43:70:18:08:06:9d:20:42:
de:ff:aa:4a:b3:2b:13:62:6c:85:3d:e5:cd:59:47:2c:e3:9f:
c6:6d:4d:69:31:50:4e:d6:b7:e7:0e:b8:b2:20:ae:04:e9:3a:
6e:9d:8d:ea:43:f8:e5:8d:ae:4b:e1:06:1f:99:88:dd:19:72:
03:bc:ec:80:3a:54:2e:1f:0e:ee:79:29:30:51:2a:21:d2:fb:
41:b7:08:57:6d:be:73:cd:d1:ae:8e:f1:65:7c:02:d5:0a:42:
44:2e:83:4e:af:16:3b:ad:57:aa:0a:eb:9f:27:df:13:63:51:
81:ec:d7:d8:4a:c8:00:58:d7:82:3e:e5:b9:6b:2d:25:b5:3d:
e3:4c:84:44:d7:85:af:5c:68:51:df:2e:4e:72:00:9e:c0:c0:
d8:8a:1f:93:83:58:ae:1e:9f:c7:cc:40:3b:b2:08:3a:1d:a8:
74:84:ca:26:6b:31:1c:08:c4:96:18:84:0b:95:01:50:11:7a:
07:14:7a:6b:c3:35:eb:27:ef:2a:4b:77:3f:09:c1:24:eb:55:
6d:ca:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:07 2025 by rpki-client