Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa
File: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (raw, json)
Hash identifier: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=
Subject key identifier: A0:9A:F8:0C:27:AA:B4:DD:AD:57:A5:20:7F:7E:8B:F5:E5:D3:71:32
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 0194206855DD802AAE7EF093A5B1030D2796
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34305
IP address blocks: 81.171.75.0/24 maxlen: 24
2001:4de0:2101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:55:dd:80:2a:ae:7e:f0:93:a5:b1:03:0d:27:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a09af80c27aab4ddad57a5207f7e8bf5e5d37132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:30:4d:32:6b:69:b7:dc:09:02:51:3c:c1:
33:bf:94:d1:f2:15:b1:b5:09:b7:f2:d0:36:09:5d:
97:22:7e:a7:f2:18:79:51:f4:d6:a9:b2:70:bc:98:
b0:cb:31:b9:39:9e:ce:00:3a:57:61:b5:3e:39:63:
62:b8:c2:d5:63:e7:d4:16:e8:11:7a:a5:40:21:49:
69:f8:06:aa:44:5c:4d:66:18:db:80:0f:f4:9b:60:
26:7d:10:88:f7:16:2c:32:20:d8:96:e2:d8:f3:39:
91:8e:fb:b5:07:1c:70:69:7a:2f:fc:b7:f0:4c:a4:
d6:ad:91:07:b0:95:74:6f:4e:14:c0:f0:83:a6:54:
8e:4e:f2:9d:77:b8:35:92:fd:bd:2c:b6:c6:71:60:
91:a5:79:c2:34:7a:6b:0a:da:3a:d0:83:77:e3:93:
46:ea:1e:72:2b:cf:b1:a0:4b:98:34:44:42:79:e1:
91:e3:5a:a5:16:dc:79:4e:41:ff:4e:a6:33:e8:a6:
d1:b5:09:da:25:1a:22:49:9f:26:d3:72:ee:6e:30:
8e:03:98:7e:d3:22:f2:84:0f:e9:41:b3:7c:23:a6:
e2:b5:2f:f5:ab:64:a9:93:42:61:45:fb:fd:11:d4:
4b:32:3c:24:26:68:9f:90:27:46:04:25:3f:96:79:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:F8:0C:27:AA:B4:DD:AD:57:A5:20:7F:7E:8B:F5:E5:D3:71:32
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.75.0/24
IPv6:
2001:4de0:2101::/48
Signature Algorithm: sha256WithRSAEncryption
95:50:3b:62:2e:86:5f:bd:cb:db:d1:9f:f5:99:0d:3d:14:8d:
c8:6a:12:1f:56:2b:31:43:79:6c:c0:10:3e:05:96:a7:85:a0:
dc:44:35:af:23:cd:a1:57:e1:d2:08:1f:3c:c1:df:5e:75:b2:
f3:b1:5f:b2:29:52:53:98:29:27:48:bc:56:29:ab:2f:ac:73:
83:25:8e:f3:13:35:a3:8e:91:22:5c:dc:5e:7d:60:4c:1a:76:
e7:a0:4f:95:bd:d1:1a:59:f4:74:86:e7:44:37:8f:00:24:98:
b9:c0:64:c4:04:6e:f0:39:9f:aa:7e:83:97:28:10:fc:51:aa:
8e:af:70:67:32:f9:41:ca:cc:45:e4:29:1b:30:15:f8:f6:42:
7b:12:26:28:5d:78:d2:5a:de:56:e4:6a:f1:78:a0:f6:2a:ec:
73:2e:d4:ab:9f:94:f9:f6:37:8f:7d:f3:36:03:33:e1:44:e2:
5d:5b:6d:61:28:a6:94:43:0c:47:cd:de:34:59:d7:19:6e:ba:
1e:69:c9:38:e6:f7:60:b0:dd:7e:00:c4:33:a2:91:cc:5c:12:
da:e5:dd:ce:93:25:0c:c8:55:4a:f3:aa:aa:03:b7:56:51:ab:
a9:7d:ad:71:ad:7e:b5:13:71:4e:2c:07:e4:61:2e:4e:de:ae:
45:3a:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:00 2025 by rpki-client