Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iuiLka5gYZIcHZZYeeHkjKT-wUk.roa
File: iuiLka5gYZIcHZZYeeHkjKT-wUk.roa (raw, json)
Hash identifier: eyh7SQ1VTnGC9gr/ZoScUKqz00+mKFszPzHuykJd8QE=
Subject key identifier: 8A:E8:8B:91:AE:60:61:92:1C:1D:96:58:79:E1:E4:8C:A4:FE:C1:49
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3184667FCD9B62A704453B74018C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iuiLka5gYZIcHZZYeeHkjKT-wUk.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56679
IP address blocks: 81.3.154.0/24 maxlen: 24
84.204.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:31:84:66:7f:cd:9b:62:a7:04:45:3b:74:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae88b91ae6061921c1d965879e1e48ca4fec149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:71:0c:5b:6f:fe:52:25:7c:4b:7c:9d:b1:
84:dd:97:51:e2:4a:9b:07:6c:50:a4:6e:92:f7:ea:
f5:28:d7:37:55:5a:5c:38:ae:d2:a5:f7:9b:c3:c8:
7c:cd:b3:ac:0d:21:50:5b:64:e8:58:72:05:99:b0:
66:71:9f:3f:79:47:66:0d:f8:63:78:89:78:86:c9:
0f:17:fa:88:e9:d6:fd:c8:39:d7:47:16:31:4b:28:
60:18:3b:ae:47:a7:f1:ca:d1:75:f3:4d:bd:d3:8a:
d4:a2:c0:22:a5:e5:e1:28:0a:be:a2:0d:ac:f4:6e:
8d:94:29:7d:a4:01:fc:d0:cd:4c:90:58:c8:ed:da:
56:6f:ef:16:93:24:31:4a:2e:e4:6b:a5:76:ad:fc:
62:f4:6b:c0:80:bc:87:94:16:0d:f6:62:05:ad:ab:
84:1d:92:c4:ee:64:ec:63:77:89:77:cb:9d:a1:73:
55:f8:7d:9c:f9:6b:96:df:10:a8:45:09:21:44:5e:
82:9e:d1:2b:ff:dd:7d:02:5d:a1:a7:c6:b2:cc:4b:
96:3e:96:b1:7d:a1:70:12:d4:9f:1f:3d:6a:a0:82:
28:38:50:a3:83:81:df:a5:31:9f:20:2a:a6:11:db:
12:a0:9a:4e:51:16:2a:fd:99:d0:06:d9:2b:64:bf:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:8B:91:AE:60:61:92:1C:1D:96:58:79:E1:E4:8C:A4:FE:C1:49
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iuiLka5gYZIcHZZYeeHkjKT-wUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.154.0/24
84.204.148.0/24
Signature Algorithm: sha256WithRSAEncryption
60:db:2a:2c:ac:91:3a:81:ee:10:bd:f0:ca:22:25:31:0e:49:
9e:c3:dd:36:f9:c2:6c:d0:b1:9a:ef:d5:38:62:82:f9:da:79:
d8:75:df:c4:5f:94:e8:30:04:a1:06:ab:c9:73:e4:f9:7c:a8:
6a:78:68:73:12:6f:ff:ec:16:0f:cb:6a:45:77:9f:0b:f4:4b:
ba:d0:61:f5:4d:c9:0f:f2:58:f1:90:84:cb:20:d8:50:e0:33:
c2:b6:74:a3:37:ca:67:2f:5c:46:6f:99:ed:66:df:71:fd:f4:
83:eb:6d:6d:53:54:e1:45:a0:dd:88:ac:19:2d:d5:92:12:8f:
5f:d9:a4:3e:9b:74:c5:05:54:e2:32:34:eb:b2:a4:7f:5c:cf:
26:c9:ac:24:cd:77:94:08:1c:d5:7c:29:e5:1a:6a:24:87:75:
56:83:12:2f:de:2e:31:7f:e8:55:38:92:63:ba:06:41:1b:61:
1c:dd:92:ec:92:5c:fe:8b:1d:20:a4:e7:0c:19:98:3f:14:10:
76:4f:45:70:e0:d7:2f:69:b6:12:1f:ba:f5:c5:f1:c3:31:7b:
b2:bb:c7:34:26:a5:83:a5:ec:11:15:da:6c:5e:5c:7d:d9:49:
6f:6e:d9:8a:b1:12:4c:8d:02:22:cb:0d:c0:05:a6:fb:28:e4:
9c:50:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:38 2025 by rpki-client