Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa
File: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (raw, json)
Hash identifier: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=
Subject key identifier: 06:B8:64:77:6F:9A:BA:FB:D9:98:2C:AF:C7:2E:4E:46:11:DE:43:A1
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC093FE667C756161D4676449CFE95
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 81.22.129.0/24 maxlen: 24
81.22.131.0/24 maxlen: 24
81.22.138.0/24 maxlen: 24
89.185.0.0/24 maxlen: 24
109.72.121.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:09:3f:e6:67:c7:56:16:1d:46:76:44:9c:fe:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06b864776f9abafbd9982cafc72e4e4611de43a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:fd:7e:2a:4e:86:22:a0:88:69:51:7f:e6:
40:fa:c8:8d:96:2f:22:d0:6d:ff:44:2e:b8:d5:3b:
12:e6:a3:af:27:b3:27:dd:f0:63:b8:6b:2f:b9:51:
89:41:c2:93:a0:e6:02:a8:4a:2d:6c:75:7d:42:65:
67:c1:fd:6f:57:e1:ad:4c:49:38:87:6d:12:77:53:
ce:f6:90:d2:79:42:09:6f:7d:de:dc:5f:81:d3:e4:
11:db:67:52:1b:da:3c:ac:57:05:b2:28:2c:fb:3f:
0d:bb:c6:e6:6a:b8:5f:5b:fe:5c:39:0a:4b:1f:93:
1c:1c:9c:fc:47:e6:44:42:8d:31:d1:78:a8:28:b1:
20:2d:34:4d:68:15:94:8e:35:04:5f:17:9e:8c:a8:
35:ae:e1:7d:c0:33:2f:3a:b1:a9:d6:62:c5:a5:6c:
d4:0a:52:00:d8:70:89:0b:cc:70:7b:26:2c:b2:6a:
c8:a6:0c:ea:38:03:1e:89:fc:1f:65:81:24:a1:45:
8f:3f:89:61:88:3c:6b:ff:f6:d0:29:0c:cb:4b:f8:
ae:7e:3d:61:e3:55:a8:03:d5:b4:7b:b4:08:ee:b4:
03:f7:bc:53:8a:4c:19:45:4a:f8:4d:8c:69:73:8d:
9e:0a:b9:ca:43:6b:b8:5b:b5:d4:58:85:23:90:29:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B8:64:77:6F:9A:BA:FB:D9:98:2C:AF:C7:2E:4E:46:11:DE:43:A1
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
81.22.131.0/24
81.22.138.0/24
89.185.0.0/24
109.72.121.0/24
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b0:87:95:f7:56:90:b2:c7:15:d4:e7:e5:9e:55:ed:65:39:
84:ef:1e:9c:ef:cb:f5:62:97:ea:81:2c:ee:08:c9:3e:d5:d1:
5c:9c:e5:54:f1:f4:5a:f6:13:85:67:f3:17:fd:02:92:b4:79:
db:a2:51:db:cf:94:07:73:26:44:59:b8:11:d7:b0:68:06:6a:
a4:4d:2c:9a:b5:12:c4:5d:29:69:98:a4:94:38:84:98:6a:17:
ee:32:ec:a9:e2:f1:55:f2:6c:e3:40:71:f2:52:10:0c:85:d6:
f4:56:5f:16:5f:e0:42:9f:91:4f:4f:e5:b8:5c:7d:85:f3:88:
ad:73:71:e1:15:b2:91:5c:80:3f:ef:fd:aa:3c:ac:96:b8:ca:
ed:ee:c0:0c:f3:af:17:29:18:1f:ac:a2:cf:12:23:85:05:51:
ba:0e:c9:83:a3:16:7d:79:c6:51:7d:94:18:cd:4f:db:b0:30:
e0:87:f7:de:02:5b:03:7e:d6:ad:41:e2:f3:f6:b4:8c:47:97:
64:ec:0d:8f:9f:3a:19:c2:63:9a:76:e4:b3:ad:89:af:34:fd:
89:86:97:ac:35:e2:f8:b5:a4:54:1f:e8:9e:8e:e3:cc:2f:ba:
33:f3:92:66:b0:ba:df:d6:2a:70:46:9a:89:3a:99:af:15:f1:
52:16:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:45 2025 by rpki-client