Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Pi79eocSBGgNrprE0qfzuX64cIQ.roa
File: Pi79eocSBGgNrprE0qfzuX64cIQ.roa (raw, json)
Hash identifier: fvix9xvupl9Rvu5dL1HlRrwLBuvSibe6MgecROtnqvU=
Subject key identifier: 3E:2E:FD:7A:87:12:04:68:0D:AE:9A:C4:D2:A7:F3:B9:7E:B8:70:84
Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Certificate serial: 01942068278B50AA3D0B3D05F18E9686B6BB
Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Pi79eocSBGgNrprE0qfzuX64cIQ.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208861
IP address blocks: 81.161.102.0/23 maxlen: 23
194.152.56.0/24 maxlen: 24
2a13:59c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:27:8b:50:aa:3d:0b:3d:05:f1:8e:96:86:b6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e2efd7a871204680dae9ac4d2a7f3b97eb87084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:6c:2f:af:a5:27:bf:14:75:ce:54:b9:25:
de:27:de:dd:f3:77:97:bd:f1:e3:cf:2d:a9:81:b0:
13:91:0b:85:ad:d6:84:2d:80:47:01:7d:d5:0e:55:
f2:08:7c:e6:fb:42:cd:26:12:6e:e7:72:1f:05:c1:
23:9f:f7:47:a3:66:1a:e8:35:76:83:7a:7e:bd:8f:
c6:04:6c:85:c5:f7:4e:99:f2:31:2d:40:4d:2e:c2:
94:79:c5:4b:b1:da:28:94:29:9a:95:d4:76:0d:56:
6c:68:97:77:32:0b:67:81:40:28:a2:31:1c:27:69:
23:73:f6:b5:56:90:f4:ea:f7:01:8c:c1:63:0d:b7:
f9:4a:16:d3:d5:84:7f:b9:e0:b6:81:87:ba:0b:98:
4d:1e:07:e4:04:e4:14:54:8f:d8:25:96:26:82:ba:
aa:bb:1b:04:37:a3:31:11:61:eb:c7:f5:7f:32:0f:
a8:e6:e4:0c:39:8e:47:a7:34:8c:fa:04:71:0a:ae:
9c:54:68:16:37:de:3f:62:04:f4:b4:51:7b:da:0a:
e7:3f:8c:de:35:55:6e:c0:fa:42:9b:0b:9b:f4:48:
40:2f:90:b3:7d:68:88:0a:ac:b7:12:3f:85:dc:61:
e5:44:ce:fd:0b:47:28:cd:e2:6e:72:13:d0:89:93:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:FD:7A:87:12:04:68:0D:AE:9A:C4:D2:A7:F3:B9:7E:B8:70:84
X509v3 Authority Key Identifier:
keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/Pi79eocSBGgNrprE0qfzuX64cIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.102.0/23
194.152.56.0/24
IPv6:
2a13:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:db:34:42:e8:34:db:63:ed:87:c9:4d:99:28:9c:84:a0:76:
3a:4d:fa:0a:b0:ac:68:b3:f2:73:da:05:12:49:5c:db:59:0b:
ea:6c:e4:74:1c:2b:8b:79:cd:f5:7c:92:9c:c7:db:37:91:ab:
e8:79:f3:c7:45:5a:c1:c1:6c:09:df:c3:20:34:53:64:7b:1a:
a7:5e:62:79:a2:c2:17:14:6a:d1:70:02:d9:99:c4:81:e8:06:
f2:82:da:63:ef:a2:9c:b7:90:0a:c6:27:21:39:70:3b:30:1e:
e5:9d:db:06:ad:e8:a1:52:30:40:f7:2c:e5:ff:c1:67:66:b0:
c1:1e:61:99:4a:ad:b9:ed:a6:04:ee:7f:1c:d4:f3:ce:16:fb:
af:68:31:c7:a5:dc:0c:19:52:00:a1:d4:16:bd:37:19:0f:51:
2b:ca:70:65:e6:ec:76:04:0f:92:89:aa:ad:89:32:37:72:30:
07:fb:b9:b5:72:fa:f4:c2:da:d8:7e:9b:cf:73:0e:58:3e:83:
c2:ed:f8:dc:58:2d:42:d3:64:f6:f4:d3:12:92:53:00:98:76:
5e:5d:34:a2:f0:f7:24:b8:fa:31:b9:f0:03:50:61:7f:e0:11:
35:a4:da:dd:a8:b1:13:32:93:b0:ff:5f:34:4a:61:fe:28:a7:
b3:7c:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:24:18 2025 by rpki-client