Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/8tq6vUxikXVafkdQNOumeQjFfpc.roa
File: 8tq6vUxikXVafkdQNOumeQjFfpc.roa (raw, json)
Hash identifier: UpmsMokgr2OHdk8MVVsUZdaiVZYh5g21JKYfdCc4ZA8=
Subject key identifier: F2:DA:BA:BD:4C:62:91:75:5A:7E:47:50:34:EB:A6:79:08:C5:7E:97
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 0194282613719EA3A485CBC617DCB23BC83E
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/8tq6vUxikXVafkdQNOumeQjFfpc.roa
Signing time: Thu 02 Jan 2025 17:52:51 +0000
ROA not before: Thu 02 Jan 2025 17:52:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216149
IP address blocks: 81.30.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:13:71:9e:a3:a4:85:cb:c6:17:dc:b2:3b:c8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Jan 2 17:52:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2dababd4c6291755a7e475034eba67908c57e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:5d:ba:9c:65:6f:6d:a1:8e:50:cc:19:9c:
06:05:ef:89:b3:2d:32:6f:39:a0:d1:eb:fd:29:5b:
93:93:bf:0b:fd:b5:fb:98:cf:bf:35:7c:ad:07:6c:
b1:fb:ba:34:3d:e7:1a:60:e7:ac:ab:53:58:42:03:
c5:b3:61:7f:62:93:27:88:4a:c6:73:83:84:2d:65:
f8:07:a7:af:7b:dd:c0:67:5a:9e:95:fa:aa:5f:ba:
e6:e5:a0:ca:55:17:83:93:30:0c:c7:0e:b8:55:1f:
aa:8e:3f:2d:1b:33:da:0a:a1:58:ed:14:59:c8:27:
e8:34:c6:cb:fe:dc:b0:bb:af:51:10:97:da:28:2f:
29:54:36:0c:f1:c8:ca:20:8a:4a:90:2a:2f:ab:7b:
36:26:1a:4d:f8:67:d8:ef:b3:a5:20:93:f5:9d:40:
e2:48:5f:a8:67:58:67:f5:16:a8:35:be:c0:5d:3d:
50:cc:1e:ec:4c:c3:d9:cc:d0:5a:5c:4a:96:b3:8d:
77:47:d4:73:6e:c4:fe:7c:8b:e8:10:c7:dd:65:10:
a1:73:6b:f6:fc:03:99:b8:0f:80:13:85:cc:67:8e:
df:d6:71:d2:43:91:4d:cf:36:53:26:25:5d:d7:b3:
8a:62:49:5b:92:12:62:1c:fa:b8:d5:37:87:a3:f9:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:BA:BD:4C:62:91:75:5A:7E:47:50:34:EB:A6:79:08:C5:7E:97
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/8tq6vUxikXVafkdQNOumeQjFfpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:63:b3:9a:15:e4:4c:0a:a4:f6:33:ae:b8:6e:fd:25:3b:1b:
35:58:17:d8:52:0f:10:06:71:66:bf:21:77:e4:72:d8:74:0b:
ea:00:d0:e1:b0:a2:9c:fa:f3:59:45:79:e4:90:82:aa:b8:a0:
a7:d2:8e:91:2f:4d:2b:14:5c:c2:6e:17:6a:7a:3e:1f:bc:8a:
cf:1c:44:15:8b:6f:85:af:fe:27:f4:68:ff:41:61:da:db:85:
e4:c4:10:64:ff:0e:a7:1c:1f:89:e1:79:31:a3:63:8b:74:d6:
c0:2a:14:c8:4c:39:fa:74:0b:53:11:99:dd:ad:f8:c3:3e:a4:
c6:f8:be:7e:9f:b8:15:c0:f1:3a:a0:fe:2e:b8:82:7e:3b:3b:
37:4e:b2:6a:fa:e4:c2:5d:a8:bb:f5:86:17:25:7d:33:dd:63:
f9:e8:65:e3:4f:3b:97:c6:8d:ff:ea:a3:f1:ee:f4:7c:7c:22:
ff:06:2f:ed:c2:c3:4c:f6:57:d0:9a:e0:7e:cb:34:c8:d3:f9:
8d:c7:9a:3f:2d:86:b1:dc:51:a4:57:5a:13:6e:13:9c:72:b1:
de:d3:26:6e:eb:73:21:d5:1d:29:6b:d0:96:9b:53:87:df:e2:
85:5d:85:fe:75:bc:cb:1b:c4:0c:12:24:1e:7c:b3:18:ba:e8:
ac:5d:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:27 2025 by rpki-client