Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/j89ASOslTb0sA8qPaNCnvdarbHI.roa
File: j89ASOslTb0sA8qPaNCnvdarbHI.roa (raw, json)
Hash identifier: pTH6+0WVaBMdNBqgh83yrPXmlHTEaPDbAotvSzt0CT4=
Subject key identifier: 8F:CF:40:48:EB:25:4D:BD:2C:03:CA:8F:68:D0:A7:BD:D6:AB:6C:72
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 0194282612ACD335F950530C4FDCF807F312
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/j89ASOslTb0sA8qPaNCnvdarbHI.roa
Signing time: Thu 02 Jan 2025 17:52:51 +0000
ROA not before: Thu 02 Jan 2025 17:52:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212217
IP address blocks: 81.30.104.0/24 maxlen: 24
2a13:e280:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:12:ac:d3:35:f9:50:53:0c:4f:dc:f8:07:f3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Jan 2 17:52:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fcf4048eb254dbd2c03ca8f68d0a7bdd6ab6c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:27:a1:42:83:8b:65:62:7c:25:eb:3a:ca:7f:
43:78:d7:86:07:50:1e:19:de:dd:60:6d:8b:e2:2e:
13:3d:8c:60:66:45:a9:14:23:54:7d:f2:ee:5c:00:
34:7e:f2:7a:4e:0f:47:0c:67:70:2e:78:be:3a:da:
69:eb:f6:8b:67:e5:3b:d4:c5:05:4b:8d:12:3c:a5:
84:de:7d:c3:90:3b:75:c3:73:55:1b:7b:8a:95:c8:
53:1d:4e:4a:47:b2:68:3e:41:22:79:be:33:83:8d:
ae:70:6c:2b:58:09:dc:f0:f8:13:4e:84:07:61:3b:
85:10:c5:9b:12:f0:cf:a6:42:0f:fd:f6:09:c5:87:
16:9a:13:e6:e3:04:71:9d:38:ef:4e:a4:41:95:0b:
c2:81:84:ca:3f:17:e7:af:eb:b5:d4:c4:6a:6f:75:
8a:7e:83:b9:11:e3:b5:c4:ef:bf:66:38:8b:74:57:
cb:e7:62:cf:4b:06:18:a7:7b:2c:53:60:2d:61:f7:
0f:5a:21:7a:78:db:37:96:1d:9b:49:7e:96:93:a3:
cc:23:2f:59:a6:52:be:b3:46:24:ed:d1:4b:c9:ef:
e7:4b:90:2f:f4:f2:1c:31:89:d7:28:9f:e4:2b:7b:
05:f1:b3:08:11:2a:7d:24:12:fe:53:d6:ba:8b:cf:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:40:48:EB:25:4D:BD:2C:03:CA:8F:68:D0:A7:BD:D6:AB:6C:72
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/j89ASOslTb0sA8qPaNCnvdarbHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.104.0/24
IPv6:
2a13:e280:1::/48
Signature Algorithm: sha256WithRSAEncryption
66:1a:18:c9:80:6e:64:de:ed:73:ba:95:cf:24:da:a7:b5:bc:
af:9d:c8:5f:e8:c7:dd:30:80:10:92:b6:2d:58:45:9b:34:b7:
f7:80:33:21:1b:7e:fa:20:18:9f:a9:2d:9e:08:cd:0d:9c:31:
0b:f8:99:b7:13:a8:fa:b0:3e:83:d6:fd:59:cb:c6:cb:0c:39:
3a:21:b4:21:83:a8:5e:e3:b9:e0:ba:4e:2a:c2:f4:d8:54:bf:
b5:44:b3:a1:e5:c9:96:e3:08:d9:96:a1:78:f3:7e:59:55:4f:
84:bb:6e:42:08:3b:8f:a7:7d:3f:74:b1:b0:6f:62:59:a9:bf:
4c:dd:40:62:11:fd:42:6d:71:ba:e4:5b:d4:0d:6d:77:8e:d9:
eb:c5:7e:7a:4a:56:cd:96:b7:34:44:5b:07:db:2f:ea:0c:12:
d6:45:ae:05:d6:e1:75:ab:f6:9a:af:b0:96:43:ad:23:ec:ec:
a3:8c:50:16:f2:d3:b2:fd:22:d7:6a:1a:56:84:8a:24:14:5d:
62:e3:0f:d1:98:05:0f:66:31:a6:3f:b6:fd:b6:8d:aa:db:b6:
a6:c7:55:8a:d6:2b:57:3e:b1:16:b8:61:07:1e:c5:8a:41:ae:
1c:73:2a:94:7d:5f:de:a7:d2:bb:05:cf:84:5c:40:40:ee:aa:
89:b8:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:44:00 2025 by rpki-client