Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/vSrVfCiFhwuThaFge_HlQGTrHjk.roa
File: vSrVfCiFhwuThaFge_HlQGTrHjk.roa (raw, json)
Hash identifier: Bc63krCzWLaf7LOD/k916HgQOiH2H7M6asbeefYBGos=
Subject key identifier: BD:2A:D5:7C:28:85:87:0B:93:85:A1:60:7B:F1:E5:40:64:EB:1E:39
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 01942826127C52BF81E41CA2CE6F4DDFA530
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/vSrVfCiFhwuThaFge_HlQGTrHjk.roa
Signing time: Thu 02 Jan 2025 17:52:51 +0000
ROA not before: Thu 02 Jan 2025 17:52:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 81.30.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:12:7c:52:bf:81:e4:1c:a2:ce:6f:4d:df:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Jan 2 17:52:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd2ad57c2885870b9385a1607bf1e54064eb1e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:ac:06:66:ed:97:0f:36:c5:8d:43:2c:58:
ae:2d:41:37:1a:d1:a8:c6:18:9a:5f:b2:c7:f7:49:
b9:e4:cf:d7:3f:42:e2:d5:4d:05:05:25:4e:a7:b5:
00:66:d3:f6:0a:ba:6a:42:e3:7c:a3:6b:9e:9c:6a:
0c:5e:04:1d:19:47:82:0d:0f:eb:a9:4d:ba:1b:5c:
ed:79:0b:8a:7f:6c:a4:ac:41:e5:e9:4c:2d:f2:c1:
81:59:95:fd:ea:af:b5:8b:fa:a2:db:38:27:53:32:
50:70:0e:86:99:28:9e:2d:6c:4a:eb:92:67:08:8b:
b4:89:57:ab:3c:47:7f:fe:15:09:aa:e6:5d:b2:f4:
ae:98:85:a7:4a:53:c6:dc:3f:23:76:bc:6f:60:ab:
d7:31:46:b7:ed:95:db:57:60:95:77:fe:0b:d6:7f:
1d:6e:ff:7f:3a:9f:09:4e:a9:92:fb:c8:09:58:11:
f6:31:0d:49:bd:24:96:f2:7c:dc:07:d3:3b:73:88:
53:e4:2b:2f:dc:c1:60:90:cb:bc:db:d0:0f:99:ff:
a9:1e:f4:f5:7a:5f:28:76:c7:36:17:80:90:6a:2e:
d4:0e:79:08:a8:28:56:ff:b0:87:d0:73:93:33:63:
38:b4:52:e2:ef:de:5b:26:9f:f8:28:bf:c7:37:78:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2A:D5:7C:28:85:87:0B:93:85:A1:60:7B:F1:E5:40:64:EB:1E:39
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/vSrVfCiFhwuThaFge_HlQGTrHjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9d:11:c8:26:ee:a8:67:f8:c9:68:d9:e7:bd:a4:1a:87:99:
2c:73:e5:4e:cf:83:5b:9b:3b:cb:eb:e0:63:c5:d1:d8:40:e3:
ff:63:7d:fd:8e:cc:8d:48:7d:e0:28:98:46:93:58:15:50:0a:
2e:01:61:5d:4c:a0:9f:2c:2c:c1:be:ea:76:56:97:35:e4:db:
f4:25:d1:f3:16:bb:49:2e:19:9f:b5:a7:cf:40:b6:10:c4:ae:
9e:48:e7:1c:ad:07:84:15:61:9c:17:37:9a:2c:af:13:64:af:
e9:37:4a:e1:1e:e0:76:04:33:ae:37:b9:b0:ec:2c:7e:0d:c1:
41:8d:e0:fd:a8:a4:76:a7:6c:e8:42:dd:f4:fd:b3:4c:19:2d:
44:b0:79:7d:4d:65:3f:fd:44:ad:a6:65:5e:0d:cc:20:3f:1f:
25:e7:e3:38:eb:5d:41:5c:48:e9:cd:04:e6:a2:ad:7d:12:c3:
2f:ed:16:09:10:2e:41:90:39:c4:c1:92:ca:da:97:fa:fe:4e:
9f:d2:43:62:05:81:90:ad:86:69:91:9d:f5:f8:05:38:fa:a0:
d3:31:48:e1:27:1a:a4:c3:0e:20:9e:0d:41:78:5b:ea:a2:fe:
e9:ae:c7:c5:62:20:45:a3:56:82:a3:3f:87:e7:06:25:44:ca:
a1:54:ba:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:05:52 2025 by rpki-client