Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fohhFTzC1iM9QOPrvht9x9um1EQ.roa
File: fohhFTzC1iM9QOPrvht9x9um1EQ.roa (raw, json)
Hash identifier: Dpxbw0i80dmo9QdceY9WEM8XM32oM2v3vYFAP5bAxrs=
Subject key identifier: 7E:88:61:15:3C:C2:D6:23:3D:40:E3:EB:BE:1B:7D:C7:DB:A6:D4:44
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424456029C348A82A63BDBDFE49FAD883
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fohhFTzC1iM9QOPrvht9x9um1EQ.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65550
IP address blocks: 81.8.34.0/24 maxlen: 24
81.8.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:60:29:c3:48:a8:2a:63:bd:bd:fe:49:fa:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e8861153cc2d6233d40e3ebbe1b7dc7dba6d444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:18:c8:d9:a0:4f:d5:4b:7c:55:2e:80:6b:
18:bf:4b:9a:4b:e4:d6:23:82:83:3a:36:de:18:ff:
c8:c0:ba:b4:4e:09:2f:90:85:40:8e:a1:b8:85:af:
b8:84:d0:ee:ec:e6:e8:f9:85:b1:23:a6:2f:13:82:
e7:b7:9b:97:e1:38:85:f8:92:21:e0:70:83:fc:de:
26:3a:86:b8:50:08:66:62:72:a8:4a:28:ed:b6:94:
ac:a5:6a:b5:ce:5d:52:9c:d7:e4:5b:0c:1a:b2:b9:
fd:fd:2b:f9:ef:11:af:90:af:d5:8c:02:43:68:c2:
c1:1e:e7:94:cc:25:d7:70:9b:44:0a:ef:5e:2f:9f:
12:c6:06:78:30:6d:3c:c6:ba:d4:9b:4c:b2:60:a9:
de:d7:97:a6:69:ff:90:3d:8b:5b:89:31:5c:55:29:
00:16:b9:00:16:3e:70:2b:a7:b7:0c:d1:9e:3c:6b:
76:a2:05:0a:d2:ed:84:1a:b5:25:8c:99:f7:ee:a8:
e3:bc:05:2c:86:49:d7:84:11:13:19:7a:74:1a:e3:
9e:f1:91:af:09:09:d8:b9:f3:21:c5:e0:68:43:55:
30:bb:39:46:03:d9:08:18:33:51:5b:f6:83:36:d3:
07:d4:d0:d9:f1:1a:0e:c7:e5:b1:f7:25:9d:23:bc:
8c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:61:15:3C:C2:D6:23:3D:40:E3:EB:BE:1B:7D:C7:DB:A6:D4:44
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fohhFTzC1iM9QOPrvht9x9um1EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.34.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:9b:f7:17:51:55:0b:78:28:94:1b:43:3c:ea:05:97:e2:c8:
4d:cb:70:28:8f:22:e1:e0:1b:f9:84:b1:c0:8a:cd:81:85:c2:
d3:fa:f6:4d:c6:5a:f8:9f:da:4a:b7:63:d8:ac:72:04:f7:72:
65:90:78:6d:32:55:e8:67:5d:b7:a8:ee:89:17:1c:7c:5e:b8:
02:20:09:2b:57:28:16:cb:4a:c2:84:63:3f:07:61:ff:98:5b:
eb:fa:63:7a:f1:b8:26:7b:22:ea:55:f8:e5:e5:42:50:9f:42:
ce:77:41:71:a0:92:5c:68:1a:0c:ab:7b:d7:85:02:fb:fa:7b:
cb:ef:29:a2:0a:db:56:c2:61:53:0e:2a:36:ec:c1:5f:16:a1:
7c:a2:56:bc:2a:c1:6a:70:fa:12:d0:72:24:01:3c:92:55:39:
61:7a:99:24:ad:99:7a:13:d9:1a:32:7e:cf:cd:58:56:a9:15:
d9:13:fb:96:c0:69:67:76:c5:ab:10:9c:48:5b:2a:0b:4a:e2:
5a:7c:2c:2e:d2:50:8e:d7:4e:ab:40:63:6e:ad:9f:31:41:4c:
22:3c:0d:39:0f:6b:35:96:09:25:42:74:e2:83:16:71:73:b7:
e1:05:a4:7e:6f:f0:61:bc:5d:73:58:f3:30:96:b9:ed:8b:e3:
c9:3f:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:46 2025 by rpki-client