Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/3IEfkjrujN1otjC8OV1_yIF0n7I.roa
File: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (raw, json)
Hash identifier: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=
Subject key identifier: DC:81:1F:92:3A:EE:8C:DD:68:B6:30:BC:39:5D:7F:C8:81:74:9F:B2
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 01941FFA1F9E2FE546B4DE48015EBF4DAEEF
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/3IEfkjrujN1otjC8OV1_yIF0n7I.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12130
IP address blocks: 81.201.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1f:9e:2f:e5:46:b4:de:48:01:5e:bf:4d:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc811f923aee8cdd68b630bc395d7fc881749fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:92:a7:4f:70:7b:8c:a5:ba:c0:78:55:7e:
05:0a:62:06:96:cf:3c:6b:4d:9b:cb:28:9c:7d:01:
03:14:78:7c:75:70:30:c8:e7:e5:9b:d1:d3:a2:1b:
e6:9b:4e:5f:13:4b:e6:cd:30:26:06:51:0a:a8:e3:
d1:53:76:32:40:c3:5b:eb:76:68:9e:97:5e:02:a1:
48:78:79:93:5c:9f:56:53:b6:96:27:43:eb:9a:e8:
fa:ee:29:ea:7d:40:c3:8a:f7:7f:65:c3:a3:36:7f:
9b:36:7d:d6:67:cb:7e:2a:d0:41:6e:42:7e:99:fa:
e0:7c:1a:70:85:be:f9:a1:a5:d2:f6:d4:0e:26:43:
0d:f5:84:df:59:8b:30:92:90:00:45:30:32:5e:d2:
e2:4e:8f:db:47:8b:b7:f0:e7:25:74:e0:fe:ae:05:
26:9b:7e:63:1c:d1:49:9e:5b:2f:ad:99:34:7f:1d:
04:28:c5:ec:d0:94:68:13:1c:5c:22:b0:2a:59:2c:
15:6e:16:7d:90:5b:ca:39:a3:4c:40:02:07:b0:c6:
ff:f7:d8:04:7f:c1:f3:45:17:fe:75:9d:5f:4c:0a:
31:97:2c:1e:62:28:e0:61:f8:f1:77:56:2e:44:dd:
90:7f:08:9c:e8:84:cc:fb:6d:bc:6f:67:49:cf:a2:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:1F:92:3A:EE:8C:DD:68:B6:30:BC:39:5D:7F:C8:81:74:9F:B2
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/3IEfkjrujN1otjC8OV1_yIF0n7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.80.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:49:98:ec:ff:ed:69:70:12:20:84:56:15:8f:a4:f7:45:1f:
4b:21:41:01:4b:06:67:da:3e:f0:cb:69:66:9e:63:b8:3d:c2:
7b:10:ce:08:51:31:30:2c:19:66:03:38:8e:c9:80:75:5f:af:
d0:98:75:68:b0:b7:19:73:1d:b8:39:85:e1:83:75:eb:29:a3:
41:9c:e5:b1:41:fc:85:4d:6f:b0:f4:ce:4e:82:40:4a:ab:95:
60:0f:8e:ae:ef:b6:45:2e:7f:21:6e:34:43:79:9c:68:14:3f:
89:77:f0:0e:99:c3:60:03:06:f4:d6:4d:c2:69:0d:f6:19:72:
f2:88:4d:60:b5:cf:df:e2:e4:c3:e2:46:c3:89:16:3f:a4:6e:
50:9c:75:ff:b4:c9:1b:55:97:42:3e:5a:2f:2d:97:83:1e:14:
ac:78:f1:8e:e5:a5:f4:61:26:ab:52:df:0b:69:85:a2:69:60:
85:e9:62:ad:77:47:10:90:02:9a:b3:c7:65:f5:27:a6:d7:58:
37:55:fb:03:6a:03:15:6d:7b:6e:0e:30:a1:56:c4:00:ab:98:
75:8f:19:00:35:01:4a:98:e4:0f:df:7a:b3:56:4b:ce:1c:2c:
0e:f5:26:28:45:8f:6e:45:94:ce:07:98:46:12:86:26:89:0b:
ad:29:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:21 2025 by rpki-client