Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa
File: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (raw, json)
Hash identifier: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=
Subject key identifier: D4:61:AD:C9:33:E0:3E:50:F2:E8:C3:D0:E6:8D:20:4B:FD:90:F5:43
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019425216AADBEC13C2702E663FE44037AAC
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47971
IP address blocks: 81.94.218.0/23 maxlen: 24
81.94.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6a:ad:be:c1:3c:27:02:e6:63:fe:44:03:7a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d461adc933e03e50f2e8c3d0e68d204bfd90f543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:30:5b:1e:4e:6b:34:76:b0:e9:c8:f5:b5:
ee:35:e5:0e:b2:97:69:b7:00:96:d2:e7:e3:b6:75:
8a:c6:22:66:23:51:06:93:9a:e0:30:b9:71:c9:8b:
71:1f:35:0e:31:25:da:d2:3a:5e:1b:ea:5e:b0:07:
bc:e8:30:9a:40:1f:a0:7c:e4:19:2c:d9:fb:11:61:
e1:6d:f1:1f:02:d8:c7:01:8c:e0:c7:89:db:cb:88:
b3:98:39:a0:8b:6b:f2:a9:b6:3a:7f:ef:1d:03:c0:
56:f6:ea:65:f8:0c:96:55:52:00:2c:4b:0b:cb:d4:
99:8d:26:3c:3a:9c:38:06:af:72:1f:39:99:7a:31:
6a:e8:3e:79:8f:72:1e:f0:48:f4:aa:18:a4:bf:d0:
db:b5:03:68:06:90:79:e9:c0:8b:8d:e3:86:4b:11:
52:f3:00:5f:92:8e:cb:b0:29:21:c1:54:eb:a4:e2:
9b:43:26:f4:55:ee:5f:68:ca:cd:23:ee:4d:31:70:
36:e6:f3:41:a3:59:de:fd:f8:af:c6:e5:9c:c8:9c:
0c:56:65:9c:22:4e:37:e3:bd:de:25:75:bd:ff:d4:
93:4b:b8:5f:45:57:92:16:ba:20:51:eb:ab:73:eb:
49:e8:2d:15:c2:4f:7e:9e:21:5e:82:43:08:98:a9:
b9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:AD:C9:33:E0:3E:50:F2:E8:C3:D0:E6:8D:20:4B:FD:90:F5:43
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.218.0/23
81.94.222.0/24
Signature Algorithm: sha256WithRSAEncryption
25:84:4b:c2:77:5f:4e:81:52:3a:10:80:6f:18:44:d7:61:bd:
fd:53:7f:2c:df:06:98:5c:74:ee:84:da:9c:a0:16:85:26:56:
85:44:42:a6:fc:6a:1a:c6:e8:c7:70:a1:07:13:5e:2d:20:43:
cd:40:cf:b7:fd:a0:7e:16:a0:1b:2d:bc:99:1d:d0:16:5c:89:
9e:32:da:ea:75:c3:5c:35:00:2e:4e:da:00:2b:a9:82:e7:c9:
83:5f:20:db:91:3a:a9:7d:0f:80:02:33:82:bb:82:02:f0:35:
27:77:d7:4a:1b:34:8f:75:be:83:fd:8f:f9:5f:d9:e9:45:11:
f9:7b:49:65:a0:67:75:ec:01:7e:a2:35:d3:9f:cf:f5:41:7d:
81:9d:57:55:3f:45:3b:8b:bf:a6:63:29:b1:15:e1:34:b0:95:
5d:90:00:1d:34:31:4b:9b:1a:8f:25:5c:2a:1b:6b:f0:72:5a:
f7:44:45:8d:f5:17:e9:0b:ce:d3:a4:c8:2a:17:e8:bb:50:0b:
cd:78:77:1b:6c:87:ea:8b:fa:8e:ae:7f:3e:9e:f5:1e:1a:5f:
8f:74:3d:b6:b2:2c:4e:fb:db:1a:48:a5:52:a8:44:b3:fb:19:
26:47:e0:0e:73:53:de:39:69:e2:42:f4:56:48:50:91:41:00:
98:ff:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:48 2025 by rpki-client