Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/2D8GskUOctsT18ewUQERiVKSyqY.roa
File: 2D8GskUOctsT18ewUQERiVKSyqY.roa (raw, json)
Hash identifier: 81yC075gcHWBzZ9r1FLaXrPHKC2rS2Rq+/AZd9LK1O0=
Subject key identifier: D8:3F:06:B2:45:0E:72:DB:13:D7:C7:B0:51:01:11:89:52:92:CA:A6
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019425213C8E3E012D9A97701F5A1BC46A88
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/2D8GskUOctsT18ewUQERiVKSyqY.roa
Signing time: Thu 02 Jan 2025 03:48:42 +0000
ROA not before: Thu 02 Jan 2025 03:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139719
IP address blocks: 81.199.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3c:8e:3e:01:2d:9a:97:70:1f:5a:1b:c4:6a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 03:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d83f06b2450e72db13d7c7b0510111895292caa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:9f:88:f7:86:8e:a3:58:f5:8d:99:f3:4d:
25:0e:33:98:45:72:11:27:a8:ad:44:ef:99:1c:1b:
37:28:9f:3a:01:84:e5:e4:12:9c:28:bc:ca:1d:95:
8d:a4:fb:60:92:b1:30:c8:4d:3a:ee:46:62:4f:40:
d5:a1:7f:e4:6f:22:f6:3e:ad:d5:20:16:5f:2c:cc:
f6:ca:9f:e4:e0:77:1e:60:b4:59:7c:c4:e3:3d:42:
eb:9a:e5:12:3e:78:2f:12:52:21:26:83:d2:3d:d0:
bb:a3:4a:14:17:04:c3:8d:33:96:9d:ee:06:96:e1:
16:22:c1:9b:91:93:35:4b:bc:39:2e:48:1d:2f:dd:
c8:9c:5f:67:8a:33:f1:87:0f:ef:8a:59:be:6d:a6:
c9:53:82:85:a4:98:e9:97:3d:d5:54:bd:d4:02:4e:
23:ef:bc:27:68:35:c0:c1:17:ca:ce:bc:50:1f:23:
c8:19:d2:21:59:4f:46:68:69:ab:2b:2f:e4:5d:7e:
1c:eb:6d:67:93:f7:a7:4a:ca:25:cc:db:10:5a:8d:
ce:bb:8c:95:ed:0e:51:cb:42:4a:88:62:a3:e0:8c:
44:e9:b5:b0:22:b7:76:83:63:d0:de:56:ef:27:0c:
5f:cb:e4:37:db:1e:35:48:cc:d4:a1:b0:65:ef:36:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:06:B2:45:0E:72:DB:13:D7:C7:B0:51:01:11:89:52:92:CA:A6
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/2D8GskUOctsT18ewUQERiVKSyqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:41:cb:44:a1:fe:ed:56:d1:fe:6f:b1:70:ab:69:25:2e:56:
d1:17:b7:b6:80:1b:2b:db:39:50:42:e5:dd:57:b4:0c:7b:ce:
85:85:e5:35:15:be:15:4f:da:e4:4e:36:91:a4:67:88:b1:cf:
f5:1b:7e:c8:4d:24:b7:94:2a:be:48:a5:ba:ec:c2:7b:d2:02:
c7:2c:5c:89:e1:24:16:8d:74:db:cb:98:dc:9e:33:3c:e4:aa:
0d:14:63:81:f2:0c:05:cc:16:3a:e5:03:b4:aa:43:c0:5f:d5:
c7:9c:c6:0c:0d:93:a5:25:4c:da:6b:f0:31:31:f6:19:5d:91:
31:c3:3f:6f:11:d6:f5:5d:a7:ec:c3:4a:8c:5b:b8:6a:33:ce:
4a:ef:6f:bd:05:6a:20:ff:aa:56:76:33:52:4d:0f:33:b8:14:
bd:ec:be:98:85:da:64:10:6c:e2:c9:b3:c8:19:24:b2:25:38:
c8:db:bf:9a:74:be:6d:79:ed:78:a8:31:ae:ef:78:92:4b:fc:
54:fd:33:a2:10:0f:65:19:86:ce:a7:68:2e:ac:1b:84:93:17:
5a:56:42:10:47:42:b5:ea:07:6f:a4:5d:5e:5f:6b:88:4c:da:
81:9f:3c:6d:2a:dd:6a:2e:6a:2f:05:f3:b7:0e:3e:83:3a:1c:
e4:98:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:33 2025 by rpki-client