Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/IeIheuUZIrSao3cwITZ9a7Vr14M.roa
File: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (raw, json)
Hash identifier: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=
Subject key identifier: 21:E2:21:7A:E5:19:22:B4:9A:A3:77:30:21:36:7D:6B:B5:6B:D7:83
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01942521EA4D3845C84EAF51AF4080AF8089
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/IeIheuUZIrSao3cwITZ9a7Vr14M.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41175
IP address blocks: 81.201.208.0/20 maxlen: 24
185.114.104.0/22 maxlen: 24
2a00:e900::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ea:4d:38:45:c8:4e:af:51:af:40:80:af:80:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21e2217ae51922b49aa3773021367d6bb56bd783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:6d:17:e0:64:b8:a1:dc:a7:08:92:ad:66:
ea:fb:56:07:da:a1:62:7f:39:b9:40:b3:a9:1b:02:
48:8f:c6:25:34:6f:b8:13:1f:84:b5:d1:a7:9f:a2:
9c:27:74:85:97:a1:f2:a8:dc:3e:3f:c7:f4:2f:f0:
2e:46:e0:bb:e1:87:fc:ff:b2:22:fa:cf:21:34:c5:
12:c2:81:d9:12:70:5d:46:47:17:16:7d:5d:3d:d6:
de:ca:46:10:cb:b7:b7:4a:c3:9a:99:ad:c5:1e:c5:
8a:de:51:76:f9:0f:57:0d:a3:79:4a:4b:66:02:27:
e4:be:58:ee:e8:f3:67:b2:6e:a9:55:a2:17:98:98:
0a:c6:e1:f3:88:75:8b:1a:f8:0b:56:44:d9:92:93:
17:65:eb:ab:73:04:ee:df:62:67:51:41:08:20:c0:
e2:4a:9c:22:28:57:cb:6a:66:1b:4e:53:96:4c:2a:
1d:02:5e:73:e6:d6:c3:37:80:14:35:63:f5:2e:17:
c9:ef:c3:76:4c:3e:64:62:fb:09:09:9b:17:5a:53:
3c:2e:7e:cb:59:5a:f4:30:fc:bd:24:20:db:6d:18:
0d:36:7c:a1:36:ef:ae:e0:c4:3d:41:54:ca:f6:c0:
e2:1e:87:1e:2d:38:50:29:3b:5e:24:43:3a:66:86:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:21:7A:E5:19:22:B4:9A:A3:77:30:21:36:7D:6B:B5:6B:D7:83
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/IeIheuUZIrSao3cwITZ9a7Vr14M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.208.0/20
185.114.104.0/22
IPv6:
2a00:e900::/29
Signature Algorithm: sha256WithRSAEncryption
71:4f:78:c0:13:8f:d5:7d:f1:ee:ec:93:d7:0f:d2:70:bf:02:
a4:bf:a9:b0:4d:2c:ee:0a:0e:37:07:d2:f8:0d:f0:ea:59:7d:
dc:6c:6f:13:b1:f0:8e:e7:8f:71:99:14:b2:40:ff:67:66:e1:
de:66:37:b4:17:66:bf:20:6c:ec:de:4b:e2:2e:42:89:c7:56:
1f:a5:b1:06:93:56:bd:57:2c:54:5b:e4:7b:ae:ed:9e:03:f0:
a2:4f:c0:64:0d:83:04:af:be:8c:d8:0b:76:ec:55:1c:cf:dd:
c4:46:ef:9b:11:e2:df:f6:69:f5:05:92:75:42:01:b5:7f:c3:
80:83:9b:e5:de:8b:c6:bd:c0:ca:39:fa:f4:04:1e:98:f8:e6:
1c:c2:fa:7f:df:00:f1:ce:f9:7d:6a:ad:b9:83:26:6f:4e:f5:
18:07:20:37:ee:bd:bb:d1:4e:af:f2:d8:5e:7a:05:33:05:56:
bd:55:89:57:16:ef:8c:a1:97:d3:45:14:ca:f3:81:fe:ca:f6:
ca:6f:78:30:19:f2:81:20:4e:f8:de:0d:92:65:c5:04:f6:3b:
c9:02:6c:44:30:50:ad:e4:80:36:b4:11:8e:51:c0:3a:8e:fb:
8d:82:dd:e5:65:2d:21:3f:a8:33:53:19:b9:6e:04:75:98:42:
94:80:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:46 2025 by rpki-client