Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa
File: 4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa (raw, json)
Hash identifier: 5dgH0nSjVBTs16em525/U4kAjurzhSSV9U/WWc+xCEs=
Subject key identifier: E2:1F:03:4A:EE:0B:0A:A2:EE:E7:2E:43:18:BC:95:34:B0:DA:5B:FF
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019623DB173730589DB502D93327BD47E182
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa
Signing time: Fri 11 Apr 2025 07:58:02 +0000
ROA not before: Fri 11 Apr 2025 07:58:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 81.31.244.0/24 maxlen: 24
81.31.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:db:17:37:30:58:9d:b5:02:d9:33:27:bd:47:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Apr 11 07:58:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e21f034aee0b0aa2eee72e4318bc9534b0da5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:36:2c:a3:b7:bb:2a:9b:29:d3:d4:40:e1:
63:b0:20:5a:f8:fe:f3:49:e7:74:f9:66:9c:1c:c9:
c2:03:78:75:55:a9:da:aa:49:ef:2a:2e:56:0e:a7:
35:45:0b:60:03:1a:56:cf:5c:bd:f8:9b:39:7c:1b:
b8:8d:56:1c:f2:16:8e:ad:93:23:1a:de:a2:0a:b3:
35:2d:62:3f:c4:ea:66:40:85:1c:5d:eb:c0:30:48:
73:d0:49:34:28:3f:1e:5c:9f:ee:43:4a:2c:4c:8b:
07:77:cf:2f:7c:61:e9:f3:d7:6e:98:d5:49:29:96:
8d:e3:7b:ba:41:05:69:82:ec:c4:c5:e5:e5:35:a9:
3d:4f:e9:06:b0:96:ad:bd:fb:a4:c6:25:46:bd:33:
bc:14:4a:22:76:13:30:4d:6c:49:26:ea:50:8a:b8:
80:41:74:8a:0f:16:44:c0:93:95:fb:65:2a:86:14:
cf:43:c2:a3:d9:50:0c:b8:df:4b:b3:7d:19:3a:bc:
8c:c8:5c:07:79:54:e2:ca:32:6f:3d:1a:42:4c:ad:
d8:79:bd:51:5f:b7:16:84:52:1e:91:99:6a:58:3f:
37:74:ad:52:59:dd:37:65:d8:aa:83:cc:b1:ca:0b:
6d:7d:65:5c:45:02:26:c1:6a:0b:85:ce:cf:b9:f0:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1F:03:4A:EE:0B:0A:A2:EE:E7:2E:43:18:BC:95:34:B0:DA:5B:FF
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:17:d1:8a:df:58:24:53:0b:6f:67:1b:eb:0f:94:88:92:a9:
04:1b:ca:db:e6:e6:65:1b:2a:9a:b0:b9:e6:93:ea:1f:fa:86:
b7:96:55:ce:52:06:e6:1c:f2:0b:c5:a8:15:5c:13:8d:57:6c:
11:59:b1:ca:fa:b4:15:3f:16:39:e5:35:ea:34:9c:33:96:e5:
77:bd:b8:38:a9:21:10:f5:13:b4:17:b8:61:4b:ba:8d:e5:e1:
8d:a7:be:c2:22:49:0b:41:e7:6e:9f:17:61:d6:2e:eb:5f:b9:
11:91:28:1a:c2:1e:68:f3:35:22:1c:3e:5d:46:f4:66:f8:a9:
bf:67:77:31:45:71:a1:e8:70:09:6b:a5:75:79:46:f1:46:59:
bb:14:17:6e:2a:11:1d:4d:cb:89:bc:dc:61:c9:1c:9d:f5:ea:
cf:08:dc:af:fd:09:36:99:2c:67:1d:34:18:20:66:7c:b6:77:
64:7d:4e:41:46:36:8b:24:46:2b:3e:48:ab:d8:8f:a5:34:53:
42:1f:ab:50:65:13:6e:c6:f3:42:0a:26:df:19:f0:b5:b5:d6:
fb:91:fe:97:f5:fc:74:f5:86:e5:25:92:f8:c5:4e:f1:d5:8c:
70:dc:e8:5d:1c:86:24:1c:07:6d:b9:d3:b3:9f:d3:84:4f:4c:
54:a0:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net