Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa
File: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (raw, json)
Hash identifier: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=
Subject key identifier: 67:F2:53:4D:1F:D1:B4:C9:D9:9A:BC:F4:83:72:3D:14:CE:C5:CF:03
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01953C18565D745001066C3214855D28CCEC
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa
Signing time: Tue 25 Feb 2025 07:53:02 +0000
ROA not before: Tue 25 Feb 2025 07:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51469
IP address blocks: 81.31.224.0/22 maxlen: 22
81.31.228.0/23 maxlen: 23
81.31.236.0/22 maxlen: 22
81.31.240.0/23 maxlen: 23
81.31.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:18:56:5d:74:50:01:06:6c:32:14:85:5d:28:cc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Feb 25 07:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f2534d1fd1b4c9d99abcf483723d14cec5cf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:45:f7:07:9f:71:31:79:1f:78:7a:cf:b0:
25:10:b9:d1:f4:f3:2c:85:a6:00:4c:1a:ab:ec:ff:
01:3d:c8:b3:51:97:6d:8a:61:9f:95:d4:e6:c5:7e:
03:95:cd:a3:43:a6:00:45:83:00:e9:87:8c:69:b3:
0e:59:d2:be:a4:08:26:b0:b1:74:9a:9e:6e:90:39:
93:19:36:55:79:65:c1:b4:08:0d:ff:91:98:b2:b5:
81:52:56:ce:4b:ec:6d:2a:11:f5:bb:4c:db:d9:05:
5f:9c:6d:c0:32:4d:5a:68:89:b6:ca:0f:41:bf:d8:
5d:5d:12:38:c2:f6:1f:5f:83:6c:5f:38:1c:9f:f2:
bc:a9:a2:63:6f:ca:b8:16:72:58:f4:dc:d1:1d:ba:
fe:d9:02:92:43:42:45:04:1f:e8:52:ce:fa:24:6f:
aa:9a:27:99:67:f7:70:e5:d9:69:ec:39:20:6c:4f:
8a:15:e0:65:f3:33:39:22:a1:7f:8c:16:b4:cb:6c:
29:e3:58:c3:58:ec:e6:49:cc:84:fa:4b:61:8c:78:
78:92:e4:55:c6:fc:8a:dc:1d:11:53:e4:89:dd:fd:
2c:d2:fb:9f:67:02:6c:df:3b:fb:b3:c1:fd:41:30:
c6:d2:8c:f5:e0:59:17:c5:09:d2:29:47:27:71:8a:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:53:4D:1F:D1:B4:C9:D9:9A:BC:F4:83:72:3D:14:CE:C5:CF:03
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.224.0-81.31.229.255
81.31.236.0-81.31.241.255
81.31.248.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:b5:04:d8:32:0d:bb:26:22:3c:68:d2:07:b3:b7:4f:4d:f6:
c3:e5:62:eb:d3:ac:3c:5d:3f:64:e0:53:10:3c:82:2f:b7:40:
19:cb:1c:b8:97:f5:64:72:05:f4:f0:41:d2:ba:b9:b1:df:4c:
09:13:d7:ea:fa:9e:b0:46:8b:fb:e9:d3:9e:f5:70:ea:dd:72:
94:7a:b0:1b:1b:55:e6:49:cb:c6:57:29:eb:dd:08:16:e0:b4:
06:8c:83:99:4c:db:b7:b7:73:8d:30:a3:ab:1b:c8:6a:31:9f:
0f:27:ca:89:58:d1:0e:55:f6:3b:8a:3a:0a:4b:df:ba:6f:f0:
1e:5b:da:7a:43:0a:94:57:fe:78:c1:f4:0d:2a:b8:db:5f:13:
96:2e:48:3c:7d:d7:c6:1e:6f:2e:2a:21:e6:a5:23:d8:90:00:
9c:8a:07:f1:04:fe:f7:ef:d8:1c:be:d6:6d:8b:98:01:53:41:
56:d4:a5:36:5b:6e:fd:a6:eb:b1:cd:80:f6:2d:3e:49:d1:7b:
84:8e:fb:2a:c9:c1:41:65:77:a8:e1:ec:d7:bd:5a:d5:d2:08:
13:c9:b6:82:ee:fc:a4:87:f5:f8:57:d7:c1:36:35:04:ce:44:
45:08:8b:f5:b7:0e:ff:3c:78:64:07:17:c2:00:bb:e0:8a:a9:
16:d3:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net