Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/jiO9Mdn-HsWm7BVsZElm11YkZV0.roa
File: jiO9Mdn-HsWm7BVsZElm11YkZV0.roa (raw, json)
Hash identifier: APIn7pxRvbYuoSqnbdSM+pOhDIsDQNgLH1nEhUYtL2Y=
Subject key identifier: 8E:23:BD:31:D9:FE:1E:C5:A6:EC:15:6C:64:49:66:D7:56:24:65:5D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244560542AA26F388D522F8B1520AD6C
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/jiO9Mdn-HsWm7BVsZElm11YkZV0.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65552
IP address blocks: 81.8.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:60:54:2a:a2:6f:38:8d:52:2f:8b:15:20:ad:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e23bd31d9fe1ec5a6ec156c644966d75624655d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:d7:e1:99:a9:1e:71:97:f6:55:03:81:24:
2a:f8:5b:d4:97:a2:ed:f4:f1:4d:ba:0f:2a:b2:71:
52:c5:9f:18:38:64:e0:14:b6:65:b0:9a:fa:4a:3a:
69:78:30:14:1b:03:e6:53:be:86:ac:02:3f:b6:41:
31:15:66:22:7c:25:10:e2:fb:86:c9:de:fd:e0:23:
99:68:2f:f9:33:6e:4e:6f:d9:cb:29:7d:be:30:f3:
95:e4:ad:48:e0:a7:bd:f1:b6:ee:b3:e9:91:68:2f:
bc:49:ac:6e:6e:99:53:38:20:02:c5:67:fd:63:65:
f6:10:b2:2c:a1:80:6c:f6:13:da:2a:4b:ef:b9:85:
ab:52:6d:f2:a0:ee:c6:88:f4:f5:6b:ab:dc:94:47:
ad:ae:7b:0d:64:36:21:18:af:07:25:0f:e3:9a:2d:
f5:0d:ae:71:d4:ed:6d:06:d9:4b:d6:03:6d:24:c5:
0e:e6:1e:ad:c6:ae:0d:8b:98:a5:f6:4a:1a:ff:24:
37:97:3e:2a:0f:a0:20:4b:57:99:d5:c9:3a:70:b5:
d3:78:9b:35:40:2b:a6:60:14:f9:21:2a:72:64:3a:
d5:e8:87:e5:9d:0d:57:62:12:e3:ee:9b:52:61:9b:
b6:77:85:41:7c:10:4f:6b:c9:4a:6b:e5:81:c6:c3:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:23:BD:31:D9:FE:1E:C5:A6:EC:15:6C:64:49:66:D7:56:24:65:5D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/jiO9Mdn-HsWm7BVsZElm11YkZV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.34.0/24
Signature Algorithm: sha256WithRSAEncryption
62:40:21:a5:4f:72:0a:68:7d:14:6e:e5:c7:07:08:b0:4d:5c:
21:6f:4c:c9:28:95:ad:72:0e:64:43:16:8d:4e:f5:fa:6a:8f:
67:51:4e:76:4e:b1:8d:4c:92:77:3b:57:4a:72:65:48:a4:c1:
a6:6b:1f:ed:8a:77:23:1e:79:52:18:b5:ea:e9:93:e5:6a:a8:
0c:e8:65:ae:b7:90:de:5f:3a:27:d9:58:c1:81:ff:d9:9a:77:
11:fb:76:fe:eb:55:4a:fd:e1:87:e0:7a:93:42:51:cf:d6:80:
67:d6:d8:60:38:14:79:8e:ff:a0:0f:a2:38:7f:ce:17:e5:1b:
97:14:d6:0c:bd:a8:99:75:90:26:3f:06:8c:48:c0:91:9f:2d:
ca:af:c0:a8:29:76:c0:09:45:a5:7b:c5:de:c6:8d:a5:a0:ae:
11:f7:0a:39:91:c5:26:85:6a:0c:83:ec:68:6b:9b:88:1e:13:
ec:22:90:60:1b:e2:f2:08:dc:18:73:bf:1e:7f:f6:1c:d7:fc:
99:f9:e4:33:50:83:d3:68:fd:5f:4e:c6:fe:38:de:84:de:d6:
b5:b5:1b:52:1e:d0:5a:68:6e:d6:e2:08:17:18:c3:95:c4:34:
4e:ef:28:83:64:45:f8:b5:f6:7a:7a:d4:f3:24:16:a9:67:bb:
3f:90:28:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRWBUKqJvOI1SL4sVIK1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjUwMTAxMjM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTIzYmQzMWQ5ZmUxZWM1YTZlYzE1NmM2NDQ5NjZkNzU2MjQ2NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszPX4ZmpHnGX9lUDgSQq+FvUl6Lt
9PFNug8qsnFSxZ8YOGTgFLZlsJr6SjppeDAUGwPmU76GrAI/tkExFWYifCUQ4vuG
yd794COZaC/5M25Ob9nLKX2+MPOV5K1I4Ke98bbus+mRaC+8SaxubplTOCACxWf9
Y2X2ELIsoYBs9hPaKkvvuYWrUm3yoO7GiPT1a6vclEetrnsNZDYhGK8HJQ/jmi31
Da5x1O1tBtlL1gNtJMUO5h6txq4Ni5il9koa/yQ3lz4qD6AgS1eZ1ck6cLXTeJs1
QCumYBT5ISpyZDrV6IflnQ1XYhLj7ptSYZu2d4VBfBBPa8lKa+WBxsPcoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4jvTHZ/h7FpuwVbGRJZtdWJGVdMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvamlPOU1kbi1Ic1dtN0JWc1pFbG0xMVlrWlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQgiMA0G
CSqGSIb3DQEBCwUAA4IBAQBiQCGlT3IKaH0UbuXHBwiwTVwhb0zJKJWtcg5kQxaN
TvX6ao9nUU52TrGNTJJ3O1dKcmVIpMGmax/tincjHnlSGLXq6ZPlaqgM6GWut5De
Xzon2VjBgf/ZmncR+3b+61VK/eGH4HqTQlHP1oBn1thgOBR5jv+gD6I4f84X5RuX
FNYMvaiZdZAmPwaMSMCRny3Kr8CoKXbACUWle8Xexo2loK4R9wo5kcUmhWoMg+xo
a5uIHhPsIpBgG+LyCNwYc78ef/Yc1/yZ+eQzUIPTaP1fTsb+ON6E3ta1tRtSHtBa
aG7W4ggXGMOVxDRO7yiDZEX4tfZ6etTzJBapZ7s/kCio
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net