Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/L-kwHWoDaZVHymZSVKLj2CDl5JE.roa
File: L-kwHWoDaZVHymZSVKLj2CDl5JE.roa (raw, json)
Hash identifier: RzZtH5fSY0TqGEBtyH9cKZhJPNebxYKoH4rxiHLyN4M=
Subject key identifier: 2F:E9:30:1D:6A:03:69:95:47:CA:66:52:54:A2:E3:D8:20:E5:E4:91
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 0194214414B52D3FE137988FD977E5A32E3F
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/L-kwHWoDaZVHymZSVKLj2CDl5JE.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211503
IP address blocks: 81.29.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:14:b5:2d:3f:e1:37:98:8f:d9:77:e5:a3:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fe9301d6a03699547ca665254a2e3d820e5e491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:dc:f0:64:6a:ed:d6:7d:97:d6:06:01:63:
e4:f2:c0:4b:94:1a:da:72:07:d5:c7:d4:22:62:ea:
72:4b:5a:90:ae:b7:e8:dd:ef:63:13:80:56:b0:57:
d3:ca:75:67:61:e9:b1:39:09:94:bd:3e:78:38:32:
92:c0:71:ea:20:35:16:b1:e6:4b:ff:ab:85:76:8f:
eb:58:18:db:f4:46:8c:d8:78:a9:b0:06:1e:a7:9e:
25:d1:71:58:92:9d:12:91:83:59:3d:76:4b:06:30:
47:67:82:24:02:25:7a:b1:c1:7b:a9:01:4e:2f:20:
e1:4e:82:99:8b:b5:c6:db:84:14:a1:78:b7:33:fa:
3e:ac:aa:e5:75:1b:d3:6f:c7:7a:2d:f7:a6:9c:e8:
72:46:3c:fb:05:f5:59:aa:db:e0:39:7b:96:9c:b5:
e1:08:24:22:db:b4:04:67:fc:01:37:11:ca:1d:c0:
7e:b8:24:f4:1c:88:d9:48:52:ef:ef:33:af:93:cc:
6d:9a:3e:1e:9e:24:62:2d:84:8d:6c:93:d5:3b:f3:
a8:e5:a4:75:64:cf:c4:4d:f7:af:dc:f9:ff:9a:7a:
f7:bc:d6:b4:19:16:2d:50:3b:d3:6f:ed:65:2f:3d:
ef:25:bf:de:2c:d5:28:6c:15:0b:44:51:1d:8d:b5:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:30:1D:6A:03:69:95:47:CA:66:52:54:A2:E3:D8:20:E5:E4:91
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/L-kwHWoDaZVHymZSVKLj2CDl5JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.137.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a9:a6:e0:a5:9f:ac:dd:4d:ea:d4:a6:88:cd:53:e8:7a:53:
f0:4b:9e:9e:f0:3c:86:cd:63:17:0f:e5:80:f1:6f:1f:61:2a:
81:ce:fb:ba:50:45:f6:a3:4c:09:07:bf:6b:ff:6b:e7:30:bc:
41:fd:d8:14:1d:85:17:ab:4b:2c:ef:2a:cb:1d:9a:8a:e4:82:
f9:51:02:eb:7f:59:29:50:1a:f9:bf:2a:14:53:b6:6a:9e:1f:
b1:23:e8:cd:60:5d:0b:de:e3:0e:c5:44:0a:a1:de:af:93:56:
a1:1d:9a:86:30:3b:f6:ce:45:96:a1:ff:4f:ba:56:c9:1b:d9:
1b:a3:cd:04:ac:73:a1:7a:53:92:15:41:bd:4e:a5:66:55:e2:
67:80:66:a6:1a:70:d4:b5:89:5d:b3:db:1a:de:77:ac:84:b1:
f7:10:1e:92:f1:6b:94:26:92:e6:8e:1e:6f:8a:cd:e0:0e:26:
28:5a:de:05:fb:56:29:00:c5:8c:20:90:de:41:ba:2e:06:d4:
8d:eb:53:39:b7:e7:4a:5e:9f:8f:6e:d3:28:d7:00:ad:7b:03:
67:c7:0f:76:a5:f8:3e:f3:30:62:98:1c:9b:7e:b7:0c:2c:1e:
2f:51:ba:ec:6b:c6:bc:df:61:bb:6b:5a:48:c3:39:ba:75:1f:
db:8e:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net