Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Th8v15t62SB9VgOcqDeNWYsSJOI.roa
File: Th8v15t62SB9VgOcqDeNWYsSJOI.roa (raw, json)
Hash identifier: r9/1Hq91YO7YieSeWR3pndFVFPPTy9kDkDfsP3MUhv4=
Subject key identifier: 4E:1F:2F:D7:9B:7A:D9:20:7D:56:03:9C:A8:37:8D:59:8B:12:24:E2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019624B7B07EC3733BECC5FB602D1D848E35
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Th8v15t62SB9VgOcqDeNWYsSJOI.roa
Signing time: Fri 11 Apr 2025 11:58:59 +0000
ROA not before: Fri 11 Apr 2025 11:58:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 82.153.218.0/24 maxlen: 24
89.213.206.0/23 maxlen: 24
213.218.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:b7:b0:7e:c3:73:3b:ec:c5:fb:60:2d:1d:84:8e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 11 11:58:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e1f2fd79b7ad9207d56039ca8378d598b1224e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:76:23:4d:47:28:58:7e:28:63:f2:86:5f:
14:97:ae:9c:eb:b0:ac:ae:d9:ee:a3:2f:5a:55:32:
6d:7b:74:50:76:77:ce:d1:1f:7b:9f:c6:76:01:8e:
c4:7d:99:ca:91:77:6e:cc:05:3f:b8:7f:c6:79:4e:
4e:ba:cc:5b:4b:76:d2:01:22:b7:e9:08:7b:6d:49:
fe:61:a1:76:5a:a6:6d:3f:16:a3:6b:be:56:db:d1:
d1:5f:ff:d6:8b:3e:13:5d:8e:37:28:da:22:0b:d2:
5b:fe:30:27:16:f9:f6:32:66:2c:40:d7:60:1c:91:
8e:fa:34:49:a7:6b:1f:ea:7d:3c:a6:9c:9f:40:bd:
51:2d:ee:39:51:ae:34:80:1b:09:91:5e:b0:7c:b5:
65:e9:75:c8:2e:18:6b:62:a6:bd:b0:6e:b8:fb:53:
28:0b:cd:fe:d1:ec:27:5e:7f:bd:b4:5b:45:c5:2d:
8a:95:ab:ca:79:80:e4:34:0e:3e:ba:fc:5c:bc:82:
35:a2:36:d5:ff:c6:82:1b:86:08:ed:8b:aa:27:7a:
74:a1:72:f2:ea:54:dd:2e:54:78:d6:ae:9c:3c:10:
80:fc:a6:ac:75:2d:d6:5b:00:c6:e8:d8:7d:e3:8b:
e1:82:3f:fb:04:a4:2c:56:7e:8e:92:48:9b:4f:0c:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:2F:D7:9B:7A:D9:20:7D:56:03:9C:A8:37:8D:59:8B:12:24:E2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Th8v15t62SB9VgOcqDeNWYsSJOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.218.0/24
89.213.206.0/23
213.218.215.0/24
Signature Algorithm: sha256WithRSAEncryption
42:90:35:c3:ea:6c:c0:4d:08:df:2f:50:b5:f1:b1:f1:c1:95:
fe:94:6c:28:20:41:e3:6a:39:ab:b6:49:26:b3:ac:cd:40:c9:
e9:b3:6f:9b:d5:0b:4d:58:ca:54:9c:da:5f:56:2a:81:cb:ef:
8a:eb:e5:ec:55:8f:98:81:56:69:31:90:6a:da:d2:f4:22:af:
78:ad:8c:49:a7:ca:7f:b8:40:a1:4d:32:0d:c8:48:16:ba:9d:
76:6e:68:98:e1:9a:03:84:60:0f:fb:f6:6a:70:7c:51:de:81:
d1:59:1e:6f:50:87:32:0a:dd:ee:40:a7:ee:34:b8:34:84:99:
3a:c9:12:e6:40:45:f3:83:f2:fc:8c:31:67:5a:a6:67:f0:84:
81:8c:a9:03:f6:d2:32:56:fd:fd:a6:57:71:49:10:94:30:d2:
27:ba:e5:3f:3e:3c:57:46:37:09:c9:ce:e9:cb:2f:86:5f:93:
b5:95:f5:e5:54:83:e1:15:1f:3c:27:a5:0c:c0:a7:b0:f3:f8:
a3:91:36:70:b6:9a:22:56:06:84:5c:69:5f:5d:62:27:78:11:
54:9e:39:a8:a7:9a:30:38:01:b9:30:4e:07:c1:f6:2a:59:22:
e9:ae:36:25:29:6a:41:f0:e4:c4:20:a9:fd:4e:a6:a4:eb:24:
30:15:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net