Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4whsLuJSVX1QrWFzXY29njhhG_w.roa
File: 4whsLuJSVX1QrWFzXY29njhhG_w.roa (raw, json)
Hash identifier: hrsqlclJ3LXAaUivMEWLl8HMyQCN7m0yWWqc/1mLWmw=
Subject key identifier: E3:08:6C:2E:E2:52:55:7D:50:AD:61:73:5D:8D:BD:9E:38:61:1B:FC
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01961FB79B5D678E243DDB2FC5DFFFA5489F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4whsLuJSVX1QrWFzXY29njhhG_w.roa
Signing time: Thu 10 Apr 2025 12:40:48 +0000
ROA not before: Thu 10 Apr 2025 12:40:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.22.136.0/22 maxlen: 23
81.22.142.0/23 maxlen: 24
89.185.0.0/22 maxlen: 22
109.72.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:b7:9b:5d:67:8e:24:3d:db:2f:c5:df:ff:a5:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 10 12:40:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3086c2ee252557d50ad61735d8dbd9e38611bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:82:cb:94:12:9d:1b:64:e7:e6:5e:d8:bc:
66:44:96:5b:fa:73:a7:86:8f:4a:0a:73:a3:0f:0c:
59:d4:3d:7f:cb:af:bd:0d:1c:f1:6b:b2:f9:cb:44:
c7:ef:42:07:8d:fd:de:d5:03:58:d6:c1:22:1c:0e:
42:ae:3c:c5:24:cb:a7:09:cf:a3:bf:da:1b:20:27:
5e:2f:d7:67:4b:eb:01:67:95:a2:63:a3:94:4c:a2:
e0:0f:3f:13:75:3b:d0:01:94:37:13:4d:0d:dd:81:
4a:b9:f8:07:db:1a:01:f6:44:63:4f:23:1b:32:1a:
1e:6c:68:38:79:cb:b7:2e:9c:ea:70:1a:cd:51:a1:
9f:7d:ae:64:fe:15:d9:74:66:7b:5c:f0:b2:b6:a0:
01:b2:35:b5:f1:ca:a5:f1:70:d3:b7:33:d3:11:c8:
32:53:f8:75:0c:86:95:74:b7:4a:d2:4f:4b:39:92:
88:63:c8:2c:c9:e0:81:e1:59:17:cd:c0:7f:8a:39:
73:50:3f:ff:0d:2c:40:11:c1:73:38:30:7e:6a:c3:
d4:c7:44:ac:a6:96:d6:67:c7:4a:5e:d6:5d:01:7d:
3c:2e:ac:b1:a2:9f:91:0e:cd:5e:52:ec:b9:5b:0f:
e6:68:5c:70:93:21:b0:9a:91:e6:a8:64:26:05:f2:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:08:6C:2E:E2:52:55:7D:50:AD:61:73:5D:8D:BD:9E:38:61:1B:FC
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/4whsLuJSVX1QrWFzXY29njhhG_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/22
81.22.142.0/23
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
91:51:90:06:1c:c5:69:67:1a:d3:b9:95:98:b3:6f:6b:8c:9e:
03:50:33:ea:c0:1f:10:91:37:06:03:bf:77:24:0d:a0:af:64:
b6:6d:41:f0:41:f8:c7:e0:a1:09:65:ad:41:8d:fe:43:3a:43:
07:55:f8:50:a4:86:f6:2e:5b:3c:1f:51:96:cd:f9:9e:cd:7e:
3b:3d:c5:e4:52:97:41:3f:c4:be:ec:de:36:24:61:d9:c2:14:
ff:3c:0d:47:75:3a:1b:d5:26:75:36:9a:6b:da:3a:6e:11:31:
24:5d:07:c2:d3:c6:c0:a6:46:64:73:84:bc:02:1a:16:6b:41:
80:39:ed:6d:dc:ff:c4:f1:b3:be:01:b0:21:68:85:0d:84:f8:
fc:7d:db:8e:4d:bd:16:75:ae:28:41:c4:a2:2e:18:55:9d:e9:
35:39:41:36:cb:fe:5c:5b:82:ea:90:a1:c2:3c:d4:6d:7c:a1:
15:fb:9c:84:01:63:15:bc:e7:74:70:71:05:75:77:de:a5:8d:
4d:6e:49:a5:7c:b3:71:22:c5:4c:72:70:77:d9:48:fe:a6:7a:
dd:29:2a:a5:db:a3:72:67:fb:a7:91:de:c4:cf:20:15:90:84:
31:ba:19:60:4b:23:af:df:ca:95:b2:84:c1:8a:b4:1a:07:e9:
64:27:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net