Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/8IEvzDRKV8FUmQ7aId5ty6Ov_PY.roa
File: 8IEvzDRKV8FUmQ7aId5ty6Ov_PY.roa (raw, json)
Hash identifier: I32uleE4Av8XgX83NqfWdh3aihxwYbG5ZyiK9uOIWlM=
Subject key identifier: F0:81:2F:CC:34:4A:57:C1:54:99:0E:DA:21:DE:6D:CB:A3:AF:FC:F6
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01942520869078A0833C52048279225B17BB
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/8IEvzDRKV8FUmQ7aId5ty6Ov_PY.roa
Signing time: Thu 02 Jan 2025 03:47:56 +0000
ROA not before: Thu 02 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 81.30.103.0/24 maxlen: 24
2a13:ae00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:86:90:78:a0:83:3c:52:04:82:79:22:5b:17:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jan 2 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0812fcc344a57c154990eda21de6dcba3affcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:d1:6a:3b:5d:3a:8a:12:36:fa:61:d3:0a:
79:a4:e5:1e:c2:44:f3:50:4a:5c:a8:1b:cf:dd:71:
39:c0:4b:c3:f5:f9:a6:7b:55:d0:a7:e5:11:0e:b0:
34:34:4c:fa:22:5e:ef:ef:18:5b:8a:1a:18:5b:05:
e3:41:79:7b:9d:75:66:94:cb:61:1d:38:c3:db:5f:
1c:83:35:bb:31:db:22:00:6a:9c:d5:1f:d7:ac:2b:
1a:18:8e:93:bc:fa:7a:e4:b6:ce:5e:d3:14:1a:d9:
0d:a4:99:54:72:a5:43:78:f6:ee:fb:87:22:11:9c:
5d:47:65:76:f2:ce:40:0f:b0:43:b6:dd:d7:db:ba:
b8:66:c8:bb:e3:48:21:70:c3:22:22:a3:4d:18:0a:
2b:ba:e0:f2:0e:c8:36:21:7b:15:7f:2e:f6:52:29:
f7:aa:55:52:80:ce:50:23:a7:a6:3c:93:9c:fa:11:
59:56:34:d1:50:60:5b:ab:8e:d8:8e:17:a5:de:37:
d7:fe:48:67:29:8d:dc:f5:50:7d:dd:41:ed:98:7b:
47:11:15:e7:d5:41:97:bd:cd:23:d1:6f:ac:21:d3:
17:8f:c0:77:1a:5d:41:78:fc:2f:6e:9b:d3:1e:28:
61:18:68:e8:24:82:a3:ae:b7:b6:be:ca:13:e2:01:
df:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:2F:CC:34:4A:57:C1:54:99:0E:DA:21:DE:6D:CB:A3:AF:FC:F6
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/8IEvzDRKV8FUmQ7aId5ty6Ov_PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
IPv6:
2a13:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
53:6b:9a:6b:86:95:9e:60:8e:41:5b:22:af:41:4f:ab:a2:af:
10:03:de:46:b6:47:34:5b:ea:fe:52:5c:01:df:7c:a1:13:20:
e8:c6:b9:f8:1d:55:72:e7:5a:07:cd:53:35:01:de:f0:70:c2:
ec:e9:13:99:74:41:d5:64:c1:48:87:9f:00:fa:0c:a3:1d:11:
ca:bd:00:ed:49:3d:74:40:8d:31:f6:40:42:fe:5c:fc:50:d3:
b4:80:1d:1f:a2:97:82:04:8e:9f:e7:bf:f2:80:4c:e8:d8:2a:
ee:dc:d1:a9:cf:ac:ab:6c:ad:35:73:1f:5e:c5:12:68:ab:85:
18:7b:fd:5a:23:04:71:8d:32:56:22:98:de:da:a0:d4:e6:6a:
23:33:80:af:8c:19:da:2e:bc:3d:ad:c5:d4:81:d1:e7:cc:0e:
08:88:be:ed:35:13:65:8b:88:6c:1f:54:07:00:6e:a4:15:65:
67:95:07:c8:9c:64:aa:50:65:a8:9b:c6:55:ca:4b:c7:21:70:
7b:d9:7c:56:ad:09:e4:57:f3:3f:a6:95:53:0e:fa:ea:f2:cc:
f7:61:d4:91:67:5e:48:26:cd:3f:3f:3f:52:f1:6a:fa:e1:b5:
6d:c4:e6:44:b4:9a:3e:6a:40:b6:5d:88:f4:71:fc:f9:6b:59:
78:e3:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:55:07 2025 by rpki-client on console.sobornost.net