Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s9U1M_aqjru6hSEH1a69MoM3BjI.roa
File: s9U1M_aqjru6hSEH1a69MoM3BjI.roa (raw, json)
Hash identifier: YFYz4KQOZnIlFzYfz1SlAQa11dieGBgXhph1ySeyEQ8=
Subject key identifier: B3:D5:35:33:F6:AA:8E:BB:BA:85:21:07:D5:AE:BD:32:83:37:06:32
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C67097147057D3D90BB911E588139
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s9U1M_aqjru6hSEH1a69MoM3BjI.roa
Signing time: Thu 02 Jan 2025 09:50:25 +0000
ROA not before: Thu 02 Jan 2025 09:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24789
IP address blocks: 81.16.80.0/20 maxlen: 20
81.25.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:67:09:71:47:05:7d:3d:90:bb:91:1e:58:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d53533f6aa8ebbba852107d5aebd3283370632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:85:83:0b:c8:69:f5:90:34:bc:67:6d:e5:
6b:1f:1f:c7:f9:78:f7:57:03:11:b1:be:6f:06:87:
f1:89:4e:5f:10:86:d4:2d:69:3d:7a:1c:2d:fd:0b:
fd:bc:70:43:62:8f:cf:20:58:a8:af:53:b1:a8:70:
90:4f:09:39:9e:33:41:b0:1c:38:36:f0:e4:6a:df:
ae:a8:d9:11:98:54:e5:03:d6:ac:4d:fd:8e:fa:33:
41:84:2c:95:5e:8d:f6:7f:0a:59:a4:cb:ae:a5:c8:
23:38:56:51:20:5d:ca:bc:c4:a9:64:b3:e9:8a:11:
f7:65:d4:af:1c:99:9b:96:f4:61:10:71:bb:b7:d2:
8e:9c:7a:84:e2:07:ed:51:f1:36:20:7c:2e:d1:43:
6a:77:d2:70:77:9e:3d:ae:62:9a:28:e1:f0:2f:a5:
19:74:a3:dc:76:04:38:b9:9c:5a:1d:2b:1d:3d:af:
b0:06:6e:c6:6b:49:7e:74:2e:85:27:ba:06:28:b1:
2f:f2:80:69:b7:13:75:27:ec:d3:a2:53:0e:0b:11:
9e:c3:21:1a:9f:43:b1:f7:09:0f:9a:63:ab:de:87:
34:67:60:ae:bc:43:c7:50:f2:57:67:6d:10:4c:f9:
64:2c:45:95:17:f5:05:58:32:a7:d9:63:e7:d5:01:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D5:35:33:F6:AA:8E:BB:BA:85:21:07:D5:AE:BD:32:83:37:06:32
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/s9U1M_aqjru6hSEH1a69MoM3BjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.80.0/20
81.25.0.0/20
Signature Algorithm: sha256WithRSAEncryption
08:65:16:fa:e4:20:40:96:eb:fa:4a:61:f3:3b:58:06:29:a8:
19:cc:ed:6c:ae:f0:9f:0d:1b:bd:2a:c6:e4:fa:67:cf:f0:eb:
09:28:89:bc:8e:04:78:7d:da:71:c6:56:25:34:91:66:5f:7a:
95:10:23:f2:2b:85:ff:2b:37:9b:30:28:a5:c4:45:77:da:b7:
38:a8:73:70:e0:21:64:ab:2a:9f:fc:02:95:38:62:cb:f8:7e:
d2:e6:0c:81:18:52:1a:0a:a7:e1:cb:a1:ab:29:74:35:12:fb:
8e:6c:b2:92:9f:95:b8:2a:20:60:9b:fd:85:3a:d4:1f:e0:23:
47:a7:86:4f:eb:ca:3e:93:a9:41:5f:ba:bd:4d:4b:b8:32:81:
2b:36:4b:07:31:ba:a0:b9:88:37:5e:1f:33:1a:78:7d:f4:26:
f5:a3:51:c4:94:21:c5:be:5d:ff:b9:4f:f8:e1:c0:19:bd:04:
6b:86:c3:03:e8:5e:e7:88:33:e9:a4:23:a4:72:16:73:5a:a6:
53:32:33:2d:d0:4d:78:ae:44:12:83:e6:70:ba:48:22:b1:88:
e6:3b:ab:12:5c:09:b6:db:6f:2b:98:0f:40:14:28:e1:53:42:
42:8a:be:6d:95:32:60:ae:ab:48:45:e3:2b:32:48:ab:68:09:
c9:06:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net