Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/pzO_vf4S85qGYsEOeaoc-NqBUG4.roa
File: pzO_vf4S85qGYsEOeaoc-NqBUG4.roa (raw, json)
Hash identifier: dQpCMi5DIsAy32ym2T+shCsk+2yMX+WZ0xQ8KadnYks=
Subject key identifier: A7:33:BF:BD:FE:12:F3:9A:86:62:C1:0E:79:AA:1C:F8:DA:81:50:6E
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 019425213CD6F014A4A209BA477DD5137741
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/pzO_vf4S85qGYsEOeaoc-NqBUG4.roa
Signing time: Thu 02 Jan 2025 03:48:42 +0000
ROA not before: Thu 02 Jan 2025 03:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204528
IP address blocks: 81.199.15.0/24 maxlen: 24
81.199.20.0/24 maxlen: 24
81.199.94.0/24 maxlen: 24
81.199.97.0/24 maxlen: 24
81.199.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3c:d6:f0:14:a4:a2:09:ba:47:7d:d5:13:77:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 03:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a733bfbdfe12f39a8662c10e79aa1cf8da81506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:4d:2f:e9:9c:99:8c:3e:47:1e:dc:1b:58:
fe:26:94:72:4f:d9:3b:48:2f:44:a5:e6:f9:57:bf:
37:a0:7f:9f:02:b2:64:06:ce:3e:2f:3d:34:b6:af:
9f:2b:cb:7f:6a:70:ce:e1:d8:f6:c7:3b:79:f9:d9:
e3:3e:48:06:be:ee:77:0d:a4:45:c5:50:ae:c6:f5:
b6:53:ad:7c:82:3b:93:96:40:48:51:83:d8:de:06:
b5:4f:38:c3:d6:7d:ae:58:c6:b2:f6:26:fb:0c:da:
5a:da:5c:65:e5:cc:25:7f:27:aa:f7:0e:30:a0:da:
0a:21:9c:ed:0e:18:a5:01:29:1d:2a:4e:01:26:80:
5a:00:11:32:08:fa:80:4c:22:11:a8:bc:45:7a:84:
24:07:82:a3:1b:b8:73:b0:d9:68:68:3d:22:01:3c:
49:bb:e5:e0:71:38:2a:c7:6b:fb:ba:6f:9e:a4:b7:
0a:72:6b:82:51:00:20:3f:a0:44:c1:35:c6:ed:ce:
dc:df:8d:54:31:d2:65:94:83:d6:59:13:b9:49:a8:
47:d9:68:21:32:c2:d1:bb:b8:5c:9e:7c:6f:37:6c:
e8:e0:5a:73:da:41:ff:75:23:44:86:eb:c8:e5:0b:
67:36:17:2b:12:99:0b:b2:cc:74:a6:c6:86:b4:f8:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:BF:BD:FE:12:F3:9A:86:62:C1:0E:79:AA:1C:F8:DA:81:50:6E
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/pzO_vf4S85qGYsEOeaoc-NqBUG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.15.0/24
81.199.20.0/24
81.199.94.0/24
81.199.97.0/24
81.199.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bb:9e:18:73:9c:79:ec:34:be:8d:1f:ba:9d:43:69:de:55:
51:c5:c1:13:d7:15:04:36:25:47:8b:fb:37:f7:2c:00:0b:ea:
51:e6:63:b0:f0:b2:52:51:78:db:88:e8:58:98:51:a3:e0:56:
53:07:b4:50:fe:17:6c:9f:46:96:92:82:3c:ef:90:2d:93:a1:
7a:45:53:48:0e:93:5d:81:94:90:8b:ee:10:48:47:19:12:53:
d7:51:71:c4:44:17:97:61:15:71:56:c7:ee:27:b8:ee:0b:d1:
ef:bf:82:77:5d:1f:f5:ba:06:c2:c8:f9:87:27:e8:13:fc:ad:
83:b2:da:a3:73:db:83:65:dc:d9:b6:d9:11:91:a0:ce:09:31:
54:93:d8:2a:69:b6:c0:1e:e5:a2:af:17:7b:78:91:2b:81:43:
18:c8:e5:e4:8e:c0:2d:0a:f2:3f:86:fe:36:1a:05:9e:25:60:
ee:8c:6c:30:60:4f:53:a1:ae:fd:de:93:9b:e7:3d:26:ae:1d:
16:fd:19:56:c6:97:52:68:ec:b0:8d:04:50:76:b2:e4:77:71:
31:55:7b:62:b9:c5:e3:e4:7d:8f:83:d7:a1:20:09:ca:e8:49:
c7:bc:34:b5:ab:f2:4e:3f:b6:f2:0a:85:24:4a:bb:07:77:3c:
b4:90:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:09 2025 by rpki-client