Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/963pl4kMqERhlH5zQNINJ9q-oB4.roa
File: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (raw, json)
Hash identifier: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=
Subject key identifier: F7:AD:E9:97:89:0C:A8:44:61:94:7E:73:40:D2:0D:27:DA:BE:A0:1E
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019423699BCD65166D8BD4EAE2C9D42F1C9D
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/963pl4kMqERhlH5zQNINJ9q-oB4.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200094
IP address blocks: 81.21.206.0/24 maxlen: 24
185.73.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9b:cd:65:16:6d:8b:d4:ea:e2:c9:d4:2f:1c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7ade997890ca84461947e7340d20d27dabea01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:7c:0d:db:f0:a6:9a:3e:fc:3e:41:84:c5:
b7:8a:85:fb:28:18:7d:76:6a:f6:ac:b5:46:eb:0e:
17:8f:df:4f:0a:8a:74:7d:02:b4:7a:79:6c:28:f5:
b2:9e:af:de:bc:60:ea:01:cd:c4:7b:33:68:f5:a7:
fe:d2:2f:c5:c4:2e:d2:be:7a:84:44:71:3c:7a:54:
7d:76:ab:12:6c:92:4f:19:90:f9:2c:0c:dd:8b:61:
1b:12:ab:00:a2:c6:07:01:62:41:27:d4:74:3c:db:
9e:4a:b7:28:d0:db:06:93:b7:c0:14:c1:cf:b0:04:
4c:07:5f:6a:1f:7c:b6:59:61:e8:05:62:95:14:14:
d2:6f:47:5a:17:57:5c:cf:ca:91:14:7b:3b:c3:1e:
22:f6:25:61:60:09:c9:3a:7c:1a:e5:7a:55:bc:4e:
5e:b6:24:e4:0f:ae:81:b4:c3:b3:52:ed:ca:30:18:
3b:10:59:02:35:4d:5a:21:55:a3:f7:5b:82:c7:ce:
6b:a8:6d:05:e1:33:b1:a1:f8:ca:90:c6:5b:f6:05:
45:df:d0:a1:90:06:a8:96:54:74:ec:30:9f:72:d7:
ef:ad:07:a4:c1:4e:37:3d:e0:a8:ff:b6:5f:73:39:
18:f4:e8:81:d3:5e:8a:50:c1:ba:77:92:59:b8:db:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AD:E9:97:89:0C:A8:44:61:94:7E:73:40:D2:0D:27:DA:BE:A0:1E
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/963pl4kMqERhlH5zQNINJ9q-oB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.206.0/24
185.73.60.0/22
Signature Algorithm: sha256WithRSAEncryption
61:7f:ec:9e:a2:56:7e:d9:ff:7a:3f:38:b2:80:d4:fd:c7:4d:
3d:ab:e9:03:87:5a:65:cd:19:af:3d:62:15:e0:18:b6:6d:3c:
4f:f8:5e:5c:5d:63:5b:ae:82:f9:e3:de:e5:fe:34:9b:2c:d1:
98:a8:af:85:c3:00:c7:ba:5d:20:35:42:94:8e:e8:f6:36:18:
4a:5b:ff:f0:81:4e:aa:03:2f:2c:3b:f4:a7:45:e6:71:3d:52:
1a:44:19:67:9b:7e:62:de:af:6e:28:9f:ad:f4:f5:ac:39:01:
fe:d2:5a:3a:63:76:c0:c0:78:be:1b:37:dd:f5:3d:e7:fa:ca:
f1:7e:7c:f5:89:c5:b6:4f:9d:cc:a5:fe:90:67:9a:5b:eb:31:
a8:31:5b:55:c1:e9:ea:5e:ec:78:65:f2:ef:4c:36:23:27:e5:
99:0f:0f:c6:94:49:82:2d:7e:fb:0d:3d:20:b8:1d:ab:19:5f:
83:a1:00:37:73:ac:f3:e0:b3:fd:37:d8:9e:86:18:fe:43:bd:
7b:05:2a:dc:a6:2c:65:0f:8b:5e:4b:3a:45:24:cf:ed:38:ba:
4a:33:05:3b:bf:5a:e1:4b:d6:bf:0a:84:96:22:e9:4c:ee:f7:
40:b6:60:55:56:df:b0:61:2a:ac:d0:b9:1f:c1:df:3d:3e:cf:
e0:4f:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:27 2025 by rpki-client