Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/919zV4Y9DazNzxZ8240IKYUxVZg.roa
File: 919zV4Y9DazNzxZ8240IKYUxVZg.roa (raw, json)
Hash identifier: SgKOoYJQQGxdCU9fxEK7dNUsdZIPS3r//BxGFPu0GyQ=
Subject key identifier: F7:5F:73:57:86:3D:0D:AC:CD:CF:16:7C:DB:8D:08:29:85:31:55:98
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0194266C411E3641B45B6E1FC1F48CFF669A
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/919zV4Y9DazNzxZ8240IKYUxVZg.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213205
IP address blocks: 81.163.209.0/24 maxlen: 24
81.163.213.0/24 maxlen: 24
81.163.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:41:1e:36:41:b4:5b:6e:1f:c1:f4:8c:ff:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f75f7357863d0daccdcf167cdb8d082985315598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:87:67:69:78:63:56:0d:94:36:74:35:27:
09:e9:09:66:94:95:1e:95:ca:30:a4:a8:ba:e1:34:
cc:e3:1d:cb:85:32:48:0e:67:b9:90:0c:c9:16:2f:
80:38:13:e9:52:f1:67:3d:79:25:00:f6:71:56:49:
d9:19:a8:41:99:ca:70:ec:04:84:2e:8a:e3:9b:3e:
fe:5b:1d:1f:1d:99:24:4c:0d:d7:1f:7b:4a:86:e4:
21:41:ae:46:15:1c:43:82:c8:44:dc:bc:8b:ce:23:
69:be:80:7e:98:a9:de:50:de:f5:a3:89:ad:02:07:
09:ed:a1:70:e5:e0:8d:88:29:10:2e:a8:30:2f:b6:
1c:5a:c9:c2:38:a7:2a:d3:ff:3c:d2:03:fa:6d:0f:
f2:4c:0a:de:64:36:67:ef:95:dd:c6:87:84:31:68:
e2:fa:6c:00:f2:f6:f9:f5:40:49:14:59:d7:d9:a2:
b2:e3:a9:a2:a0:bd:c1:35:a6:9f:e4:ad:5c:d3:bc:
e8:92:25:cc:f5:65:68:8f:fb:60:e9:f5:3b:72:f8:
13:8a:91:da:e6:13:e0:e3:7b:55:72:a9:0b:45:92:
7a:a1:85:1e:79:d3:a0:ce:2d:33:fa:e5:ad:54:70:
2e:12:6b:3a:2d:a1:cc:c8:68:cc:08:6b:2f:1e:23:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:73:57:86:3D:0D:AC:CD:CF:16:7C:DB:8D:08:29:85:31:55:98
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/919zV4Y9DazNzxZ8240IKYUxVZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.209.0/24
81.163.213.0/24
81.163.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3c:b8:9b:e0:22:bb:a3:00:f3:b9:a0:25:60:88:94:d4:c7:
6e:88:c4:06:54:2c:e0:f2:41:3f:f5:51:5f:b2:e0:ca:8e:bb:
54:c9:6b:3e:55:72:c7:e3:26:1e:f7:17:80:ab:7e:d6:19:f4:
fe:6a:3d:18:e3:3f:0b:78:df:21:e6:a4:46:b4:bd:15:27:c0:
85:1a:6c:04:3f:0b:85:24:65:7b:6a:5f:45:df:12:4b:8a:ac:
3d:b5:db:c5:f1:98:95:2b:a7:f1:a2:26:99:6c:c4:96:a0:5f:
52:c7:72:ae:c9:64:f1:77:9f:8c:65:1c:82:69:ac:43:df:fc:
e6:0e:b0:5e:53:8c:d7:51:88:22:80:f0:2e:68:fe:78:66:6e:
1c:9b:04:57:4f:3d:aa:8e:72:ca:31:0a:ee:17:d3:39:4d:1b:
f1:b6:82:48:a3:85:5f:d8:3f:dc:0b:b4:66:50:c2:47:19:50:
3f:a0:68:dd:34:1a:09:7e:9e:fd:9b:d9:bb:57:1c:be:56:06:
05:15:d0:81:1e:af:eb:52:d4:71:4e:85:9e:a4:24:5a:1e:61:
8f:e2:a8:ca:8b:ca:fe:40:b4:74:05:9b:0d:33:e5:6b:c1:b0:
cf:8d:95:7e:56:05:ea:4d:3b:40:c6:a2:97:b3:65:4b:d2:ca:
63:3a:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:18 2025 by rpki-client