Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/8kEGARq1oWXNQZ9AMPKqoxNhvI0.roa
File: 8kEGARq1oWXNQZ9AMPKqoxNhvI0.roa (raw, json)
Hash identifier: VaveED7M0J6fryhAcZkmIoaj4zTiuC0PQLiRp5qYILo=
Subject key identifier: F2:41:06:01:1A:B5:A1:65:CD:41:9F:40:30:F2:AA:A3:13:61:BC:8D
Certificate issuer: /CN=354479e9b5a1786e6e87407ae9dde511779a507f
Certificate serial: 024141D3
Authority key identifier: 35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUR56bWheG5uh0B66d3lEXeaUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/8kEGARq1oWXNQZ9AMPKqoxNhvI0.roa
Signing time: Thu 17 Mar 2022 15:11:27 +0000
ROA not before: Thu 17 Mar 2022 15:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.161.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37831123 (0x24141d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354479e9b5a1786e6e87407ae9dde511779a507f
Validity
Not Before: Mar 17 15:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f24106011ab5a165cd419f4030f2aaa31361bc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:04:ff:5a:e0:8f:cb:d1:e0:7d:ae:92:87:
02:38:9b:98:c8:08:aa:e6:d6:40:62:cd:3a:4d:7c:
54:b0:19:5b:11:96:d2:2b:b3:a1:cc:eb:97:06:e7:
12:cb:dc:c0:23:5c:6e:96:d3:f3:cb:b5:19:a0:a8:
85:23:b7:fb:db:c8:e7:04:a7:78:13:a8:76:6b:79:
36:39:a9:ef:cc:51:2e:e8:5d:b3:f4:09:d4:da:a2:
d8:fc:e9:c4:4c:8d:4a:db:e6:74:c1:7c:6d:cb:4c:
00:2e:90:17:66:bf:de:5b:cd:c2:ce:c8:cf:5d:a2:
a2:34:7c:e1:07:e8:76:0f:37:fa:fe:8a:61:63:9c:
7b:15:7e:c8:63:2d:d9:f6:d4:f2:cf:b3:d6:c4:b1:
1a:cc:6a:c4:23:02:c3:43:b1:cd:a3:fe:46:fc:b4:
6b:e6:84:d7:e6:ad:22:92:e0:b0:ac:d5:45:bd:a5:
80:7c:fc:1f:22:3e:c4:b8:57:80:00:28:b0:73:64:
ae:46:bc:19:6f:17:98:80:ef:d3:6f:94:72:c4:2f:
b5:c4:77:8a:81:f6:f1:d4:44:cb:5e:6e:90:2d:18:
7d:51:22:9c:47:32:38:a2:e8:6a:32:dd:f2:78:53:
ac:90:b4:38:00:57:4a:bc:7b:50:4e:86:dc:22:4c:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:41:06:01:1A:B5:A1:65:CD:41:9F:40:30:F2:AA:A3:13:61:BC:8D
X509v3 Authority Key Identifier:
keyid:35:44:79:E9:B5:A1:78:6E:6E:87:40:7A:E9:DD:E5:11:77:9A:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUR56bWheG5uh0B66d3lEXeaUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/8kEGARq1oWXNQZ9AMPKqoxNhvI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/dad716-1871-46ab-8f70-491b6368fa40/1/NUR56bWheG5uh0B66d3lEXeaUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:88:eb:ec:51:5e:9c:70:a2:48:0b:93:6f:b3:b6:51:88:aa:
6d:d4:82:f2:83:83:a4:34:27:01:64:9b:d1:b8:ce:ec:be:cd:
98:63:35:da:6a:ab:d4:51:c4:e2:e3:81:bf:06:72:de:25:fc:
aa:d2:8c:3e:c1:68:5c:eb:6f:c8:b8:05:8e:67:0a:00:70:7f:
fd:6f:7e:cd:63:92:ee:eb:31:09:e0:d7:3c:83:51:24:67:15:
26:e6:9b:ce:bc:bf:84:b0:86:14:1d:4f:f7:fd:bb:01:16:66:
b4:f2:ee:32:63:93:f9:f4:9e:88:6a:a5:e2:ea:76:4c:90:56:
b7:73:b4:c8:1e:33:9b:fa:a0:f0:38:12:ad:e8:2b:2c:60:b1:
7c:ca:bd:a3:9e:fe:a1:3c:db:45:26:b0:ae:fb:d1:88:f7:07:
eb:10:b9:47:f5:29:ac:c5:f1:68:8c:b6:42:ae:ea:5f:79:44:
f7:69:32:f8:46:25:ae:02:ba:4f:d5:4a:18:35:5b:42:f2:7f:
19:ad:b4:8c:9f:df:ef:db:6f:6f:95:a2:8c:86:af:98:35:0f:
26:b6:cc:43:6e:96:5c:cb:65:f9:8d:36:d1:26:d4:a4:f6:b6:
71:68:8c:9f:99:71:64:59:16:c5:71:61:fa:07:42:7a:ad:fb:
f5:9b:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:26 2025 by rpki-client