Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_AnCIflcegi1TG_Bv_AnfepaFiw.roa
File: _AnCIflcegi1TG_Bv_AnfepaFiw.roa (raw, json)
Hash identifier: PoWkT5w8reeyRG+Mi9so0rpgs+gcKWwDhCVDFV2nfrQ=
Subject key identifier: FC:09:C2:21:F9:5C:7A:08:B5:4C:6F:C1:BF:F0:27:7D:EA:5A:16:2C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D1D6BDD29F528360C9543A9DC342
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_AnCIflcegi1TG_Bv_AnfepaFiw.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 81.29.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d1:d6:bd:d2:9f:52:83:60:c9:54:3a:9d:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc09c221f95c7a08b54c6fc1bff0277dea5a162c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:35:e5:4d:f7:59:be:d9:eb:ba:44:ab:de:
a3:9c:61:96:8c:0b:72:c9:50:cf:74:1c:a4:d9:dd:
3b:6a:4b:10:cd:e0:e6:1f:48:07:6b:d4:19:9d:95:
c7:2a:bc:25:ec:6a:98:50:b4:03:4e:47:da:f7:6e:
54:4c:06:6b:8b:c2:12:4e:09:0a:dd:96:d3:a5:ba:
67:b1:47:5e:ec:6c:3f:37:9a:9b:e4:85:a2:3f:c6:
1b:fe:a4:10:9a:d0:b3:cf:f8:81:f6:42:fb:82:0f:
3b:42:2a:40:f9:0f:9a:72:3a:9c:ae:20:c8:3f:b6:
c6:69:53:d7:d4:7d:20:3e:eb:58:f0:f8:a0:a0:b6:
c8:12:1a:8f:ea:ea:2f:ae:4c:d0:8c:fd:94:3b:7e:
ae:e3:03:39:26:32:2d:c3:dc:4a:73:61:23:22:5c:
b1:b4:c7:af:a4:37:ac:22:f2:de:84:ce:7d:f7:93:
9f:77:ca:fb:e8:95:87:cd:54:7f:fe:fa:73:0f:de:
f4:71:ef:6f:d8:bf:84:a6:93:5e:8b:27:f5:bd:26:
b2:a3:6b:f4:dd:f3:e0:8d:ed:a9:02:ec:5c:57:f0:
91:9d:40:f5:97:88:df:88:7b:ec:47:c2:bd:8c:24:
cf:a7:e9:d7:52:d3:7f:6e:93:5f:d0:21:99:d9:f5:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:09:C2:21:F9:5C:7A:08:B5:4C:6F:C1:BF:F0:27:7D:EA:5A:16:2C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_AnCIflcegi1TG_Bv_AnfepaFiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.152.0/24
Signature Algorithm: sha256WithRSAEncryption
91:93:57:d9:9a:fc:11:ed:c0:b0:b9:f6:ee:3a:f9:7b:f6:2e:
22:ab:e4:3a:04:e9:cc:b2:bb:a7:81:e5:de:be:4d:09:1a:d8:
22:08:00:bc:82:e9:36:1d:8e:6f:c0:23:9d:08:d1:ed:07:c1:
c4:f3:47:bf:15:d6:10:a0:1c:46:ca:fc:de:5e:46:a2:02:bf:
37:1b:f8:1d:b0:d8:d3:0e:a2:1c:13:80:76:0b:97:03:8a:26:
8a:44:1e:f6:17:e8:9f:76:b4:66:32:d4:73:e6:8f:e7:6e:cd:
2d:4e:f5:0d:1e:56:9c:48:9a:11:59:ad:35:e1:55:da:99:2f:
76:d0:36:30:d9:14:9e:40:1d:1e:f2:83:98:bb:f7:67:da:87:
83:cc:19:cb:20:5f:58:71:18:fc:59:76:39:d1:3d:35:15:66:
34:3a:70:08:29:bf:14:be:94:9a:9d:a2:79:d0:90:1a:1e:63:
4d:2a:d8:26:68:bd:d7:85:1b:04:62:b6:f1:45:d4:97:1c:31:
d5:19:66:d8:fc:e3:ea:bf:4a:0b:96:6c:65:2f:30:36:ab:8c:
15:9b:e3:32:03:18:a2:71:70:65:1a:d9:f2:1b:8e:26:53:c0:
1a:1a:27:d0:3c:cb:97:d9:16:2f:09:bb:af:35:12:bc:92:d7:
33:a6:1c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:27 2025 by rpki-client