Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa
File: N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa (raw, json)
Hash identifier: kLrijD9G/R0cMvtLz3nwtkgshfFFxhgBoeVfEmhz0ZI=
Subject key identifier: 37:BE:FE:36:0D:C0:14:7E:BE:D5:A1:C2:9C:C9:40:70:DF:8B:00:75
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0194266C3FC8DC44D9F521926AC01B4CE41D
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51273
IP address blocks: 81.163.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3f:c8:dc:44:d9:f5:21:92:6a:c0:1b:4c:e4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37befe360dc0147ebed5a1c29cc94070df8b0075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:3e:72:0d:f5:9e:28:3e:11:f8:fe:d9:d3:
22:1f:3f:13:08:16:5d:ab:8c:8e:de:6d:db:39:f9:
cb:86:45:e8:82:ae:cc:a8:aa:d4:e1:a1:61:e5:62:
e8:22:5b:e7:4a:ae:9f:0f:f8:f5:ec:ce:25:0f:69:
c7:4f:7f:2d:c8:bb:a5:d0:4e:f7:ef:5a:de:11:64:
75:5e:61:c2:a2:cf:08:42:6e:16:15:0d:50:67:c8:
98:b5:d5:12:f4:ed:40:99:83:56:18:41:a9:51:d2:
8e:52:64:8c:37:9a:1b:86:5f:5d:67:27:01:1c:95:
44:88:1f:ee:22:c2:80:95:c8:d0:55:a4:bd:76:0e:
7c:a5:2f:a3:3a:4c:c6:ad:3f:43:0e:92:3b:62:52:
b1:c5:ce:fa:c0:dc:9d:02:5e:30:85:04:2b:e5:61:
3b:5c:cc:35:2d:13:ee:f7:c8:c7:21:3d:1a:25:03:
d1:b1:86:d3:70:8a:d2:f1:b9:25:ce:c7:f9:40:87:
7c:9e:3f:53:d7:18:b9:07:a5:fa:ad:75:29:df:9b:
29:d4:ab:8d:a3:69:8f:0a:78:ae:1e:6a:60:c2:99:
a2:b0:ec:4a:a9:17:00:50:92:8d:53:72:54:cf:d1:
51:52:63:10:a7:f9:e7:2a:cb:38:5f:d4:6e:06:bd:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BE:FE:36:0D:C0:14:7E:BE:D5:A1:C2:9C:C9:40:70:DF:8B:00:75
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/N77-Ng3AFH6-1aHCnMlAcN-LAHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.212.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f7:ee:17:9a:40:04:00:b0:ce:e3:80:64:e8:38:c4:77:1a:
96:c2:77:51:be:41:12:b3:32:04:17:eb:9e:f7:5d:02:22:f7:
f9:25:68:d0:17:e7:63:5f:16:1e:b0:56:36:3d:13:f3:f4:87:
09:4d:67:06:2e:08:23:f8:b8:0c:86:16:12:e5:62:ca:48:fc:
65:78:7c:f2:15:bf:82:f7:38:c4:11:07:34:6e:6b:f1:52:72:
66:c3:1b:ff:03:ee:95:e7:7c:5e:1c:52:ba:f8:62:35:ec:8f:
c0:8e:51:79:89:a4:49:08:3b:72:f1:dc:d4:34:1d:96:50:87:
9a:7e:80:55:25:49:72:76:61:ba:50:63:a5:8b:7a:27:6a:7b:
02:4f:d7:56:93:57:3d:fc:a5:50:3d:98:72:72:f0:39:db:66:
60:63:eb:23:48:11:39:24:a2:a2:8b:83:c0:4e:59:3c:dd:ce:
96:71:0a:e9:41:1f:8c:5a:15:10:db:5e:04:a5:cb:cf:de:34:
2f:5a:a2:3c:89:f6:67:cd:1c:c7:0f:26:6a:f6:dc:fc:40:d9:
b4:c8:fb:b2:23:99:14:f4:f3:44:8f:f6:7e:27:ba:d9:b0:d6:
47:9e:4b:7a:cd:bd:8b:4b:23:b7:7f:87:ab:1d:55:54:b9:26:
97:d9:e6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:37 2025 by rpki-client