Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/njDEZbySu24l3-7pqiEP7cKTkYk.roa
File: njDEZbySu24l3-7pqiEP7cKTkYk.roa (raw, json)
Hash identifier: sJSOzcEBtzhJa/6Rsm70KNeiGLuydqUWSSlaAXnP8xU=
Subject key identifier: 9E:30:C4:65:BC:92:BB:6E:25:DF:EE:E9:AA:21:0F:ED:C2:93:91:89
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 0194266C4073E246F006D9FA4E8CEB82FFA7
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/njDEZbySu24l3-7pqiEP7cKTkYk.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57242
IP address blocks: 81.163.211.0/24 maxlen: 24
81.163.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:40:73:e2:46:f0:06:d9:fa:4e:8c:eb:82:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e30c465bc92bb6e25dfeee9aa210fedc2939189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:f1:e0:19:dd:0f:a9:d2:e8:54:d9:52:f9:
3a:66:ea:43:d1:8c:da:a8:77:73:2a:20:a1:af:70:
70:20:1d:bd:7e:16:df:a2:e5:07:46:35:d8:ca:f4:
76:4c:9f:6b:e0:6d:ab:ed:b0:86:1f:1f:6d:d9:ed:
ca:62:0c:ba:68:54:ea:3a:98:26:2c:ed:65:b5:c0:
b9:9a:6a:10:a2:f9:97:d9:c0:b1:c3:c1:85:85:ee:
6c:31:e7:04:94:6b:f2:e6:ca:40:7b:1d:40:b6:a4:
d6:a6:6f:44:70:cd:17:80:1c:3a:03:77:24:ce:3d:
22:99:25:bc:27:ad:51:82:c9:fa:0b:80:96:b3:48:
55:dc:1f:b3:8b:5b:50:74:6f:9e:a9:8e:98:80:5a:
3a:73:e5:be:2c:a1:50:44:4d:95:59:a7:88:51:ea:
4f:09:d3:7d:dd:69:b9:8b:5b:05:b0:2c:6c:41:45:
50:0b:c8:30:de:4e:31:14:2a:e2:0d:03:e9:f3:d2:
2b:17:73:d8:86:ce:3a:27:1f:50:de:6e:28:65:99:
76:38:41:fc:2c:43:53:23:1b:46:4e:03:28:30:50:
7f:e9:54:8f:ab:f2:7a:62:92:f6:58:d6:e3:1a:51:
84:32:b0:4c:8d:fa:e2:83:46:9f:f4:3e:fa:ae:9e:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:30:C4:65:BC:92:BB:6E:25:DF:EE:E9:AA:21:0F:ED:C2:93:91:89
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/njDEZbySu24l3-7pqiEP7cKTkYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.211.0/24
81.163.214.0/24
Signature Algorithm: sha256WithRSAEncryption
65:85:1c:ff:31:ea:71:29:a5:91:63:4c:91:d2:f3:7f:ff:1d:
3e:be:55:d2:70:69:b7:78:b5:68:ca:90:58:64:ee:26:14:7c:
dd:48:0a:f5:b0:32:34:b2:69:56:c7:63:c1:ac:3b:ea:eb:a6:
73:7b:c7:c9:30:68:c3:6f:f8:e0:55:a5:55:07:a5:a3:02:39:
9f:91:3d:38:9d:11:c1:d2:d6:34:de:42:39:0a:bf:52:ed:1c:
68:45:91:81:1d:8c:9a:ae:33:bc:bc:f8:01:73:d3:32:06:d0:
fb:57:d7:d1:81:4a:30:98:97:d3:7c:4c:3d:9e:3a:34:93:de:
51:fb:bf:bc:c4:29:42:c3:ba:18:7e:81:ed:1c:55:e0:b8:a6:
2c:56:af:d8:76:b6:2a:01:d1:3b:da:8f:7c:a2:69:1b:d7:6d:
bc:f1:d0:bb:42:ef:4a:a4:cb:e0:a9:66:1b:cc:ff:47:1b:5c:
cb:cd:60:98:01:05:ac:95:3e:d8:7c:d9:20:85:58:57:34:d3:
57:7f:d0:9e:bd:8f:fd:25:79:af:ce:42:49:6e:28:53:f2:bb:
ef:16:62:72:df:a7:94:df:7a:de:1a:a7:1b:3a:e0:d8:51:26:
95:9e:27:f0:31:a7:5f:9c:75:fe:0a:07:29:02:f8:f6:e9:1e:
6c:b3:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:22 2025 by rpki-client