Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa
File: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (raw, json)
Hash identifier: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=
Subject key identifier: F6:74:9A:27:11:EB:6D:0D:D0:11:6E:66:7D:98:98:3E:92:3E:BA:0A
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019423699B699ED01E0C4160E8C976C6EADA
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8726
IP address blocks: 81.21.192.0/21 maxlen: 21
81.21.200.0/22 maxlen: 22
81.21.204.0/23 maxlen: 23
81.21.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9b:69:9e:d0:1e:0c:41:60:e8:c9:76:c6:ea:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6749a2711eb6d0dd0116e667d98983e923eba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:fe:18:5d:d8:09:b7:29:3c:b1:26:d3:bd:
75:b7:06:13:f8:19:0e:b2:7b:19:a2:1f:9b:4b:63:
7a:ab:25:94:f2:0d:41:c3:6f:0c:ed:e8:8d:97:1c:
99:42:55:81:e3:a5:d1:1b:c0:a8:3a:dd:a4:75:c7:
bb:ef:90:33:cd:30:25:9f:e4:09:66:d9:19:d5:9d:
f4:df:3d:34:53:17:24:2e:ca:7e:38:88:9d:71:5c:
77:92:b8:84:54:53:b4:1c:a2:5f:b1:8d:bf:1d:0f:
c7:0f:eb:94:4b:15:8a:68:cc:18:c6:1b:4f:89:7e:
f6:8c:e9:ac:10:e8:3b:11:30:01:1e:64:17:3b:83:
82:bc:7a:dd:5d:40:d5:fc:5f:34:b5:cb:a7:9a:30:
e2:b8:9d:61:62:c9:ee:bd:1b:d1:2d:7e:39:a3:a9:
dd:3b:e6:c2:c5:a1:0c:57:7b:18:ac:bd:26:b4:ff:
cc:c5:2a:bc:13:95:e0:56:9f:18:54:12:6e:47:df:
64:06:51:15:2a:4a:21:80:a3:6d:fe:93:37:9a:d2:
68:b7:3a:42:95:00:2f:bd:ea:bd:04:ae:49:95:85:
dd:cc:06:42:97:b5:0c:91:9b:c0:a9:b9:36:2d:26:
a6:1b:27:79:23:d2:d3:94:b8:27:89:69:4c:50:51:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:9A:27:11:EB:6D:0D:D0:11:6E:66:7D:98:98:3E:92:3E:BA:0A
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.192.0-81.21.205.255
81.21.207.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e5:eb:f1:37:ae:03:fe:59:ae:88:83:9c:88:85:64:50:25:
5c:a9:f7:59:72:33:b9:6d:75:37:8a:72:b8:33:31:e1:9b:cf:
a4:55:c5:be:94:9f:e8:e7:e0:d2:d2:1a:56:84:78:10:ef:d6:
57:67:a0:1c:2e:12:42:4a:f5:15:bd:aa:9c:1c:96:23:dc:01:
26:08:80:ec:0a:ed:fc:2b:7c:0c:78:d3:7f:7b:56:cb:38:d5:
9b:15:c5:24:19:e4:00:b4:96:16:6b:56:2f:4a:56:31:64:e7:
94:33:4c:e1:0c:6a:00:a1:20:8d:eb:68:9e:4f:72:c6:aa:19:
88:af:99:b1:b6:1a:63:3e:8a:b0:ce:56:5d:74:45:f3:60:95:
b6:84:0a:46:66:8b:27:04:f3:4a:86:6e:e4:1e:ba:3e:d6:15:
22:bb:37:41:2e:80:b6:8b:2b:50:b1:9d:bf:92:f8:b4:77:04:
a5:d2:d2:98:c8:bb:83:0c:01:b5:df:58:23:93:f9:84:f5:5d:
d6:6c:3f:3f:70:db:f2:5c:4d:f2:21:2f:f5:4e:2c:75:50:9a:
5b:02:a0:a9:38:03:50:62:48:05:6b:92:e4:f5:cb:c4:37:4c:
96:fd:77:81:c5:02:03:50:ef:fc:19:76:4b:eb:2a:2e:fb:23:
7a:dc:48:52
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQjaZtpntAeDEFg6Ml2xuraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjUwMTAxMTk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjc0OWEyNzExZWI2ZDBkZDAxMTZlNjY3ZDk4OTgzZTkyM2ViYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcb+GF3YCbcpPLEm0711twYT+BkO
snsZoh+bS2N6qyWU8g1Bw28M7eiNlxyZQlWB46XRG8CoOt2kdce775AzzTAln+QJ
ZtkZ1Z303z00UxckLsp+OIidcVx3kriEVFO0HKJfsY2/HQ/HD+uUSxWKaMwYxhtP
iX72jOmsEOg7ETABHmQXO4OCvHrdXUDV/F80tcunmjDiuJ1hYsnuvRvRLX45o6nd
O+bCxaEMV3sYrL0mtP/MxSq8E5XgVp8YVBJuR99kBlEVKkohgKNt/pM3mtJotzpC
lQAvveq9BK5JlYXdzAZCl7UMkZvAqbk2LSamGyd5I9LTlLgniWlMUFFIEwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPZ0micR620N0BFuZn2YmD6SProKMB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvOW5TYUp4SHJiUTNRRVc1bWZaaVlQcEktdWdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAZRFcAD
BAFRFcwDBABRFc8wDQYJKoZIhvcNAQELBQADggEBAADl6/E3rgP+Wa6Ig5yIhWRQ
JVyp91lyM7ltdTeKcrgzMeGbz6RVxb6Un+jn4NLSGlaEeBDv1ldnoBwuEkJK9RW9
qpwcliPcASYIgOwK7fwrfAx40397Vss41ZsVxSQZ5AC0lhZrVi9KVjFk55QzTOEM
agChII3raJ5PcsaqGYivmbG2GmM+irDOVl10RfNglbaECkZmiycE80qGbuQeuj7W
FSK7N0EugLaLK1Cxnb+S+LR3BKXS0pjIu4MMAbXfWCOT+YT1XdZsPz9w2/JcTfIh
L/VOLHVQmlsCoKk4A1BiSAVrkuT1y8Q3TJb9d4HFAgNQ7/wZdkvrKi77I3rcSFI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net