Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/13YuQXcDJbnIYp9Q74L-JDcuLVM.roa
File: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (raw, json)
Hash identifier: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=
Subject key identifier: D7:76:2E:41:77:03:25:B9:C8:62:9F:50:EF:82:FE:24:37:2E:2D:53
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 0194221F77547C7034FB006E566F1C1FAE9E
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/13YuQXcDJbnIYp9Q74L-JDcuLVM.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39214
IP address blocks: 81.20.16.0/20 maxlen: 20
81.20.16.0/24 maxlen: 24
81.20.17.0/24 maxlen: 24
81.20.20.0/23 maxlen: 23
81.20.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:77:54:7c:70:34:fb:00:6e:56:6f:1c:1f:ae:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7762e41770325b9c8629f50ef82fe24372e2d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:c3:fc:d4:9d:07:03:b4:9c:05:4a:5f:61:
b7:3f:85:3b:87:ba:5c:36:d8:e5:9e:0e:fe:7e:0a:
cf:1d:eb:60:72:06:35:d5:dd:21:f5:d9:79:60:08:
90:e6:a0:a7:6e:c5:d8:5e:d8:38:8e:d9:ea:c9:f4:
be:77:1f:18:29:7a:df:a2:20:a1:d1:f3:70:83:87:
9a:c3:1c:b4:75:db:cf:a1:07:00:52:76:a6:56:10:
1b:6d:de:18:ec:20:98:57:64:96:e9:c7:fe:1d:f6:
f5:2f:cf:f7:52:7e:3b:59:bb:94:17:b2:2c:a7:fb:
54:fa:42:c4:ee:da:2e:97:c0:3e:9c:8b:f2:87:eb:
b7:e0:d2:c9:eb:0d:2d:94:50:f7:c2:e4:01:7d:99:
15:63:5c:c0:e9:63:68:f9:7c:ab:cb:64:d9:80:65:
86:01:88:0e:f6:6e:14:a1:cd:30:f8:8d:85:ea:5f:
79:1e:59:11:09:4e:79:e4:da:90:5f:a4:e1:f3:93:
15:b5:e1:75:d5:26:6e:7f:71:01:8b:8a:15:a9:ed:
6e:22:b6:9a:57:f0:f1:54:1a:bd:a8:26:d0:cd:b0:
65:06:84:53:7e:be:c6:06:03:10:6b:bb:83:67:86:
d9:8c:79:5b:51:4f:ef:1a:f6:87:ff:af:26:13:04:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:2E:41:77:03:25:B9:C8:62:9F:50:EF:82:FE:24:37:2E:2D:53
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/13YuQXcDJbnIYp9Q74L-JDcuLVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.16.0/20
Signature Algorithm: sha256WithRSAEncryption
84:58:90:37:72:27:f1:48:d5:e4:f2:af:3e:8d:c2:0f:72:e8:
fc:67:9e:d7:08:b3:7e:d9:a4:fe:26:6d:e7:1a:9c:3b:8d:b3:
dc:3f:b9:cd:6b:44:5b:74:2c:2a:ee:6a:c5:1e:64:75:b5:8c:
b3:30:db:4c:3f:40:ce:37:c3:e2:96:55:07:6e:5c:bb:d0:84:
e4:bb:9f:5a:60:4b:30:1f:de:d2:4d:a3:9c:a4:58:30:f5:e5:
f7:42:b5:73:8a:cf:13:9a:e5:d1:8b:73:4a:f8:cf:fc:5a:da:
b2:61:d9:e1:91:88:c4:a8:68:fb:f3:28:77:14:e2:fe:11:69:
92:9f:33:fe:fc:34:8c:27:8a:8e:2e:1f:b0:d1:5b:eb:1a:1e:
0f:6a:fe:b3:0d:c7:83:62:0d:c1:cd:38:dc:c6:db:0c:21:3d:
30:eb:d3:6a:71:5a:01:8e:5f:76:43:b3:ca:4e:66:a3:06:7b:
e7:20:f5:c2:b9:13:ff:84:76:ec:98:b2:f9:63:db:e4:f0:46:
36:09:93:85:73:4c:8b:99:3d:f8:e3:42:e0:59:5c:93:ff:64:
16:ca:7f:82:85:d0:b3:54:8a:21:0f:28:67:65:6f:ee:15:0c:
0b:c4:08:bf:27:06:f5:01:21:af:35:79:55:6b:96:ab:38:cb:
ba:97:24:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net