Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9FZthnXDcW7Bny0IkYUtUTICNi0.roa
File: 9FZthnXDcW7Bny0IkYUtUTICNi0.roa (raw, json)
Hash identifier: iqeBec4dOgQ6u6H9kxjf3I15jjxuiA3xq3nHSpZucDI=
Subject key identifier: F4:56:6D:86:75:C3:71:6E:C1:9F:2D:08:91:85:2D:51:32:02:36:2D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C37C9C88432B4542F6B64732F8831
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9FZthnXDcW7Bny0IkYUtUTICNi0.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200298
IP address blocks: 81.181.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:37:c9:c8:84:32:b4:54:2f:6b:64:73:2f:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4566d8675c3716ec19f2d0891852d513202362d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:db:99:5a:a0:1a:8d:98:41:7a:dc:fa:3a:
cb:4d:96:36:ff:e3:2e:08:55:7f:2d:d6:a8:9a:9b:
c0:01:a7:73:2c:9c:04:68:ba:dd:89:2b:74:5e:a0:
13:2e:6b:b8:07:7f:65:09:78:16:00:98:0a:85:c9:
26:11:4a:e5:44:b1:b9:bb:fa:8b:6d:9a:4c:3d:25:
33:63:d4:04:1f:e6:0a:db:6c:b9:66:4c:54:19:91:
bc:3b:11:76:0f:f6:69:6c:6f:5c:06:4c:aa:78:52:
51:59:3d:b9:23:f5:66:11:f3:c2:fa:9f:f8:87:28:
9a:30:d5:8d:14:cf:57:db:a6:f3:e7:81:cc:db:fe:
61:d7:6a:57:f1:ef:dd:60:53:a6:e7:5a:2c:e2:15:
80:36:81:68:af:ed:1e:b6:74:ed:fb:45:df:78:b3:
9a:ca:c2:90:ee:63:3b:81:69:f0:e3:c7:df:a4:0f:
11:68:37:33:fc:19:1c:29:47:9a:05:45:ba:32:c8:
d8:be:ee:a4:94:a8:30:74:25:f8:57:74:10:e1:75:
3c:0f:c3:ef:5b:b1:82:ce:33:9f:37:e2:49:b3:3a:
14:f6:39:4c:b9:50:55:4f:83:29:0a:9e:fa:95:ff:
80:9e:c1:a1:d5:9e:50:ee:ee:cb:8d:85:5d:86:ee:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:6D:86:75:C3:71:6E:C1:9F:2D:08:91:85:2D:51:32:02:36:2D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9FZthnXDcW7Bny0IkYUtUTICNi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.195.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:54:68:78:4b:27:22:de:c9:89:b3:42:b1:53:cb:68:94:b9:
a7:17:77:61:a3:f4:f9:9c:b2:a5:4e:5a:b6:61:f7:32:5b:35:
1c:3d:8e:24:96:c9:36:6a:5b:17:e9:7f:d1:00:2d:79:9a:9d:
a0:bd:7f:cd:4b:01:e0:ef:87:11:5f:9b:a1:26:1c:91:e9:08:
23:f4:29:7a:21:f6:f1:dd:f3:4e:6d:c1:a0:3d:8b:e7:e2:86:
11:a3:36:a6:7d:63:91:31:f8:86:67:50:74:5a:a9:cb:f3:23:
90:0c:32:ab:44:bb:99:6f:78:ec:0b:7a:1d:c9:ad:70:09:33:
9b:23:2e:ad:80:22:3e:1d:e0:fb:ac:c1:56:7a:12:e2:b2:79:
fe:c0:68:16:e2:cd:75:59:34:4c:28:c0:9a:27:b2:6f:9d:49:
a3:09:1b:c1:83:87:fe:d6:bb:45:f7:18:1b:2b:02:fa:1b:a2:
ae:35:81:0a:6d:ec:ee:d2:83:ec:0f:e6:ae:f3:cf:93:e0:9c:
63:11:77:ad:22:34:70:fc:6c:df:b7:66:f1:ae:b8:db:c0:e5:
f3:da:ac:ba:22:50:88:36:0d:ef:23:cf:01:29:52:70:dc:e8:
9e:5e:62:c4:20:78:c2:77:bd:e8:49:76:9c:56:b2:b3:63:32:
3d:98:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:50 2025 by rpki-client