Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Cg0KxunwJNxo_6i-8o80oY78jOg.roa
File: Cg0KxunwJNxo_6i-8o80oY78jOg.roa (raw, json)
Hash identifier: 8I0cQ93xptzpf4hVmGDydhJZCy6jfiTD/0NYZpnNIU4=
Subject key identifier: 0A:0D:0A:C6:E9:F0:24:DC:68:FF:A8:BE:F2:8F:34:A1:8E:FC:8C:E8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C194672633797D43150BB67BF05BA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Cg0KxunwJNxo_6i-8o80oY78jOg.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34353
IP address blocks: 81.181.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:19:46:72:63:37:97:d4:31:50:bb:67:bf:05:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a0d0ac6e9f024dc68ffa8bef28f34a18efc8ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:47:c7:65:9a:4b:d2:71:e9:a8:6b:7c:54:
bf:33:c0:48:e2:f4:84:5d:c9:2f:d7:7c:59:07:ec:
8c:f9:b1:65:28:29:f4:c6:5a:95:9a:a7:24:16:e5:
f0:8d:b3:ab:e0:45:9b:fa:30:6a:41:39:25:f6:e5:
bd:8c:2f:d7:85:13:a5:e7:9a:70:de:20:1d:62:6e:
49:db:f9:65:29:40:b5:a5:f9:64:5b:89:15:4a:fb:
31:b3:9f:97:0d:ab:9c:4e:df:35:46:d6:7b:3f:a4:
12:a3:35:c7:1f:bf:a8:d3:bc:d6:40:c0:d9:73:17:
d9:5d:0b:d1:b4:60:b6:40:c8:ec:98:1a:b5:60:d8:
d7:70:73:3f:66:ed:24:d8:27:5d:09:6c:72:d7:15:
f1:46:58:9f:ce:7e:63:f5:3f:97:fc:77:64:d5:71:
5e:2e:ee:86:ad:53:dd:31:09:5d:1c:5b:06:15:bb:
af:13:a5:9f:d2:ce:4e:c1:4d:b8:4e:93:16:70:ab:
4c:d0:48:2f:af:cc:a4:ac:d7:fa:4c:f9:03:6e:e3:
32:d1:df:81:68:3f:a1:97:ca:b3:a5:e4:39:37:78:
e1:86:4e:a9:e3:d3:e1:3c:e9:79:09:b0:da:d6:f6:
40:87:c9:6a:9d:40:e2:fa:73:03:ee:48:10:90:ab:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0D:0A:C6:E9:F0:24:DC:68:FF:A8:BE:F2:8F:34:A1:8E:FC:8C:E8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Cg0KxunwJNxo_6i-8o80oY78jOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.13.0/24
Signature Algorithm: sha256WithRSAEncryption
01:03:fd:3b:20:76:9f:0f:53:c0:bd:51:25:30:99:33:de:97:
e2:21:3f:7e:68:37:75:28:ea:40:21:c1:20:61:f1:b2:89:a9:
12:43:90:fe:c3:3d:b5:e4:27:c9:2f:09:e5:16:b3:5c:98:27:
d4:9b:de:99:d5:e4:4d:44:0d:08:ac:f6:ef:41:e0:d1:0b:ae:
31:3c:5d:d9:d3:b3:4d:a5:91:71:77:07:c6:7c:4c:cc:8b:8c:
8c:1a:ab:12:a0:28:5d:74:64:7a:ec:13:1c:c0:90:a6:cc:37:
e9:50:92:37:e3:fc:9c:a9:69:6d:f2:e1:70:e0:73:a4:e6:26:
37:1c:f8:98:03:f3:01:6e:19:bb:a0:33:fe:57:40:74:48:5f:
e1:e0:35:fa:43:a9:5a:ac:29:51:09:d5:de:b4:b2:1a:a7:4c:
d4:33:f9:0e:2d:3e:e4:29:07:a8:18:34:88:c8:6e:37:4d:b0:
5f:26:1b:b5:c0:79:bf:99:27:27:1d:78:4f:f1:37:30:37:09:
65:79:dc:4a:1a:e3:4c:8c:66:2a:ca:b3:3d:11:61:90:c5:ca:
0c:d8:8b:4d:05:37:94:e7:12:74:4e:f5:43:df:35:87:98:2f:
cd:0b:83:eb:ea:79:37:52:10:6d:89:a1:58:73:c1:f9:11:2c:
35:bb:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:12:12 2025 by rpki-client