Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E1kfgkQkFLhWRaIWqxaRlOJ9QbM.roa
File: E1kfgkQkFLhWRaIWqxaRlOJ9QbM.roa (raw, json)
Hash identifier: lwaL4eDmvivjoQ5eUsZ1Nzls3NYax096CID1EBR5UKQ=
Subject key identifier: 13:59:1F:82:44:24:14:B8:56:45:A2:16:AB:16:91:94:E2:7D:41:B3
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C21E18CDAEF89393D0FC7872416AD
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E1kfgkQkFLhWRaIWqxaRlOJ9QbM.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42508
IP address blocks: 81.181.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:21:e1:8c:da:ef:89:39:3d:0f:c7:87:24:16:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13591f82442414b85645a216ab169194e27d41b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:a0:d1:03:2e:86:b8:42:62:7e:b6:fa:27:
08:e0:64:63:5f:5c:e0:c5:87:77:1f:77:85:ce:c9:
02:ef:31:79:22:9f:ee:57:83:82:10:1a:df:83:66:
c1:0c:67:58:6a:30:cc:e5:36:75:20:cd:49:7f:dd:
4c:83:92:38:34:fe:cc:1c:1c:4d:43:bd:e4:e2:a2:
6c:85:85:e0:6c:6e:25:e5:21:68:8d:a3:8d:26:d2:
7d:85:f7:c0:18:63:3b:12:dd:94:56:09:e5:88:4e:
61:ae:52:d2:04:52:1c:6e:de:6a:b9:0b:1f:79:87:
92:a0:74:55:a0:a4:ec:84:b2:98:0c:d8:62:c1:79:
28:74:be:ad:31:f3:2b:4a:99:cd:c1:60:d5:1a:67:
73:e3:83:a3:51:f6:63:ce:66:73:70:ec:09:35:99:
01:2e:05:37:12:91:e8:a9:ff:97:35:2d:44:6a:f7:
ea:bd:56:9b:3a:ff:d9:b8:8a:1d:52:9d:23:f2:67:
6a:de:f0:77:8a:2b:c3:15:1f:63:7a:2a:bb:f4:6c:
d7:30:17:43:0a:0d:14:d1:80:ff:13:d8:21:9d:a0:
f7:14:dc:0a:e3:c2:f5:b0:d3:c2:c3:fe:67:ab:90:
cb:23:b7:92:1b:52:81:03:ea:16:b1:c6:21:20:1d:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:1F:82:44:24:14:B8:56:45:A2:16:AB:16:91:94:E2:7D:41:B3
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/E1kfgkQkFLhWRaIWqxaRlOJ9QbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.102.0/24
Signature Algorithm: sha256WithRSAEncryption
78:76:2d:6d:91:8e:ae:61:61:4d:5f:4f:1d:0c:5a:b8:59:e0:
51:9a:7a:e8:f5:fb:53:1e:2a:59:21:00:03:29:68:23:14:1b:
87:b8:20:2f:50:f6:d6:8a:68:e3:c1:a9:74:76:1c:af:82:f6:
ca:5d:68:a5:18:02:82:7c:76:5c:a9:fa:0e:21:f3:0b:33:a0:
da:ef:00:55:4d:f3:35:52:58:83:30:4b:78:1f:66:b0:73:43:
cb:40:a0:60:36:de:95:f9:23:b8:aa:cc:44:7b:9e:fe:e9:b3:
99:7c:70:a4:79:43:d2:d7:05:75:be:f6:40:b7:33:9d:05:e7:
86:70:d6:e3:60:33:74:1e:59:ea:c3:2b:b3:fb:08:38:5e:11:
8e:c5:04:cb:8e:bb:18:f0:23:bb:26:c4:09:f6:e2:07:5a:ad:
a2:03:bf:a7:85:be:69:5f:95:5e:77:c4:d1:b4:06:d3:fb:e0:
15:e6:23:3a:e3:b0:09:c4:4f:10:97:72:3c:21:6a:a0:58:16:
13:e3:43:68:67:9e:d8:9f:c0:b6:0b:99:42:5f:58:48:05:9f:
99:4b:88:68:e5:74:99:d8:64:b0:79:a1:6c:d8:3b:5c:a4:27:
be:92:ea:6c:81:66:a6:06:8e:16:cd:9b:93:51:8c:27:ac:69:
2f:9b:73:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjCHhjNrviTk9D8eHJBatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzU5MWY4MjQ0MjQxNGI4NTY0NWEyMTZhYjE2OTE5NGUyN2Q0MWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh+g0QMuhrhCYn62+icI4GRjX1zg
xYd3H3eFzskC7zF5Ip/uV4OCEBrfg2bBDGdYajDM5TZ1IM1Jf91Mg5I4NP7MHBxN
Q73k4qJshYXgbG4l5SFojaONJtJ9hffAGGM7Et2UVgnliE5hrlLSBFIcbt5quQsf
eYeSoHRVoKTshLKYDNhiwXkodL6tMfMrSpnNwWDVGmdz44OjUfZjzmZzcOwJNZkB
LgU3EpHoqf+XNS1EavfqvVabOv/ZuIodUp0j8mdq3vB3iivDFR9jeiq79GzXMBdD
Cg0U0YD/E9ghnaD3FNwK48L1sNPCw/5nq5DLI7eSG1KBA+oWscYhIB083QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNZH4JEJBS4VkWiFqsWkZTifUGzMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvRTFrZmdrUWtGTGhXUmFJV3F4YVJsT0o5UWJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbVmMA0G
CSqGSIb3DQEBCwUAA4IBAQB4di1tkY6uYWFNX08dDFq4WeBRmnro9ftTHipZIQAD
KWgjFBuHuCAvUPbWimjjwal0dhyvgvbKXWilGAKCfHZcqfoOIfMLM6Da7wBVTfM1
UliDMEt4H2awc0PLQKBgNt6V+SO4qsxEe57+6bOZfHCkeUPS1wV1vvZAtzOdBeeG
cNbjYDN0Hlnqwyuz+wg4XhGOxQTLjrsY8CO7JsQJ9uIHWq2iA7+nhb5pX5Ved8TR
tAbT++AV5iM647AJxE8Ql3I8IWqgWBYT40NoZ57Yn8C2C5lCX1hIBZ+ZS4ho5XSZ
2GSweaFs2DtcpCe+kupsgWamBo4WzZuTUYwnrGkvm3Oj
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:03:16 2025 by rpki-client