Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OCfwyv8zpIBXFQTdhTVCXcQRN1c.roa
File: OCfwyv8zpIBXFQTdhTVCXcQRN1c.roa (raw, json)
Hash identifier: waqB4g1qbT/U/7ryPxkheBJGrch8J3yELmF1G5xiDmQ=
Subject key identifier: 38:27:F0:CA:FF:33:A4:80:57:15:04:DD:85:35:42:5D:C4:11:37:57
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C27DA0762F1C9460263D1CACDBFA2
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OCfwyv8zpIBXFQTdhTVCXcQRN1c.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48571
IP address blocks: 81.181.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:27:da:07:62:f1:c9:46:02:63:d1:ca:cd:bf:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3827f0caff33a480571504dd8535425dc4113757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:0e:72:31:96:51:40:13:85:8a:5b:47:6d:
fb:98:55:26:f5:86:3b:04:f5:fd:3c:cd:79:28:32:
ea:78:a8:32:4d:b8:1b:dd:9e:29:7d:52:1f:c7:07:
99:08:51:a5:c7:51:27:f8:5f:7c:d7:00:02:82:b3:
df:34:52:42:ad:bb:15:b5:39:c8:c4:26:53:4c:4b:
f9:7c:84:80:56:36:b7:3e:c3:fc:6d:ea:4d:84:86:
5c:f6:b8:ba:6a:48:89:82:14:8f:e0:fd:15:f7:c8:
b7:dd:98:4a:48:c5:84:2c:ce:25:32:2a:84:5c:57:
75:09:3e:29:c2:2a:e4:a5:db:48:2e:be:9d:76:ad:
05:9a:17:dd:bc:c6:db:42:84:ef:da:2a:d1:d7:4c:
41:d2:28:66:76:04:ed:d7:95:90:4f:fb:0a:3f:e4:
99:40:64:24:4f:26:97:c7:f2:44:75:4a:2d:15:57:
25:7b:06:02:36:80:e9:dc:1f:d8:19:bb:60:c9:02:
4b:43:f1:ec:21:7f:bf:b7:fb:f2:06:d4:58:f3:1d:
31:7e:5a:e7:21:e4:2c:31:80:4a:6d:aa:a8:d3:95:
bd:ee:c0:6f:7b:76:10:7e:1f:b9:e1:69:47:df:94:
d9:82:d6:c5:78:1a:19:8e:7f:2d:a0:a8:29:82:2b:
d2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:27:F0:CA:FF:33:A4:80:57:15:04:DD:85:35:42:5D:C4:11:37:57
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OCfwyv8zpIBXFQTdhTVCXcQRN1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.168.0/23
Signature Algorithm: sha256WithRSAEncryption
60:47:b5:a0:51:1c:e3:91:cc:11:5c:d3:04:d9:36:4c:ab:7d:
29:bd:18:28:a1:c5:ef:7a:76:33:f1:30:ac:84:e1:f8:21:37:
b0:1d:88:47:d7:57:f4:34:0d:b6:7a:0c:b2:06:0b:d0:a1:67:
d2:8c:ca:e3:5d:1e:11:47:a7:ef:0b:43:d2:66:d0:d8:20:12:
89:0f:bf:16:06:5f:0d:9a:33:08:e1:ac:37:d4:1b:89:42:67:
67:a6:eb:77:56:55:53:46:cc:79:a6:8b:37:c2:77:31:c5:63:
1e:5c:5a:75:42:6e:7e:8b:55:4e:64:a9:bc:26:0e:04:4d:af:
54:a0:29:30:2f:9e:26:72:71:5c:91:54:c9:91:57:05:82:e6:
56:e1:40:0e:4b:6a:d3:9d:83:ad:3c:d5:1a:f6:b2:c1:34:f3:
7b:a1:6f:a7:f2:fd:44:da:1d:f0:9e:57:87:76:8f:d5:10:a5:
ba:d8:74:a6:36:d3:ff:8d:eb:fd:e5:14:5d:bd:37:af:6b:05:
4d:65:28:9f:5d:62:87:40:3a:e9:f8:81:26:c9:8a:79:2a:a8:
5d:96:da:4f:01:6c:37:53:ca:a4:ae:ec:db:55:c4:13:7e:2c:
77:30:b9:16:3c:59:ba:94:36:30:e2:ae:bc:7f:de:15:8a:cf:
05:03:bd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:37 2025 by rpki-client