Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OW8spqd7Uw1-fT8y_g-JrBhE1jg.roa
File: OW8spqd7Uw1-fT8y_g-JrBhE1jg.roa (raw, json)
Hash identifier: CUQQcYvYVhnGoTaRfGrOyqTwoAyFTd+JEfL3FCerP00=
Subject key identifier: 39:6F:2C:A6:A7:7B:53:0D:7E:7D:3F:32:FE:0F:89:AC:18:44:D6:38
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C161B45579DE45FDD1BF36F577FF3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OW8spqd7Uw1-fT8y_g-JrBhE1jg.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 81.181.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:16:1b:45:57:9d:e4:5f:dd:1b:f3:6f:57:7f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396f2ca6a77b530d7e7d3f32fe0f89ac1844d638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:9d:c8:6d:e4:d4:28:55:fb:33:18:f5:13:
ad:b4:c6:09:bb:cb:5a:78:20:ee:b0:66:20:5d:d6:
63:7f:e6:90:40:cd:fa:8b:ee:41:38:da:32:61:c3:
9d:2c:fb:e5:19:89:a1:ef:3d:e8:a2:48:8c:54:75:
99:b3:69:95:e9:81:d2:b9:75:90:0d:e2:4e:50:3f:
25:61:b6:17:ef:3c:d2:dc:5e:bc:38:ec:54:98:2c:
cf:ae:03:b5:31:6e:6f:8a:8d:f8:6a:47:80:ea:3c:
8f:67:b7:c4:51:a5:55:cc:33:b6:55:74:97:28:3c:
18:87:d4:22:65:56:07:f0:5d:8e:8d:c9:97:2d:03:
55:51:ef:48:a1:da:12:94:91:71:84:b5:3f:87:73:
85:07:f2:9e:9a:37:c1:75:6d:73:87:16:74:81:a9:
67:6c:5f:1d:4b:50:a1:53:59:e1:ee:d7:1e:03:83:
64:62:b9:2f:c0:d8:84:0a:9e:d4:a5:07:f1:60:7d:
e6:1c:d0:88:c6:92:5d:27:25:64:b9:17:ef:60:68:
6f:d7:6f:3d:62:3e:71:25:e4:7d:e2:ee:99:29:71:
d6:1f:47:76:7f:4c:e6:29:dd:b2:59:04:ac:a4:68:
0b:79:3d:63:2f:41:bf:9a:73:c6:22:1c:aa:e2:f7:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:2C:A6:A7:7B:53:0D:7E:7D:3F:32:FE:0F:89:AC:18:44:D6:38
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OW8spqd7Uw1-fT8y_g-JrBhE1jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.244.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a1:a0:f3:78:db:9c:39:c7:70:32:83:cb:ca:0a:e9:be:dd:
05:d6:f7:a7:5c:57:65:53:05:6c:08:3e:a7:9e:8c:7a:84:4e:
af:42:4e:d4:55:8a:c2:94:4c:0e:64:b0:33:f5:f8:fd:3a:03:
07:2c:a6:27:4b:10:94:09:57:92:00:08:6e:7c:4a:32:73:74:
3d:26:48:8a:fe:cb:c1:55:25:92:a4:31:35:a4:8d:a7:b4:0e:
fa:b3:11:21:05:8f:22:0d:0a:41:e8:fa:cf:a6:48:90:ef:78:
8b:dc:02:47:69:8c:71:1a:87:c3:83:66:99:7e:65:27:b7:70:
ca:d8:fd:5e:6c:31:8f:c6:cd:d3:e2:db:3d:87:33:eb:98:55:
34:d2:56:c8:d9:d1:91:6d:dc:e4:5b:66:8d:c0:36:0e:d9:bd:
21:c7:4f:ab:bc:6f:6c:84:a8:6e:61:57:ff:04:3a:9d:40:8e:
a9:af:a1:fa:9d:51:76:b2:e3:c2:13:94:a6:96:19:f4:a3:9e:
f2:40:3f:9b:4a:47:7d:c2:15:c9:ac:a2:da:5f:ac:3f:e7:b7:
14:c0:b2:ae:58:43:23:84:59:cd:8d:30:95:8e:ce:c3:2a:d9:
57:9b:ab:75:20:07:ff:e7:51:66:67:09:fc:93:45:93:8e:a5:
be:a6:f8:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjBYbRVed5F/dG/NvV3/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTZmMmNhNmE3N2I1MzBkN2U3ZDNmMzJmZTBmODlhYzE4NDRkNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop2dyG3k1ChV+zMY9ROttMYJu8ta
eCDusGYgXdZjf+aQQM36i+5BONoyYcOdLPvlGYmh7z3ookiMVHWZs2mV6YHSuXWQ
DeJOUD8lYbYX7zzS3F68OOxUmCzPrgO1MW5vio34akeA6jyPZ7fEUaVVzDO2VXSX
KDwYh9QiZVYH8F2OjcmXLQNVUe9IodoSlJFxhLU/h3OFB/KemjfBdW1zhxZ0galn
bF8dS1ChU1nh7tceA4NkYrkvwNiECp7UpQfxYH3mHNCIxpJdJyVkuRfvYGhv1289
Yj5xJeR94u6ZKXHWH0d2f0zmKd2yWQSspGgLeT1jL0G/mnPGIhyq4vfS4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlvLKane1MNfn0/Mv4PiawYRNY4MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvT1c4c3BxZDdVdzEtZlQ4eV9nLUpyQmhFMWpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbX0MA0G
CSqGSIb3DQEBCwUAA4IBAQCvoaDzeNucOcdwMoPLygrpvt0F1venXFdlUwVsCD6n
nox6hE6vQk7UVYrClEwOZLAz9fj9OgMHLKYnSxCUCVeSAAhufEoyc3Q9JkiK/svB
VSWSpDE1pI2ntA76sxEhBY8iDQpB6PrPpkiQ73iL3AJHaYxxGofDg2aZfmUnt3DK
2P1ebDGPxs3T4ts9hzPrmFU00lbI2dGRbdzkW2aNwDYO2b0hx0+rvG9shKhuYVf/
BDqdQI6pr6H6nVF2suPCE5Smlhn0o57yQD+bSkd9whXJrKLaX6w/57cUwLKuWEMj
hFnNjTCVjs7DKtlXm6t1IAf/51FmZwn8k0WTjqW+pviC
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:40 2025 by rpki-client