Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa
File: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (raw, json)
Hash identifier: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=
Subject key identifier: 48:79:E4:FF:21:6C:E5:34:A4:6E:DA:90:E5:C0:92:DE:A5:95:A1:B6
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 0194258E5FA12AC6E4608A8337C667DE4B41
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa
Signing time: Thu 02 Jan 2025 05:47:55 +0000
ROA not before: Thu 02 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 185.7.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:5f:a1:2a:c6:e4:60:8a:83:37:c6:67:de:4b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 2 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4879e4ff216ce534a46eda90e5c092dea595a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:23:7f:83:db:82:16:9c:30:3e:f6:00:49:
1f:b1:2d:c2:0b:81:f7:9a:77:44:1b:88:87:eb:d6:
4a:98:f9:64:2d:ac:4e:7a:bb:e9:5e:a7:8b:da:cb:
1f:8b:04:04:17:8c:70:65:9e:4d:14:6c:14:62:e8:
93:8f:68:28:fd:06:e8:3a:bb:80:04:cc:a5:ba:6d:
85:50:fe:ae:37:90:7c:f5:39:2c:ec:8f:a5:a3:e0:
94:c8:59:08:f7:6e:bd:3f:a7:7f:ac:e5:ed:a1:7f:
d2:3d:2a:c3:c1:ab:73:b7:6a:f0:f7:87:10:df:64:
11:bd:2a:b2:f2:41:85:a2:05:30:14:ad:73:42:9e:
01:31:c2:a8:26:4a:41:31:74:c5:f1:d4:08:b9:b1:
ea:2a:d9:f2:69:4f:45:69:8a:99:0f:4b:ff:3c:7c:
c7:85:f7:12:ed:51:3f:42:45:e8:3c:b3:fa:ee:b3:
87:b2:2a:7e:3d:49:33:f9:42:57:c5:5e:f7:95:e1:
fc:0d:c7:fa:42:16:9b:ba:76:26:35:e4:29:21:3c:
5f:c4:19:09:a3:87:22:31:d3:db:2f:a9:a0:bd:2a:
49:f6:d3:22:62:89:c2:0b:e1:57:b6:c6:bb:9e:6e:
b5:f9:71:5b:52:a6:27:bd:00:8f:09:19:d0:f9:60:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:79:E4:FF:21:6C:E5:34:A4:6E:DA:90:E5:C0:92:DE:A5:95:A1:B6
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.81.0/24
Signature Algorithm: sha256WithRSAEncryption
16:86:2c:1e:ff:b2:69:55:d6:83:9d:1c:5c:fd:e7:d7:f9:7e:
db:49:a7:4d:6d:76:53:db:2e:b9:e2:30:2a:da:96:c9:9b:0e:
ce:35:91:e5:16:f6:32:24:71:e6:6a:6b:fc:ce:c6:55:e7:91:
01:a6:23:e0:e4:89:3c:58:6e:e2:34:27:cf:3d:fa:3f:2a:4d:
ff:b2:e2:2c:e6:45:fe:3a:99:b3:ad:d1:8f:eb:94:03:25:63:
9b:a5:8c:1c:77:88:6f:51:65:a2:00:38:59:11:60:a4:7e:1b:
91:ac:1b:fb:31:e5:bb:b6:a7:f4:27:02:84:2f:cf:a2:7a:80:
ce:7d:ec:91:18:b6:78:a3:11:7a:8c:19:67:73:aa:41:1c:ab:
30:bb:e2:6b:d6:57:75:f0:95:5c:87:52:93:68:2f:5a:bc:67:
b5:0c:65:65:85:22:71:bb:61:bd:a3:59:36:e0:b3:7f:1a:a4:
8e:fb:5b:ba:99:fc:f4:7b:5f:2e:af:2b:b3:65:b9:2c:d1:fc:
22:1e:64:e9:53:ea:99:f1:cf:99:4d:19:9f:35:58:da:9d:81:
32:64:a4:b3:cd:57:fe:d7:e5:a8:d8:4d:45:13:bf:08:7a:20:
61:4a:f9:31:05:1c:b4:c0:29:0a:73:be:4c:ef:93:bf:63:2f:
ec:a3:03:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljl+hKsbkYIqDN8Zn3ktBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5
MmFlYjcwHhcNMjUwMTAyMDU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODc5ZTRmZjIxNmNlNTM0YTQ2ZWRhOTBlNWMwOTJkZWE1OTVhMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTUjf4PbghacMD72AEkfsS3CC4H3
mndEG4iH69ZKmPlkLaxOervpXqeL2ssfiwQEF4xwZZ5NFGwUYuiTj2go/QboOruA
BMylum2FUP6uN5B89Tks7I+lo+CUyFkI9269P6d/rOXtoX/SPSrDwatzt2rw94cQ
32QRvSqy8kGFogUwFK1zQp4BMcKoJkpBMXTF8dQIubHqKtnyaU9FaYqZD0v/PHzH
hfcS7VE/QkXoPLP67rOHsip+PUkz+UJXxV73leH8Dcf6QhabunYmNeQpITxfxBkJ
o4ciMdPbL6mgvSpJ9tMiYonCC+FXtsa7nm61+XFbUqYnvQCPCRnQ+WBxwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEh55P8hbOU0pG7akOXAkt6llaG2MB8GA1UdIwQY
MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt
NDU2NWYwNGY4ZDg1LzEvU0hua195RnM1VFNrYnRxUTVjQ1MzcVdWb2JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1
LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQdRMA0G
CSqGSIb3DQEBCwUAA4IBAQAWhiwe/7JpVdaDnRxc/efX+X7bSadNbXZT2y654jAq
2pbJmw7ONZHlFvYyJHHmamv8zsZV55EBpiPg5Ik8WG7iNCfPPfo/Kk3/suIs5kX+
OpmzrdGP65QDJWObpYwcd4hvUWWiADhZEWCkfhuRrBv7MeW7tqf0JwKEL8+ieoDO
feyRGLZ4oxF6jBlnc6pBHKswu+Jr1ld18JVch1KTaC9avGe1DGVlhSJxu2G9o1k2
4LN/GqSO+1u6mfz0e18uryuzZbks0fwiHmTpU+qZ8c+ZTRmfNVjanYEyZKSzzVf+
1+Wo2E1FE78IeiBhSvkxBRy0wCkKc75M75O/Yy/sowOe
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:38:17 2025 by rpki-client