Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CAxK9zGMORt-lHU50N6cryd_SWU.roa
File: CAxK9zGMORt-lHU50N6cryd_SWU.roa (raw, json)
Hash identifier: Y2pvzq3sjzjwOkM/e1JOUA4+eM7WaGPIPhAit332Ldo=
Subject key identifier: 08:0C:4A:F7:31:8C:39:1B:7E:94:75:39:D0:DE:9C:AF:27:7F:49:65
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA567C4BBA8B7598ADAD081DE4F0C8
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CAxK9zGMORt-lHU50N6cryd_SWU.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 81.12.32.0/22 maxlen: 24
87.107.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:56:7c:4b:ba:8b:75:98:ad:ad:08:1d:e4:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=080c4af7318c391b7e947539d0de9caf277f4965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:7b:f9:db:af:63:23:d8:0c:65:ed:48:41:
d3:84:41:07:44:12:21:e8:27:80:4a:f2:04:38:34:
65:a1:6b:4b:66:36:47:7c:51:de:20:ae:16:ca:c5:
8f:ba:da:bc:7d:7c:6c:28:62:d5:be:07:ff:53:fe:
85:98:cb:c7:16:e1:64:6e:58:4f:79:a6:c9:d9:82:
e8:e1:1f:70:cd:c0:59:7c:08:0e:30:7c:be:5f:48:
ea:db:aa:7c:a6:58:8f:48:54:09:01:6e:fa:b3:c9:
22:d7:22:f5:3d:07:4d:0b:77:2b:cf:8a:b8:54:dd:
17:08:ff:4f:75:f9:b1:78:c5:e1:ea:b1:ed:4a:5a:
c0:c7:9e:2f:6b:d1:46:83:10:dc:f0:de:81:63:b8:
1e:42:e5:be:38:e3:ad:d8:bd:ba:42:fd:e6:5d:51:
ab:be:81:2c:3c:81:e8:cb:42:2e:80:aa:7d:2a:8c:
a4:0b:3a:2c:4d:0d:58:48:cf:06:4f:ad:67:0d:5b:
62:42:89:e9:cb:f4:48:4f:9f:5b:e8:8a:59:b7:e8:
42:15:3b:20:8d:51:75:37:81:13:78:75:65:c4:27:
ab:09:96:83:95:64:3d:71:80:0c:fd:83:f5:fc:99:
23:00:27:51:7b:3f:44:ed:f2:a2:de:f6:6a:b2:90:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:4A:F7:31:8C:39:1B:7E:94:75:39:D0:DE:9C:AF:27:7F:49:65
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/CAxK9zGMORt-lHU50N6cryd_SWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.32.0/22
87.107.156.0/22
Signature Algorithm: sha256WithRSAEncryption
92:6c:98:6f:d6:de:e0:6f:11:fa:7e:1b:d7:93:3f:85:b1:46:
ff:d7:94:39:be:e7:f9:81:c8:a2:b8:79:01:3a:86:42:93:4c:
ac:1c:c7:ff:0b:3b:08:38:d2:ef:09:ec:95:93:e2:a3:b4:96:
81:a9:af:6b:fb:20:5d:e7:c1:59:95:61:a9:54:7f:c6:0f:81:
bc:ba:b1:a8:fe:f3:68:3d:0e:88:a0:aa:5b:80:d6:33:1e:23:
ac:03:69:01:11:91:c7:03:8c:8b:3e:52:1e:2e:64:f4:8a:28:
36:b8:97:76:37:4a:f7:d8:b1:78:c4:ef:6d:be:4a:96:f3:7c:
d6:5d:b0:a8:cd:e2:c3:b9:86:e7:52:74:90:d4:1a:ed:0d:5f:
b0:2c:62:f8:3a:52:36:9d:2a:f4:96:ad:9b:9d:eb:bb:e3:01:
b2:f7:58:b0:7c:64:bd:3c:76:f1:16:df:ff:88:08:f3:84:d1:
51:ae:37:82:ad:9e:bc:1f:7a:e3:a7:dd:cf:5a:41:c5:9a:fa:
db:13:f9:01:b3:77:81:c1:7f:74:1a:8c:b0:85:d8:69:93:5e:
1b:d0:1d:56:f2:e3:4c:f3:bd:20:0e:94:7b:1d:3e:a1:8e:71:
ec:fe:6b:ed:cc:94:bc:8a:11:ef:35:bf:13:89:af:0e:bb:60:
5d:c1:d8:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+lZ8S7qLdZitrQgd5PDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwMTAxMDM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODBjNGFmNzMxOGMzOTFiN2U5NDc1MzlkMGRlOWNhZjI3N2Y0OTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsF7+duvYyPYDGXtSEHThEEHRBIh
6CeASvIEODRloWtLZjZHfFHeIK4WysWPutq8fXxsKGLVvgf/U/6FmMvHFuFkblhP
eabJ2YLo4R9wzcBZfAgOMHy+X0jq26p8pliPSFQJAW76s8ki1yL1PQdNC3crz4q4
VN0XCP9PdfmxeMXh6rHtSlrAx54va9FGgxDc8N6BY7geQuW+OOOt2L26Qv3mXVGr
voEsPIHoy0IugKp9KoykCzosTQ1YSM8GT61nDVtiQonpy/RIT59b6IpZt+hCFTsg
jVF1N4ETeHVlxCerCZaDlWQ9cYAM/YP1/JkjACdRez9E7fKi3vZqspA1OQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAgMSvcxjDkbfpR1OdDenK8nf0llMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvQ0F4Szl6R01PUnQtbEhVNTBONmNyeWRfU1dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUQwgAwQC
V2ucMA0GCSqGSIb3DQEBCwUAA4IBAQCSbJhv1t7gbxH6fhvXkz+FsUb/15Q5vuf5
gciiuHkBOoZCk0ysHMf/CzsIONLvCeyVk+KjtJaBqa9r+yBd58FZlWGpVH/GD4G8
urGo/vNoPQ6IoKpbgNYzHiOsA2kBEZHHA4yLPlIeLmT0iig2uJd2N0r32LF4xO9t
vkqW83zWXbCozeLDuYbnUnSQ1BrtDV+wLGL4OlI2nSr0lq2bneu74wGy91iwfGS9
PHbxFt//iAjzhNFRrjeCrZ68H3rjp93PWkHFmvrbE/kBs3eBwX90Goywhdhpk14b
0B1W8uNM870gDpR7HT6hjnHs/mvtzJS8ihHvNb8Tia8Ou2BdwdjD
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:03 2025 by rpki-client