Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/O442f9rKCameMmZGS2am4On1RJE.roa
File: O442f9rKCameMmZGS2am4On1RJE.roa (raw, json)
Hash identifier: Tjn+0NJyIaKfDErYElD/Vnb1U5GiOqlQwXo7lUYpajU=
Subject key identifier: 3B:8E:36:7F:DA:CA:09:A9:9E:32:66:46:4B:66:A6:E0:E9:F5:44:91
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019425FC9BD4F93389DCCE33524C38FC26DC
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/O442f9rKCameMmZGS2am4On1RJE.roa
Signing time: Thu 02 Jan 2025 07:48:19 +0000
ROA not before: Thu 02 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 81.90.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9b:d4:f9:33:89:dc:ce:33:52:4c:38:fc:26:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 2 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b8e367fdaca09a99e3266464b66a6e0e9f54491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:3b:8a:d4:4b:96:8a:83:66:79:80:6d:3e:
ec:d6:22:ff:a7:49:dc:8e:79:15:ae:2d:19:e8:f5:
94:f8:1a:aa:f2:b5:82:89:36:2e:a0:dc:47:d9:48:
a9:e6:c4:b5:98:b4:56:83:2a:e7:61:85:23:f1:2f:
db:fc:14:1f:52:5c:98:67:94:fc:06:42:54:e5:33:
16:93:78:91:b0:a1:ea:a0:2f:40:46:fa:c9:a2:e8:
0e:a8:6a:81:8e:a1:72:86:9d:40:99:b4:7a:34:d6:
67:ce:8b:5f:5b:7a:d9:b8:40:a4:c3:56:c7:23:a4:
f0:1e:85:70:84:0b:13:6a:d0:e5:3c:0d:98:26:17:
91:82:b1:e1:01:c3:6d:3d:53:8a:1d:2f:e7:67:e7:
10:bb:40:99:2b:8f:6c:20:74:81:3e:a1:30:8c:e6:
5b:6d:b8:5e:1e:1a:6a:20:a0:71:d6:1c:a7:7a:77:
d5:4e:99:c1:54:17:29:5a:14:34:d4:36:d6:9c:7d:
b5:94:03:0b:ae:e5:26:49:95:ca:36:8c:5d:f5:48:
e4:23:a4:d5:94:65:26:b5:74:52:b1:e8:e3:86:2b:
f7:5f:c4:31:4b:3b:c4:7f:4e:d7:6d:62:15:4c:8d:
6e:08:32:fe:ee:91:43:bb:2d:77:2c:d7:12:cc:1e:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8E:36:7F:DA:CA:09:A9:9E:32:66:46:4B:66:A6:E0:E9:F5:44:91
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/O442f9rKCameMmZGS2am4On1RJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.25.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fa:0f:a5:f2:d7:73:bd:16:b1:c8:25:46:f5:1b:21:2f:aa:
96:24:9b:69:6d:4c:78:55:30:8d:0f:7f:31:a3:75:8b:0f:d5:
77:ea:5f:59:01:37:83:71:9e:cd:87:01:45:12:63:37:09:eb:
2c:66:4d:b6:57:83:a3:8b:1b:e5:46:71:6e:39:47:8e:59:1a:
ce:ac:49:3a:aa:9a:b1:7e:5b:97:50:40:3d:e3:4c:f5:7e:6d:
e8:74:c8:be:20:fd:04:12:94:09:3f:ed:a0:b8:2d:cc:0c:b3:
6e:1e:c9:a9:1e:23:55:5a:d5:ff:43:5d:20:67:4f:de:5b:bd:
e7:bf:d6:27:da:95:13:53:cc:cc:11:47:e6:1f:75:33:78:fe:
5e:d5:a9:8d:17:2e:6d:ef:13:96:0f:84:2d:ee:b4:0f:f9:61:
fa:56:03:df:2d:81:43:42:6a:b8:26:2b:95:33:9f:7e:e4:df:
e6:30:7f:50:b0:f2:64:d1:d6:7b:d0:f4:93:86:4a:3d:50:1d:
c2:f5:4e:c6:1a:2f:5b:7c:3d:19:aa:84:28:60:9b:b0:27:b2:
4e:4c:92:e9:61:4b:5e:f5:3f:b9:f3:55:bc:af:ab:e1:d4:df:
3a:c8:ee:37:40:e1:ae:eb:67:0c:94:ec:05:3b:f1:29:f7:30:
55:0d:ee:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/JvU+TOJ3M4zUkw4/CbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjUwMTAyMDc0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjhlMzY3ZmRhY2EwOWE5OWUzMjY2NDY0YjY2YTZlMGU5ZjU0NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yo7itRLloqDZnmAbT7s1iL/p0nc
jnkVri0Z6PWU+Bqq8rWCiTYuoNxH2Uip5sS1mLRWgyrnYYUj8S/b/BQfUlyYZ5T8
BkJU5TMWk3iRsKHqoC9ARvrJougOqGqBjqFyhp1AmbR6NNZnzotfW3rZuECkw1bH
I6TwHoVwhAsTatDlPA2YJheRgrHhAcNtPVOKHS/nZ+cQu0CZK49sIHSBPqEwjOZb
bbheHhpqIKBx1hynenfVTpnBVBcpWhQ01DbWnH21lAMLruUmSZXKNoxd9UjkI6TV
lGUmtXRSsejjhiv3X8QxSzvEf07XbWIVTI1uCDL+7pFDuy13LNcSzB6qxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDuONn/aygmpnjJmRktmpuDp9USRMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvTzQ0MmY5cktDYW1lTW1aR1MyYW00T24xUkpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVoZMA0G
CSqGSIb3DQEBCwUAA4IBAQAH+g+l8tdzvRaxyCVG9RshL6qWJJtpbUx4VTCND38x
o3WLD9V36l9ZATeDcZ7NhwFFEmM3CessZk22V4OjixvlRnFuOUeOWRrOrEk6qpqx
fluXUEA940z1fm3odMi+IP0EEpQJP+2guC3MDLNuHsmpHiNVWtX/Q10gZ0/eW73n
v9Yn2pUTU8zMEUfmH3UzeP5e1amNFy5t7xOWD4Qt7rQP+WH6VgPfLYFDQmq4JiuV
M59+5N/mMH9QsPJk0dZ70PSThko9UB3C9U7GGi9bfD0ZqoQoYJuwJ7JOTJLpYUte
9T+581W8r6vh1N86yO43QOGu62cMlOwFO/Ep9zBVDe75
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:42 2025 by rpki-client