Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/oOYI1o8RT1W_jG5F8_TINuUiUMQ.roa
File: oOYI1o8RT1W_jG5F8_TINuUiUMQ.roa (raw, json)
Hash identifier: SMVQvDfO97QFDnaGUjkB1vbQp6PFud0xX6WvTiegAb0=
Subject key identifier: A0:E6:08:D6:8F:11:4F:55:BF:8C:6E:45:F3:F4:C8:36:E5:22:50:C4
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01946BA8B6B94EE771D5679E13BEDE02CCCE
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/oOYI1o8RT1W_jG5F8_TINuUiUMQ.roa
Signing time: Wed 15 Jan 2025 20:30:06 +0000
ROA not before: Wed 15 Jan 2025 20:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211695
IP address blocks: 81.199.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:a8:b6:b9:4e:e7:71:d5:67:9e:13:be:de:02:cc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 15 20:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0e608d68f114f55bf8c6e45f3f4c836e52250c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:c1:d1:b7:e6:dc:33:92:d4:57:fe:e2:6e:
5b:7a:37:c8:c8:69:77:4e:8d:71:70:cf:8a:86:33:
a6:ee:90:56:1d:d6:06:df:28:97:3d:a7:d2:f1:ac:
3a:28:7f:bd:54:10:7a:4d:10:18:f8:67:43:1a:bd:
25:d5:1a:66:d7:f4:9e:11:d1:e1:38:bc:1f:f4:93:
15:9b:e4:90:03:90:29:cd:4e:a6:e9:a7:e5:97:c2:
4a:02:52:7c:8a:35:ec:67:10:f4:0d:c6:ee:d5:7e:
24:6b:48:a7:2e:f1:90:73:88:f9:89:6e:bb:2c:9e:
70:3b:f0:2e:55:f0:15:90:0d:e6:5c:ba:d8:55:81:
3e:93:a6:fb:bd:03:60:5f:c8:04:04:ca:3f:40:15:
00:39:8d:4a:7f:31:5f:38:e5:4e:80:29:f1:b1:db:
21:28:07:de:f0:d5:17:9c:ea:6a:de:43:1a:a5:42:
65:7f:a5:6f:9a:7a:60:18:dc:62:2b:31:32:db:25:
41:a3:06:88:f4:11:d0:30:2a:84:23:65:3e:ed:89:
76:f2:5c:d1:68:0c:50:e2:3f:2d:8f:23:8c:d5:0e:
5b:e8:d3:29:8b:e0:b7:2b:dd:c4:34:07:2d:43:0c:
ce:a0:d8:0b:33:e9:82:f2:b3:c1:cd:c9:8f:d6:cd:
e9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:08:D6:8F:11:4F:55:BF:8C:6E:45:F3:F4:C8:36:E5:22:50:C4
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/oOYI1o8RT1W_jG5F8_TINuUiUMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.113.0/24
Signature Algorithm: sha256WithRSAEncryption
59:98:60:cb:03:f1:df:2e:26:73:fd:2c:f5:c2:06:20:12:03:
27:a1:bb:d9:1a:0a:5e:b4:de:1e:6c:20:34:61:93:1c:25:c6:
59:ad:bf:4f:71:44:88:69:4c:60:34:53:14:d0:e3:19:28:5a:
32:19:0b:d5:d9:b4:7f:91:58:8e:17:ad:5e:94:35:70:a1:12:
e7:04:a2:32:e9:60:12:e6:ef:53:09:88:31:a2:2f:6d:6d:35:
41:7f:62:04:f5:02:af:8b:3a:2d:3b:fd:c1:19:ac:af:3b:1e:
e4:7e:9e:f2:1a:18:cb:b3:6e:d7:60:93:e8:15:8e:8a:89:32:
66:16:06:b7:41:0f:d6:fd:12:87:d6:c8:68:4f:cb:7c:5f:d0:
7e:10:f0:38:ea:33:f7:1f:b9:7a:70:60:1c:3c:e0:e2:8d:e3:
76:1b:04:e4:20:ac:c6:fe:1a:1c:bc:ce:d7:0e:3b:a5:fb:8a:
13:54:b3:3b:f8:4e:1f:16:58:13:a7:41:3c:89:a5:eb:13:a6:
dd:df:7e:90:3a:b7:e0:01:c2:00:52:9a:38:0c:40:ff:03:c8:
74:b8:a6:b1:17:02:4c:05:0a:b2:81:6a:f8:9a:72:eb:3f:d4:
1d:32:b5:fb:63:e3:c3:90:f1:a4:29:b7:39:4e:7c:65:34:c4:
f4:cc:1f:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRrqLa5Tudx1WeeE77eAszOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjUwMTE1MjAzMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGU2MDhkNjhmMTE0ZjU1YmY4YzZlNDVmM2Y0YzgzNmU1MjI1MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovDB0bfm3DOS1Ff+4m5bejfIyGl3
To1xcM+KhjOm7pBWHdYG3yiXPafS8aw6KH+9VBB6TRAY+GdDGr0l1Rpm1/SeEdHh
OLwf9JMVm+SQA5ApzU6m6afll8JKAlJ8ijXsZxD0Dcbu1X4ka0inLvGQc4j5iW67
LJ5wO/AuVfAVkA3mXLrYVYE+k6b7vQNgX8gEBMo/QBUAOY1KfzFfOOVOgCnxsdsh
KAfe8NUXnOpq3kMapUJlf6VvmnpgGNxiKzEy2yVBowaI9BHQMCqEI2U+7Yl28lzR
aAxQ4j8tjyOM1Q5b6NMpi+C3K93ENActQwzOoNgLM+mC8rPBzcmP1s3pwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDmCNaPEU9Vv4xuRfP0yDblIlDEMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvb09ZSTFvOFJUMVdfakc1RjhfVElOdVVpVU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcdxMA0G
CSqGSIb3DQEBCwUAA4IBAQBZmGDLA/HfLiZz/Sz1wgYgEgMnobvZGgpetN4ebCA0
YZMcJcZZrb9PcUSIaUxgNFMU0OMZKFoyGQvV2bR/kViOF61elDVwoRLnBKIy6WAS
5u9TCYgxoi9tbTVBf2IE9QKvizotO/3BGayvOx7kfp7yGhjLs27XYJPoFY6KiTJm
Fga3QQ/W/RKH1shoT8t8X9B+EPA46jP3H7l6cGAcPODijeN2GwTkIKzG/hocvM7X
Djul+4oTVLM7+E4fFlgTp0E8iaXrE6bd336QOrfgAcIAUpo4DED/A8h0uKaxFwJM
BQqygWr4mnLrP9QdMrX7Y+PDkPGkKbc5TnxlNMT0zB+N
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:31 2025 by rpki-client