Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DJ-OBveNQUMt4E-0GPwOCk2cEVY.roa
File: DJ-OBveNQUMt4E-0GPwOCk2cEVY.roa (raw, json)
Hash identifier: UPFskdV8cjWBd2UQa05cKfRRXF7qkW/8QbR26dd1yF4=
Subject key identifier: 0C:9F:8E:06:F7:8D:41:43:2D:E0:4F:B4:18:FC:0E:0A:4D:9C:11:56
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D648E49357D5DC7CE06748FBFBF7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DJ-OBveNQUMt4E-0GPwOCk2cEVY.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 81.29.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d6:48:e4:93:57:d5:dc:7c:e0:67:48:fb:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c9f8e06f78d41432de04fb418fc0e0a4d9c1156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:9f:92:b8:20:ec:df:05:74:a4:2c:dc:88:
e0:1d:47:a8:b1:01:0a:43:d8:7b:63:ed:33:93:6c:
27:2d:1b:4b:6b:3a:99:5a:5e:7b:ac:58:b0:21:e7:
53:4d:ba:79:4f:6a:8f:cd:92:f4:8e:38:38:72:b9:
67:11:a6:c9:11:58:23:cc:33:bc:11:19:bc:fd:b1:
43:dc:0b:e0:e1:34:dd:7f:ce:9b:25:ee:ef:c6:e4:
73:26:17:12:e5:2a:a4:8b:f2:ae:6b:fe:11:b5:20:
4b:b0:0d:88:3d:e0:b4:9f:3a:8a:d5:9f:33:9f:dc:
54:fd:d0:45:ed:d3:1d:df:0a:2e:14:2e:e7:8d:09:
1a:80:08:bc:97:72:b6:cc:f2:52:e0:99:b3:5d:a0:
7a:0f:a0:17:e2:aa:65:ab:d0:1c:7e:de:9c:d7:64:
1a:0e:e0:4f:d9:3b:bb:f2:af:de:50:5b:0f:ca:bd:
47:29:ee:94:04:a0:4b:a5:0d:7c:f7:18:ea:9a:c8:
a1:86:02:25:e1:32:86:d8:a1:35:ab:9c:89:39:32:
16:a9:bb:1b:64:71:61:fe:54:73:ec:4b:e0:9c:bd:
30:16:bb:fb:4a:a9:d3:98:62:88:0d:8f:44:b8:cd:
d5:e5:b3:cd:ec:d5:f7:22:1e:1c:6b:cc:d2:b8:92:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9F:8E:06:F7:8D:41:43:2D:E0:4F:B4:18:FC:0E:0A:4D:9C:11:56
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/DJ-OBveNQUMt4E-0GPwOCk2cEVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.146.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fe:09:36:2d:42:97:ef:e3:c5:6f:8a:b4:40:9a:70:45:79:
a1:79:ef:87:b6:ec:95:a6:d7:21:71:d4:04:0a:09:44:7c:66:
87:63:9d:f6:99:ab:e4:1e:1e:02:e3:49:ba:6f:f7:8b:f4:8d:
7b:e8:62:07:8e:a3:78:b3:28:5f:9b:f5:bc:c7:dc:b3:32:07:
f9:40:c5:9b:04:c8:6a:ff:05:7b:60:1c:6a:6c:98:5f:56:39:
31:ac:b3:de:14:58:fd:b6:ac:02:ec:6d:b1:09:c2:1d:2d:8a:
67:c1:5d:ac:2a:5b:b0:9e:64:75:73:de:7d:e2:5b:1a:1d:77:
08:4b:88:3f:ae:3f:cb:ec:87:f7:26:81:4d:4d:6d:59:30:73:
d1:51:e5:98:b3:eb:78:f5:a6:37:dc:d2:fe:17:b5:77:cf:5b:
57:59:ee:fe:9d:fa:be:d1:37:a0:11:62:9e:06:ee:49:0e:2f:
20:13:44:d5:a0:c5:e9:bd:72:32:31:bc:d6:00:05:97:68:f8:
2c:b4:15:d9:2f:ae:27:bb:1c:4f:2e:b6:02:a6:8e:92:93:db:
41:93:1d:49:24:30:63:ca:b0:c6:96:29:f6:be:a1:ae:f2:f6:
ac:6c:01:b7:ff:49:f7:0b:6a:95:57:21:f9:ba:3d:9b:02:66:
49:a4:be:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1tZI5JNX1dx84GdI+/v3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwMTAxMjE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzlmOGUwNmY3OGQ0MTQzMmRlMDRmYjQxOGZjMGUwYTRkOWMxMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupCfkrgg7N8FdKQs3IjgHUeosQEK
Q9h7Y+0zk2wnLRtLazqZWl57rFiwIedTTbp5T2qPzZL0jjg4crlnEabJEVgjzDO8
ERm8/bFD3Avg4TTdf86bJe7vxuRzJhcS5Sqki/Kua/4RtSBLsA2IPeC0nzqK1Z8z
n9xU/dBF7dMd3wouFC7njQkagAi8l3K2zPJS4JmzXaB6D6AX4qplq9Acft6c12Qa
DuBP2Tu78q/eUFsPyr1HKe6UBKBLpQ189xjqmsihhgIl4TKG2KE1q5yJOTIWqbsb
ZHFh/lRz7EvgnL0wFrv7SqnTmGKIDY9EuM3V5bPN7NX3Ih4ca8zSuJLwXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyfjgb3jUFDLeBPtBj8DgpNnBFWMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvREotT0J2ZU5RVU10NEUtMEdQd09DazJjRVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2SMA0G
CSqGSIb3DQEBCwUAA4IBAQAp/gk2LUKX7+PFb4q0QJpwRXmhee+HtuyVptchcdQE
CglEfGaHY532mavkHh4C40m6b/eL9I176GIHjqN4syhfm/W8x9yzMgf5QMWbBMhq
/wV7YBxqbJhfVjkxrLPeFFj9tqwC7G2xCcIdLYpnwV2sKluwnmR1c9594lsaHXcI
S4g/rj/L7If3JoFNTW1ZMHPRUeWYs+t49aY33NL+F7V3z1tXWe7+nfq+0TegEWKe
Bu5JDi8gE0TVoMXpvXIyMbzWAAWXaPgstBXZL64nuxxPLrYCpo6Sk9tBkx1JJDBj
yrDGlin2vqGu8vasbAG3/0n3C2qVVyH5uj2bAmZJpL6t
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:04:44 2025 by rpki-client