Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/N8IkUZJzTBOZlu70RR-lhbMLsyk.roa
File: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (raw, json)
Hash identifier: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=
Subject key identifier: 37:C2:24:51:92:73:4C:13:99:96:EE:F4:45:1F:A5:85:B3:0B:B3:29
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 019428231935DB81E52B05B225D85798CA5A
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/N8IkUZJzTBOZlu70RR-lhbMLsyk.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24626
IP address blocks: 81.4.192.0/18 maxlen: 32
81.18.128.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:19:35:db:81:e5:2b:05:b2:25:d8:57:98:ca:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c2245192734c139996eef4451fa585b30bb329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:f0:31:1f:16:bf:29:5a:3f:12:eb:36:32:
07:60:90:87:77:c0:87:9d:10:a6:d6:8c:ba:4f:97:
56:d0:65:b8:d9:43:53:0b:31:f7:14:6c:46:e1:57:
d4:34:b4:a6:ff:33:5d:d4:bd:25:a0:ae:d3:e9:4d:
27:c0:ed:5f:40:df:64:07:b1:96:3e:4c:fe:92:2f:
d4:1d:74:ed:c2:0e:9a:8c:ff:11:3d:5d:82:4b:f4:
3b:37:fe:d8:bc:b9:57:7e:18:bb:c6:3a:eb:54:92:
f4:5b:94:a0:50:23:7e:36:35:28:60:ee:22:12:1e:
e1:98:81:99:b8:10:d0:8a:d6:1e:19:9f:0c:ac:57:
15:17:d4:a7:5e:fe:a8:87:bf:d0:64:95:24:1b:a6:
ea:38:d9:7e:35:b3:b1:29:5d:97:1e:89:46:fa:7a:
5f:91:da:fd:6f:23:4f:83:5b:a3:b5:ae:59:fb:6f:
c2:f6:81:1e:45:b3:84:54:31:20:ec:28:d9:13:7c:
b9:78:a5:3b:4a:26:80:cd:1e:99:2c:95:31:5b:27:
85:00:08:1c:f4:1d:ac:2a:ab:ba:f4:bb:8c:60:7f:
f5:51:91:84:8c:f9:6b:dc:0f:11:ce:02:bb:26:90:
e7:a8:eb:ae:d1:d1:bb:e4:4c:4e:4d:f0:7f:61:53:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:24:51:92:73:4C:13:99:96:EE:F4:45:1F:A5:85:B3:0B:B3:29
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/N8IkUZJzTBOZlu70RR-lhbMLsyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.192.0/18
81.18.128.0/19
Signature Algorithm: sha256WithRSAEncryption
29:94:d9:51:00:08:73:5d:5f:8e:d9:c0:e7:73:a5:12:e5:ef:
48:c9:5e:35:24:55:c6:75:96:1d:40:59:7b:44:d3:ca:fa:a2:
6d:c6:c0:8e:04:c4:1e:26:30:bd:be:00:4c:9d:49:52:27:9e:
40:0b:6e:c2:06:f4:43:1b:5a:44:17:6f:e3:21:c0:5b:8e:da:
4b:98:1e:a8:f2:17:04:bc:80:71:53:a9:4a:97:c0:3c:5d:91:
f9:4f:4a:99:d9:ba:b9:8d:e1:ed:6a:1a:cc:ac:34:f6:d1:f6:
03:f3:7f:8b:96:cc:f0:65:a6:39:fa:91:c5:09:61:16:ed:43:
a0:76:9b:fb:c8:87:ff:0b:d3:ce:d7:77:90:48:20:5e:32:4c:
6b:43:25:f3:8e:60:04:ba:5e:f3:68:e4:aa:e5:2f:6d:b8:ba:
45:4f:d9:ef:09:8a:f9:2d:be:b2:b6:5f:ff:48:68:4a:a4:2b:
35:34:b4:cb:1d:16:fb:ff:66:f0:81:3d:75:cc:a0:cc:49:80:
50:9a:a7:36:fd:ce:ee:a0:6e:d7:22:3d:80:79:73:4d:73:97:
94:29:b4:0a:e0:56:2b:19:62:02:4d:83:62:b2:f3:0b:a6:ed:
08:fe:8d:e4:f0:d5:08:34:77:d5:49:b4:da:ab:d5:e9:d3:5a:
67:50:6b:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoIxk124HlKwWyJdhXmMpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjUwMTAyMTc0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2MyMjQ1MTkyNzM0YzEzOTk5NmVlZjQ0NTFmYTU4NWIzMGJiMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JHwMR8WvylaPxLrNjIHYJCHd8CH
nRCm1oy6T5dW0GW42UNTCzH3FGxG4VfUNLSm/zNd1L0loK7T6U0nwO1fQN9kB7GW
Pkz+ki/UHXTtwg6ajP8RPV2CS/Q7N/7YvLlXfhi7xjrrVJL0W5SgUCN+NjUoYO4i
Eh7hmIGZuBDQitYeGZ8MrFcVF9SnXv6oh7/QZJUkG6bqONl+NbOxKV2XHolG+npf
kdr9byNPg1ujta5Z+2/C9oEeRbOEVDEg7CjZE3y5eKU7SiaAzR6ZLJUxWyeFAAgc
9B2sKqu69LuMYH/1UZGEjPlr3A8RzgK7JpDnqOuu0dG75ExOTfB/YVOmNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDfCJFGSc0wTmZbu9EUfpYWzC7MpMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvTjhJa1VaSnpUQk9abHU3MFJSLWxoYk1Mc3lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGUQTAAwQF
URKAMA0GCSqGSIb3DQEBCwUAA4IBAQAplNlRAAhzXV+O2cDnc6US5e9IyV41JFXG
dZYdQFl7RNPK+qJtxsCOBMQeJjC9vgBMnUlSJ55AC27CBvRDG1pEF2/jIcBbjtpL
mB6o8hcEvIBxU6lKl8A8XZH5T0qZ2bq5jeHtahrMrDT20fYD83+LlszwZaY5+pHF
CWEW7UOgdpv7yIf/C9PO13eQSCBeMkxrQyXzjmAEul7zaOSq5S9tuLpFT9nvCYr5
Lb6ytl//SGhKpCs1NLTLHRb7/2bwgT11zKDMSYBQmqc2/c7uoG7XIj2AeXNNc5eU
KbQK4FYrGWICTYNisvMLpu0I/o3k8NUINHfVSbTaq9Xp01pnUGsh
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net