Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/oakZY3QnKRwWzYloEiFZ8HoTr2g.roa
File: oakZY3QnKRwWzYloEiFZ8HoTr2g.roa (raw, json)
Hash identifier: iDEUgORMnCsN3gpDGjcsgQC8x1/CODG3Yu8RLzQ2hTY=
Subject key identifier: A1:A9:19:63:74:27:29:1C:16:CD:89:68:12:21:59:F0:7A:13:AF:68
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 0194A7C609C88B57871C3C97AFC5BB5ADBD0
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/oakZY3QnKRwWzYloEiFZ8HoTr2g.roa
Signing time: Mon 27 Jan 2025 12:39:21 +0000
ROA not before: Mon 27 Jan 2025 12:39:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 185.17.112.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:c6:09:c8:8b:57:87:1c:3c:97:af:c5:bb:5a:db:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jan 27 12:39:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a919637427291c16cd8968122159f07a13af68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:e1:58:9c:5a:95:d7:00:14:7e:b7:02:40:
ff:3f:92:82:57:bf:88:44:64:43:7f:70:89:3d:2a:
6d:23:e8:ec:69:49:6f:c3:e9:ce:1c:9c:3e:ec:4a:
9e:12:0e:33:6b:66:d6:9a:64:15:59:18:c6:dd:fe:
74:14:a8:59:9b:3e:e1:74:22:45:e2:4d:f7:74:b4:
1b:90:be:b3:f7:79:80:3e:a8:54:16:f9:75:c6:11:
ca:d8:84:68:c7:40:02:d9:f7:93:50:29:96:03:2a:
10:69:c4:23:73:75:a5:8d:94:1a:33:8c:99:12:a5:
d1:40:10:1a:50:d0:cf:81:c3:33:2f:e0:95:79:8f:
04:af:09:b1:c3:62:d4:32:f8:d8:b1:e5:6f:b4:e6:
94:27:ee:c7:ff:0a:0c:bd:ff:33:71:5d:28:1e:e1:
3f:29:c2:d8:11:8c:23:b9:7c:bd:04:e2:08:51:36:
97:36:74:81:0e:d3:5e:ff:e3:a8:34:e0:12:49:99:
dd:9c:fc:4f:dd:98:50:28:12:d8:ea:7d:60:9a:89:
f4:44:bf:32:73:df:94:70:3c:32:58:55:b5:6a:3e:
e8:dd:af:00:26:5c:1d:23:fc:e5:d5:e1:1f:1a:85:
ab:32:c4:61:1e:59:c9:3a:d4:00:97:85:11:50:b5:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A9:19:63:74:27:29:1C:16:CD:89:68:12:21:59:F0:7A:13:AF:68
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/oakZY3QnKRwWzYloEiFZ8HoTr2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.112.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:2f:74:48:a2:79:f4:7a:99:5e:e2:f5:b9:d7:4f:85:59:
68:13:65:08:57:34:a0:59:a6:43:22:2a:21:99:57:10:aa:0e:
b4:cb:19:12:5c:c0:fd:cb:17:e4:82:4d:2d:b6:a8:83:ce:f6:
5e:ae:7f:92:e1:f8:3f:b6:62:dc:b4:1d:1c:ef:07:cd:39:9e:
d2:12:0b:98:1f:17:af:af:95:a6:d0:43:11:eb:3f:57:23:c9:
d4:c8:65:02:31:1c:05:a3:ac:90:2e:f0:91:e0:5b:7a:96:28:
ad:e5:fc:d0:89:5c:56:4a:54:80:78:8a:0a:17:82:3b:a1:63:
3c:b5:13:2c:02:c3:b0:32:f5:5a:fd:6a:95:b0:53:f8:5f:6c:
c4:dd:a8:14:25:02:fb:53:90:ab:f1:6e:2d:b9:e0:3f:ff:a3:
d0:dc:1e:6d:82:5d:23:a2:f3:a5:a6:86:6c:14:79:78:dd:ce:
78:d5:25:be:cb:f8:0d:85:06:7e:49:6a:c7:11:f9:17:7e:0a:
03:97:7d:db:d2:c1:18:36:17:d6:43:c2:cd:ed:2b:36:61:24:
3c:c0:58:7e:eb:8b:f9:be:b8:24:d0:83:44:22:98:48:87:2f:
2f:6d:23:5e:de:b8:d7:d8:84:55:dc:94:90:d4:0e:0c:28:1f:
7b:aa:0e:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSnxgnIi1eHHDyXr8W7WtvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NTZlN2ZiNTc3MmY5NzllZGQ1ZTVjNWFhNjNlYjJiOWMw
ZGRjOGUwHhcNMjUwMTI3MTIzOTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWE5MTk2Mzc0MjcyOTFjMTZjZDg5NjgxMjIxNTlmMDdhMTNhZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbXhWJxaldcAFH63AkD/P5KCV7+I
RGRDf3CJPSptI+jsaUlvw+nOHJw+7EqeEg4za2bWmmQVWRjG3f50FKhZmz7hdCJF
4k33dLQbkL6z93mAPqhUFvl1xhHK2IRox0AC2feTUCmWAyoQacQjc3WljZQaM4yZ
EqXRQBAaUNDPgcMzL+CVeY8Erwmxw2LUMvjYseVvtOaUJ+7H/woMvf8zcV0oHuE/
KcLYEYwjuXy9BOIIUTaXNnSBDtNe/+OoNOASSZndnPxP3ZhQKBLY6n1gmon0RL8y
c9+UcDwyWFW1aj7o3a8AJlwdI/zl1eEfGoWrMsRhHlnJOtQAl4URULXHYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGpGWN0JykcFs2JaBIhWfB6E69oMB8GA1UdIwQY
MBaAFDVW5/tXcvl57dXlxapj6yucDdyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZibi0xZHktWG50MWVYRnFtUHJLNXdOM0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kY2ZhMmEtNzZmNy00NDQzLWE0OTUt
NmJiMzBhODczMGVkLzEvb2FrWlkzUW5LUndXellsb0VpRlo4SG9UcjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kY2ZhMmEtNzZmNy00NDQzLWE0OTUtNmJiMzBhODczMGVk
LzEvTlZibi0xZHktWG50MWVYRnFtUHJLNXdOM0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRFwMA0G
CSqGSIb3DQEBCwUAA4IBAQA9Ni90SKJ59HqZXuL1uddPhVloE2UIVzSgWaZDIioh
mVcQqg60yxkSXMD9yxfkgk0ttqiDzvZern+S4fg/tmLctB0c7wfNOZ7SEguYHxev
r5Wm0EMR6z9XI8nUyGUCMRwFo6yQLvCR4Ft6liit5fzQiVxWSlSAeIoKF4I7oWM8
tRMsAsOwMvVa/WqVsFP4X2zE3agUJQL7U5Cr8W4tueA//6PQ3B5tgl0jovOlpoZs
FHl43c541SW+y/gNhQZ+SWrHEfkXfgoDl33b0sEYNhfWQ8LN7Ss2YSQ8wFh+64v5
vrgk0INEIphIhy8vbSNe3rjX2IRV3JSQ1A4MKB97qg7x
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:35:28 2025 by rpki-client