Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Xb1mwb7Ra2QKAGyBlj6lo8PjJQ8.roa
File: Xb1mwb7Ra2QKAGyBlj6lo8PjJQ8.roa (raw, json)
Hash identifier: RHHODFHDyXmcRPsfPnEgEOHEg/KL1hZFaJJNm6uUB/4=
Subject key identifier: 5D:BD:66:C1:BE:D1:6B:64:0A:00:6C:81:96:3E:A5:A3:C3:E3:25:0F
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C2602220B165D465FC43A393274DA
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Xb1mwb7Ra2QKAGyBlj6lo8PjJQ8.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 5.178.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:26:02:22:0b:16:5d:46:5f:c4:3a:39:32:74:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dbd66c1bed16b640a006c81963ea5a3c3e3250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:a5:ee:81:1b:98:b7:ac:2f:0d:b1:9d:7d:
54:46:df:5b:e1:db:01:c0:e4:ad:92:83:43:fd:c2:
08:c9:24:90:f2:c9:1e:15:07:6b:b6:ae:28:20:79:
0f:8d:fb:66:02:5b:d5:29:17:c5:84:fe:60:8e:07:
b1:d4:46:1b:bd:4b:aa:70:03:44:61:90:0a:86:ec:
3f:7e:98:3c:b4:81:5c:3e:02:6c:22:3b:35:c9:83:
4c:12:5b:51:fd:c8:23:30:84:95:a7:cc:09:bb:15:
da:be:ae:5f:9c:96:e5:5e:8a:2a:bb:da:66:fd:97:
bc:82:09:c0:1b:01:11:20:13:14:4c:e2:43:cf:ae:
4c:b2:1d:0b:46:58:47:75:87:de:e3:d5:ce:9c:bb:
50:10:df:fb:19:94:8c:32:ab:a7:4e:97:21:87:5a:
16:a6:86:e1:00:38:c3:1d:e3:59:84:eb:c1:e5:a8:
0d:86:08:c3:f8:9a:eb:71:18:5e:ca:04:dc:f9:07:
bd:0d:90:06:18:08:2e:64:f0:be:de:e8:00:ac:f2:
88:5d:e2:21:af:3f:e3:ca:3c:92:97:e8:75:26:9d:
8e:30:52:b7:61:e5:73:77:0c:40:da:10:93:42:9b:
fc:cd:1e:9e:c8:a7:2b:85:49:a1:db:98:28:b0:96:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:66:C1:BE:D1:6B:64:0A:00:6C:81:96:3E:A5:A3:C3:E3:25:0F
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Xb1mwb7Ra2QKAGyBlj6lo8PjJQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2a:ae:fb:79:c8:27:5c:88:4d:8f:b4:66:07:4f:a3:c2:62:
a0:a1:b5:41:ec:d2:77:a0:7a:5a:e3:4a:f1:27:36:5c:3e:44:
c8:2c:81:9f:f4:04:0b:7b:ef:10:93:da:d2:1f:ad:71:72:ef:
63:d8:bf:96:a8:2e:4a:0e:43:90:a0:a5:13:da:88:28:59:64:
c7:55:aa:c8:07:69:03:e8:a2:6e:e3:98:65:72:81:c3:c9:33:
ef:0d:ec:a1:0d:3f:36:c3:74:85:e0:0c:79:63:f5:ea:59:a9:
6b:16:0c:21:31:5c:40:75:dc:46:f0:10:13:39:88:80:88:db:
12:67:91:c5:f1:9e:90:83:13:c8:65:27:ef:ce:5c:94:52:8f:
17:81:7b:82:67:5b:bf:cc:74:2c:16:2d:ae:5d:d8:99:2b:06:
94:e5:23:b1:bf:82:bf:5c:0a:c2:7c:1e:cd:05:b5:cd:c6:37:
23:a1:08:7c:68:bb:b3:20:9e:a0:04:c0:ba:75:45:bf:da:a7:
4f:c9:bf:be:f2:46:d5:74:ae:a2:83:a5:98:b6:51:c9:e8:e0:
f5:01:44:0c:81:eb:c4:5b:86:80:d4:dc:ff:d2:d8:80:d2:0b:
7f:c1:6b:16:75:3a:e7:96:91:4a:91:62:a7:90:2c:4b:c8:3d:
8a:f8:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:20:10 2025 by rpki-client