Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/Xp6Av0k8Jw85tGpea19kV0rC7zU.roa
File: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (raw, json)
Hash identifier: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=
Subject key identifier: 5E:9E:80:BF:49:3C:27:0F:39:B4:6A:5E:6B:5F:64:57:4A:C2:EF:35
Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial: 019427B682B4C25DB97E65DDCEEDEEF375ED
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/Xp6Av0k8Jw85tGpea19kV0rC7zU.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.130.49.0/24 maxlen: 24
2a13:141:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:82:b4:c2:5d:b9:7e:65:dd:ce:ed:ee:f3:75:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9e80bf493c270f39b46a5e6b5f64574ac2ef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cb:20:99:a3:c8:7a:3d:4c:4a:33:92:f3:28:
46:63:0c:df:e3:fd:d3:84:19:95:fc:5f:82:d7:17:
10:58:c4:e5:c4:5c:70:6d:4f:4d:ae:6b:97:cd:17:
a2:0c:87:0a:18:57:a2:78:e1:eb:05:22:cb:22:44:
6c:d6:d5:cf:15:b7:78:37:9c:1d:90:94:4e:56:f3:
eb:1b:be:be:14:7c:c0:5d:7c:dd:89:0b:fd:cd:93:
73:5b:68:b6:c7:e4:54:90:3d:b3:08:01:70:23:43:
4d:9a:b0:d1:68:00:d1:05:20:50:16:28:83:af:3f:
40:7f:6c:bf:e7:dc:0c:98:68:6a:9f:11:47:84:6e:
29:ac:34:9b:2b:ef:9a:ca:e6:50:a9:c8:52:d0:ae:
0d:0d:47:7c:b4:2e:ed:36:99:b7:d2:e5:b6:8f:6b:
93:63:87:15:9a:f4:b4:57:84:ac:0d:78:15:64:b5:
0d:5b:cb:13:49:da:48:70:79:2d:c2:17:58:15:1d:
d1:61:6a:91:0e:f9:49:52:75:cb:29:61:34:9c:35:
14:4d:6a:a1:14:7b:23:f0:ef:e8:20:9a:4f:0e:34:
cf:d8:21:d7:b3:d0:94:e3:fd:61:79:02:c4:1b:2e:
b5:c4:76:45:f8:74:1a:32:13:b9:38:10:32:4b:7d:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:80:BF:49:3C:27:0F:39:B4:6A:5E:6B:5F:64:57:4A:C2:EF:35
X509v3 Authority Key Identifier:
keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/Xp6Av0k8Jw85tGpea19kV0rC7zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.49.0/24
IPv6:
2a13:141:3::/48
Signature Algorithm: sha256WithRSAEncryption
98:99:33:34:f6:e9:30:71:dd:b4:5f:fe:cd:fe:3c:be:01:08:
25:c1:79:c0:4b:ab:b1:74:a0:73:a1:7f:02:3d:43:da:c6:39:
ca:bb:56:c6:20:1c:07:7f:81:42:8e:5b:54:4c:50:f8:c5:97:
ac:fa:fa:7a:55:25:e5:23:43:7a:f2:24:2d:b9:34:bf:dd:ef:
8f:df:60:bc:83:2e:8b:f2:de:61:43:f3:55:69:c3:0e:42:de:
fd:38:00:31:26:76:c6:8b:8b:5d:ae:c9:94:6c:cb:d5:ff:ac:
4d:15:40:36:d1:9c:3c:88:00:8a:15:91:c1:0a:c8:9b:6b:a1:
40:83:4a:b7:56:e5:68:cd:a8:a8:07:33:7a:e4:97:6f:2d:05:
3b:81:96:da:1e:a1:ca:6a:fa:76:05:fa:37:90:f3:82:6f:ab:
1b:96:26:40:ad:3c:7c:23:b3:cb:b2:11:92:d9:3d:bf:70:80:
89:da:ff:1c:b5:4a:28:25:5f:78:52:84:99:e3:50:40:0d:94:
58:5f:a2:d2:88:96:f7:22:87:3a:7e:ba:2c:5b:e4:6b:95:a2:
5e:87:3a:9a:17:ce:52:25:23:fe:b1:02:9f:b0:95:f0:c3:ae:
aa:ec:09:96:9f:b1:6e:77:40:dc:8d:65:69:c8:27:be:3e:07:
60:24:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:29 2025 by rpki-client