Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5xMTX3Oz71O0HKka0CwEtQhobAw.roa
File: 5xMTX3Oz71O0HKka0CwEtQhobAw.roa (raw, json)
Hash identifier: eRr/PLLtVV+0rflk5rVD9GGW9AOZLBPsZ7t9kIFAtgo=
Subject key identifier: E7:13:13:5F:73:B3:EF:53:B4:1C:A9:1A:D0:2C:04:B5:08:68:6C:0C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019585C5CA0CDF77AA5AD4D4B88AB59B9BEE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5xMTX3Oz71O0HKka0CwEtQhobAw.roa
Signing time: Tue 11 Mar 2025 15:14:46 +0000
ROA not before: Tue 11 Mar 2025 15:14:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212938
IP address blocks: 81.181.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:c5:ca:0c:df:77:aa:5a:d4:d4:b8:8a:b5:9b:9b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 11 15:14:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e713135f73b3ef53b41ca91ad02c04b508686c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:9b:6e:db:62:fc:d3:d9:70:ce:14:08:47:
7b:20:15:e8:4c:bf:32:83:03:e7:f4:83:96:2e:db:
7f:fd:4f:38:e8:58:18:cc:16:84:b4:b4:99:1b:00:
1f:23:c4:51:34:dc:bc:ae:50:65:52:ff:ae:27:c8:
cf:ca:be:ce:42:5d:a9:99:74:dd:cb:5b:a3:54:f2:
53:76:a4:64:a6:a7:1a:12:1d:67:fb:33:b3:98:ab:
42:50:6a:1b:0c:3f:5e:6d:8a:3f:ac:87:49:98:1f:
6d:70:3f:9b:22:89:d6:70:1c:a9:b6:b5:2d:be:4c:
60:59:70:18:6c:39:88:e7:db:08:ba:3d:1c:d3:33:
a6:4f:20:e6:6a:25:e0:77:14:2a:14:dc:40:a6:1e:
0c:6b:4c:f6:ec:6f:c4:a7:ce:91:73:97:33:f7:15:
31:09:41:b0:0a:84:54:21:b5:b5:18:59:aa:9b:fa:
19:04:91:35:28:9d:56:3d:0b:35:fe:f4:81:c1:56:
b5:d3:e7:c3:5f:19:a8:0f:08:29:a9:73:a8:dc:52:
f5:98:0b:68:1e:4c:26:a6:fd:0d:4a:c0:d6:6c:b8:
0a:97:bc:bf:48:22:b8:86:60:71:4b:4c:71:e1:b0:
b1:23:38:f6:65:7a:98:8c:66:98:43:e8:e4:d6:a9:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:13:5F:73:B3:EF:53:B4:1C:A9:1A:D0:2C:04:B5:08:68:6C:0C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5xMTX3Oz71O0HKka0CwEtQhobAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:10:fe:ad:4e:5a:23:b0:cf:6d:86:11:87:d9:d3:96:95:cd:
7d:1a:40:4e:20:0b:ec:13:bc:b1:42:f0:bd:68:58:84:a1:83:
a3:e9:99:fd:a3:07:f4:ad:86:57:01:7c:41:c9:93:6b:e2:ce:
1d:a7:fe:2d:6b:14:3d:0e:15:f2:45:7f:c0:87:46:b7:c0:69:
ab:9f:dc:37:fb:68:52:bc:6d:8d:56:08:15:2d:39:a2:3c:aa:
ea:f3:68:00:34:c9:39:a3:e9:32:46:d3:a2:30:9c:de:b1:48:
d8:36:71:1d:31:fa:a2:75:15:2e:4d:f5:eb:7d:c5:9e:95:e6:
0f:ff:e8:8b:72:cd:bd:03:40:96:ff:1a:40:15:a5:8d:39:4c:
d1:88:45:61:96:1b:b8:82:44:e2:da:18:fc:08:b6:7d:0f:af:
7a:1f:3e:12:f2:36:00:6b:eb:43:e4:da:d3:d1:b3:cb:72:de:
63:20:a5:2b:2a:97:70:c3:9e:1b:27:5e:2c:b6:ad:e1:52:03:
f6:bb:11:09:7d:3b:b2:08:54:2b:f1:41:c9:78:da:a8:f7:a9:
52:61:56:65:35:96:bd:0a:c6:f2:35:b1:dd:7f:27:8c:6d:c1:
8a:7d:1d:14:16:3c:c8:0f:89:a8:9f:4a:00:11:3b:23:70:cf:
63:fe:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:21 2025 by rpki-client