Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XqdCMgx4Ym26mnxTgs1ol9TPVaU.roa
File: XqdCMgx4Ym26mnxTgs1ol9TPVaU.roa (raw, json)
Hash identifier: GUn1rcxTJuHdLtOn73gcFCaGGZoM6voINPTtfzJoQww=
Subject key identifier: 5E:A7:42:32:0C:78:62:6D:BA:9A:7C:53:82:CD:68:97:D4:CF:55:A5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3D2645A5E02DB313CAE206B74BB5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XqdCMgx4Ym26mnxTgs1ol9TPVaU.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205275
IP address blocks: 81.181.66.0/23 maxlen: 24
194.102.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3d:26:45:a5:e0:2d:b3:13:ca:e2:06:b7:4b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea742320c78626dba9a7c5382cd6897d4cf55a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:5c:09:05:ba:cd:ed:33:69:04:1a:4e:da:
bf:bd:01:d7:b8:e2:0f:c5:88:3d:7c:5a:4b:bd:3b:
75:05:8e:57:ba:80:a2:2c:4f:b3:dc:96:f0:f2:62:
d5:b8:8d:73:16:60:34:89:91:86:3e:e4:51:72:bc:
01:2f:b0:d4:18:41:7e:e4:cb:eb:d4:4b:6c:09:97:
6f:8a:12:e9:01:62:2a:c8:e0:71:34:e4:f6:b7:b1:
c6:eb:8d:7d:99:2c:cf:14:76:1c:06:f6:d2:4b:f8:
fd:dc:c0:83:b7:6b:3c:4f:f9:c4:24:c7:65:d6:9d:
a5:8f:71:20:a6:84:4d:b7:53:07:54:00:d7:fc:c5:
4f:19:51:93:75:80:f1:32:1a:67:9a:88:34:4c:76:
27:4b:31:de:ac:37:6a:fe:1f:db:8a:65:3b:b2:17:
92:15:9d:74:96:31:7a:94:c8:db:56:ac:7a:ba:4f:
50:d6:c3:66:e7:03:02:a2:f8:40:a2:c6:34:d2:f4:
e3:8c:5e:5c:fd:c4:b0:f8:01:32:a0:b1:56:2e:9c:
31:bf:17:75:f2:28:f5:99:57:f5:47:16:59:e1:45:
9a:ae:0a:c1:47:b0:4a:89:67:a8:e6:df:13:36:c2:
26:35:ca:08:de:38:52:9e:0f:f1:31:d5:83:94:76:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:42:32:0C:78:62:6D:BA:9A:7C:53:82:CD:68:97:D4:CF:55:A5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/XqdCMgx4Ym26mnxTgs1ol9TPVaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.66.0/23
194.102.33.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a2:ad:54:9c:41:76:cd:d5:00:38:ed:9c:6a:c3:9c:f6:b0:
33:07:70:17:71:dc:5b:e7:26:96:6f:67:4f:c0:18:63:34:3a:
61:2e:66:12:95:cb:7d:99:c1:41:2a:0a:a3:2c:63:c8:90:61:
b8:bc:ba:65:ea:8b:1d:04:7a:2b:e3:8e:a7:ff:76:c5:c8:f5:
ce:8c:d5:e7:67:e5:9d:cd:ac:41:d6:91:5c:77:70:f7:70:96:
1f:b1:b9:01:b7:13:60:b9:9a:19:4f:18:0d:49:d6:0b:05:b9:
7f:89:4e:96:56:5e:e4:31:db:22:e9:87:6d:34:22:22:b7:38:
a6:bb:c1:e7:20:65:59:14:ed:b7:fa:1f:13:98:a2:52:79:16:
f7:98:45:3f:ce:f8:91:42:f2:4b:70:ab:5a:01:39:26:63:9d:
4c:e5:0a:8f:da:66:d9:30:a2:00:1e:e9:d7:47:51:05:ad:4f:
90:be:45:81:31:ca:48:13:10:a4:16:ba:c2:f6:5c:a8:33:5c:
ef:59:d4:48:d2:ac:e0:8e:90:7a:62:a9:4b:34:78:ab:67:c7:
b8:39:82:9d:98:fb:3c:99:a7:5e:31:d9:95:e0:c1:c1:99:37:
52:9f:42:32:bf:ae:4d:3d:f8:e9:5e:34:dc:b8:31:4d:e0:97:
6d:0e:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:51:03 2025 by rpki-client