Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aElJaApAhcQ47kVIHG6iQ6Cf7Mk.roa
File: aElJaApAhcQ47kVIHG6iQ6Cf7Mk.roa (raw, json)
Hash identifier: PEoVtzDvqKelh2ZH8Kr4o8GwYFoIdMU6GQfM3TIkDcs=
Subject key identifier: 68:49:49:68:0A:40:85:C4:38:EE:45:48:1C:6E:A2:43:A0:9F:EC:C9
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1B3A8BBFAA05762F3A93F6BD821A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aElJaApAhcQ47kVIHG6iQ6Cf7Mk.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34723
IP address blocks: 81.180.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1b:3a:8b:bf:aa:05:76:2f:3a:93:f6:bd:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684949680a4085c438ee45481c6ea243a09fecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:3a:9c:e4:94:eb:be:20:3d:e8:1c:f8:fd:
f6:d8:6f:9c:53:3b:89:e5:26:6c:19:e0:1a:74:e3:
b0:4d:bd:e2:c1:f1:0c:d2:81:ab:06:06:22:b5:a1:
99:70:9a:39:7e:0b:48:4a:24:1c:ec:0c:65:75:67:
6e:45:33:b0:c2:90:ac:01:4c:7c:48:4b:20:45:b2:
c3:45:45:65:be:4c:8c:e8:62:35:e9:81:6e:8d:8b:
fa:94:01:48:93:63:a7:9a:c9:47:5e:17:9f:fa:81:
5e:06:1d:7a:a2:d8:8c:15:65:9f:6a:f5:17:4f:5a:
8b:1a:10:7d:d2:4a:b7:c6:4a:d0:d7:33:88:bb:e8:
f7:e8:b3:08:ab:a9:93:eb:16:c5:86:93:83:d1:e8:
39:0f:95:95:c9:9d:72:3a:b8:15:f1:c8:39:ea:b5:
cb:d6:09:d7:32:64:bb:5c:cb:71:f5:1e:39:25:4c:
13:43:f9:53:be:52:34:fb:2a:1f:96:c6:15:0a:5e:
57:a9:8e:94:53:29:e0:e7:cf:24:74:dc:1c:05:1c:
09:96:82:b6:ac:cd:96:9c:76:87:18:eb:fb:93:62:
19:f6:a2:82:fb:21:29:eb:4e:d8:bb:a3:b6:8b:f1:
60:76:40:cb:54:d1:c7:0f:0c:df:d8:6c:65:75:a9:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:49:49:68:0A:40:85:C4:38:EE:45:48:1C:6E:A2:43:A0:9F:EC:C9
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/aElJaApAhcQ47kVIHG6iQ6Cf7Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:79:c1:79:dd:68:56:47:2c:7b:69:f0:b6:3d:e6:0e:cd:27:
65:b9:0b:7a:62:10:91:35:3a:95:bf:99:ee:f6:b3:1b:a2:df:
ef:6d:88:78:a1:c5:f1:5e:1f:fd:24:19:7d:88:87:2f:de:1b:
e2:dd:dc:b1:f6:af:f8:8a:89:d5:5c:8d:80:f7:01:f1:c0:4f:
47:78:50:dd:da:97:58:8e:3e:03:6c:9f:e1:4e:ff:33:05:59:
44:ea:03:ea:37:04:04:ca:9a:fc:04:f2:67:81:92:9e:17:75:
79:bc:e7:a3:b9:55:d6:43:29:fc:d9:35:28:59:60:6c:47:72:
bb:b3:e7:16:56:0c:27:9c:ee:00:0e:13:51:4e:09:07:8a:6c:
4e:6f:15:13:e5:a2:4b:f3:35:fa:d3:09:ab:3f:11:5c:71:0d:
65:55:c0:af:6a:38:99:e8:de:14:3f:1b:6a:96:91:3b:4c:1b:
c2:89:d9:c7:eb:38:ac:37:d2:41:3e:f0:06:e4:c9:eb:db:fb:
02:3e:ad:ea:f4:3d:99:6d:11:b1:2d:7f:60:12:7f:e9:45:83:
87:b3:61:ab:1b:2c:3e:6b:12:b8:75:77:73:9f:3e:4e:21:36:
48:e1:9e:87:50:5d:8a:03:bf:62:d4:c7:3a:3b:61:32:55:b2:
1e:23:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:27 2025 by rpki-client