Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bCYcCDo7h3gEvqB1CU6KCsmRpCk.roa
File: bCYcCDo7h3gEvqB1CU6KCsmRpCk.roa (raw, json)
Hash identifier: hKIW8uq/lfyh63dIIqgfS18TFx5uL8QwS2gCdC4hLAo=
Subject key identifier: 6C:26:1C:08:3A:3B:87:78:04:BE:A0:75:09:4E:8A:0A:C9:91:A4:29
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193D84815728FD0A467960E630E68406597
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bCYcCDo7h3gEvqB1CU6KCsmRpCk.roa
Signing time: Wed 18 Dec 2024 05:40:22 +0000
ROA not before: Wed 18 Dec 2024 05:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215417
IP address blocks: 81.181.9.0/24 maxlen: 24
81.181.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:48:15:72:8f:d0:a4:67:96:0e:63:0e:68:40:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 18 05:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c261c083a3b877804bea075094e8a0ac991a429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:86:d5:a0:87:f0:a9:65:27:d0:81:02:70:
8f:f6:b8:ae:e2:ac:d7:3f:6c:bf:2a:1f:32:34:bc:
30:7a:40:fe:0c:3a:1a:7f:3e:57:e8:9b:4f:40:12:
4a:95:75:fa:f8:3b:85:24:7e:ee:b7:1f:a8:12:ca:
d7:a0:47:87:03:ba:df:5f:11:92:80:21:b5:92:96:
28:5a:0f:f3:aa:9c:8d:eb:4d:48:7c:26:90:02:91:
c3:67:f5:a7:64:6f:54:a5:36:13:a9:36:ec:db:48:
73:ad:7f:27:8e:b8:fe:b4:17:6c:41:b0:35:fc:ac:
6f:0f:9a:f3:f6:30:d6:b1:7f:4d:c1:f6:e3:a6:17:
44:2d:94:25:28:04:3f:c5:64:95:2b:91:3f:e7:36:
7d:6b:fc:89:a9:6a:8d:f8:77:c3:26:c9:b0:d7:d7:
03:f4:cf:4d:11:5b:22:5d:70:9d:a4:d4:c2:b7:22:
d5:18:6c:f3:d6:bc:c0:f1:87:a7:91:9f:ea:50:1e:
96:ad:4a:29:c7:b8:3e:f1:57:48:b9:20:8b:41:dd:
2c:bc:a4:ad:f3:7c:60:68:77:79:2b:ef:c8:b8:a1:
ef:bd:97:b8:2d:79:e3:4a:59:3a:df:bd:a9:a1:66:
57:f0:cc:38:ef:71:e3:4e:7d:1f:99:44:59:df:55:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:1C:08:3A:3B:87:78:04:BE:A0:75:09:4E:8A:0A:C9:91:A4:29
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/bCYcCDo7h3gEvqB1CU6KCsmRpCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.9.0/24
81.181.84.0/24
Signature Algorithm: sha256WithRSAEncryption
19:37:df:0f:fe:ed:b8:85:71:1d:cc:2c:99:2c:fb:0c:56:39:
26:6a:07:9e:6b:7e:d8:3f:97:4c:55:ea:e6:b4:e0:67:ba:af:
7e:3c:89:7e:6a:2c:cf:0c:59:82:8b:e6:fa:06:ab:89:a8:18:
77:2a:2a:5f:75:39:3a:ae:67:85:c5:ed:bb:bc:f5:c4:f2:fc:
68:b0:47:00:61:98:c1:d8:ec:b9:7e:5d:79:36:fc:90:ca:06:
e2:aa:c5:71:ae:8b:11:5c:42:38:82:2f:04:dd:23:ca:1f:c6:
5c:5d:03:96:6b:6a:69:e8:f3:ac:45:4f:d1:fc:16:fc:51:9a:
05:bf:43:a4:97:1b:55:9f:dd:53:f5:ee:f9:24:79:4c:4b:f6:
92:5a:6b:f1:58:c6:fb:07:3b:b5:3e:d2:77:e3:de:39:67:c0:
50:a8:48:d4:40:0d:6b:94:3b:72:99:20:5e:8f:0b:97:64:f9:
67:3d:87:55:04:e3:7d:5d:52:df:1d:a4:9d:0b:f3:89:c8:4c:
1e:53:eb:a2:b5:27:68:12:56:4b:89:cf:22:60:2a:91:04:c2:
35:85:cb:68:ab:0f:64:07:a6:5f:8d:52:31:90:0c:b4:05:ca:
ea:1a:b0:b8:9c:23:55:ad:6b:92:6a:2a:38:72:4c:bb:58:f2:
86:97:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:36 2025 by rpki-client