Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tUekeyKBYyK28GqW-zHaShd5ATA.roa
File: tUekeyKBYyK28GqW-zHaShd5ATA.roa (raw, json)
Hash identifier: I84esrE3CSVhPbgtz7tltBF4z6Krjh7eoogak2dN+eA=
Subject key identifier: B5:47:A4:7B:22:81:63:22:B6:F0:6A:96:FB:31:DA:4A:17:79:01:30
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C231702CDBCA8948AA712C39CB1BD
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tUekeyKBYyK28GqW-zHaShd5ATA.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43807
IP address blocks: 81.181.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:23:17:02:cd:bc:a8:94:8a:a7:12:c3:9c:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b547a47b22816322b6f06a96fb31da4a17790130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:84:d3:69:af:16:4a:0c:19:21:b1:b7:f3:
cf:58:b7:4d:69:bd:c3:4e:a2:07:14:06:3b:0b:d2:
f9:40:ff:92:0d:60:8b:f7:16:ee:e3:29:1e:03:33:
04:52:c8:f9:4f:24:cf:13:ff:04:7a:9d:a1:d1:e8:
da:a1:4c:2b:93:69:ad:9a:06:76:4b:8b:52:bb:34:
cc:0e:58:91:73:b8:e8:66:70:2c:ee:91:8e:8b:dd:
45:ac:da:dc:86:c1:eb:02:b9:1f:7f:e0:2e:18:02:
89:2a:33:9b:c4:bb:12:5b:54:42:de:8a:30:ad:cc:
07:30:9e:f9:a1:e7:c2:8a:a5:eb:2e:03:03:62:07:
41:25:fe:fa:4c:2f:f5:32:d7:82:d3:aa:c2:08:bd:
2b:58:4a:3c:60:21:2f:79:26:e2:62:b9:9d:0d:34:
14:60:80:5b:34:43:60:72:ef:85:4c:c5:e3:dc:f0:
8a:f7:d5:82:85:ad:44:8b:06:d8:f4:f0:20:0f:6f:
6e:14:8e:10:24:71:39:c8:86:63:c7:13:06:3b:c9:
94:a5:d5:46:76:fe:57:f7:71:e2:86:eb:2f:92:70:
60:89:35:af:a3:ae:28:8e:4e:af:49:6a:8c:5b:a2:
88:e9:75:bc:07:55:c5:2c:37:16:e2:58:e2:d6:30:
5b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:A4:7B:22:81:63:22:B6:F0:6A:96:FB:31:DA:4A:17:79:01:30
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/tUekeyKBYyK28GqW-zHaShd5ATA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.240.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:37:c3:1c:bf:55:bb:54:b2:eb:6d:9a:25:f2:5e:d9:67:fb:
70:ab:88:0f:d0:e0:f3:30:7b:45:2a:aa:f5:d9:b7:8c:9b:c5:
89:0d:f3:ed:49:39:f0:93:b4:79:06:af:51:28:c7:83:1b:b3:
dc:d4:ce:1b:de:e4:6a:f6:5a:dd:1e:6c:22:20:32:b5:4d:a8:
e4:11:fa:2b:e4:35:8d:c0:f0:b5:c3:71:8c:c4:0c:cf:f7:de:
0a:d9:2a:f3:04:af:d8:49:18:45:af:c0:da:0c:a8:fe:db:4f:
86:a6:c3:47:aa:17:3f:7b:32:8a:9a:e7:f7:0c:e8:33:1b:da:
8e:cb:2a:9e:ec:2a:d8:66:e7:77:26:7a:1f:d5:5c:b6:d7:11:
21:5d:3b:eb:9b:e1:ef:bd:15:03:af:44:b7:43:26:ac:f2:38:
6d:65:91:48:0d:bf:79:d4:f1:24:66:dc:be:d8:8b:3f:58:c2:
7e:d4:37:b0:f3:d1:b9:4c:9f:9d:44:d9:ec:c6:d5:96:78:67:
2c:71:e0:66:17:5b:1e:c9:0f:82:c8:c1:6e:da:89:9e:2c:f8:
36:a4:b7:67:e9:04:23:15:5e:c2:25:f5:49:5a:93:da:cc:ad:
d9:82:0a:17:df:51:d0:58:ce:be:df:9b:02:08:81:8c:83:3a:
0c:23:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:00:02 2025 by rpki-client