Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/IoWApYhOxVomHgy4Fx2-jrx61Zo.roa
File: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (raw, json)
Hash identifier: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=
Subject key identifier: 22:85:80:A5:88:4E:C5:5A:26:1E:0C:B8:17:1D:BE:8E:BC:7A:D5:9A
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 019425FDDCBDD5AF094A49CC6C03AD3B8475
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/IoWApYhOxVomHgy4Fx2-jrx61Zo.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44599
IP address blocks: 193.242.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:bd:d5:af:09:4a:49:cc:6c:03:ad:3b:84:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=228580a5884ec55a261e0cb8171dbe8ebc7ad59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:2c:36:46:5e:45:e4:fc:f7:ed:59:92:c4:
e5:8d:79:84:a0:a6:8f:cc:1c:9f:d3:5f:96:db:00:
e9:a6:73:bd:be:75:3e:9b:08:4c:77:b4:f5:68:70:
81:5a:38:bd:2b:7c:e5:45:38:a6:9f:bb:61:67:1f:
13:7e:e9:2c:8f:1b:e2:ca:d3:eb:00:f0:45:cc:fe:
fa:c9:7d:f7:40:d3:b0:5f:43:27:43:cf:58:9e:af:
0d:03:93:4e:4e:ad:e4:17:48:25:5a:a3:51:1a:5d:
87:91:36:d4:55:94:cc:5a:8c:1b:60:f2:8e:1b:0a:
22:da:96:c9:84:d0:c9:61:eb:02:b1:81:bd:01:6c:
f4:97:39:04:f1:24:71:ab:24:4d:e5:d7:59:75:94:
25:cc:b6:a0:29:51:1a:4b:37:7e:d0:78:f4:c8:7f:
e7:5b:8b:fc:b5:98:90:c4:d4:37:66:f0:e1:1b:ac:
2b:c3:90:d2:d8:b1:01:32:ab:37:64:71:00:0c:b2:
0d:31:88:3c:33:55:1d:44:35:68:7d:19:50:4b:2f:
1c:0f:65:8f:6b:9d:77:97:91:89:8d:d6:9a:86:58:
df:be:25:27:1f:8c:be:27:fc:34:bb:ab:ef:19:db:
08:05:89:4d:96:62:f6:4e:84:51:eb:66:5a:44:c6:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:80:A5:88:4E:C5:5A:26:1E:0C:B8:17:1D:BE:8E:BC:7A:D5:9A
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/IoWApYhOxVomHgy4Fx2-jrx61Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3b:f0:8c:05:b2:88:4d:6a:81:df:5b:52:0c:b8:f3:40:f4:
32:6f:05:d2:fd:10:5a:27:7e:43:52:31:2e:37:27:71:a6:91:
51:ac:bb:fa:7a:04:dc:db:4a:d5:1c:30:73:51:79:91:41:57:
8d:38:4c:45:87:9b:e3:6f:b8:fa:5b:2c:bd:a8:d4:d7:a4:96:
fa:f6:f3:0d:59:02:73:70:28:b1:ea:b1:42:5e:0e:00:32:d3:
ca:3d:89:1b:35:cb:d1:6d:33:70:3b:70:8a:13:db:f6:ef:ae:
3a:9c:17:0a:df:69:09:57:df:7f:fa:09:c9:0a:40:ad:f8:15:
5f:dc:85:44:c2:62:c5:77:98:ef:05:2a:0f:3a:46:3f:76:7e:
25:31:ce:6b:18:06:a9:fd:62:25:0e:70:27:7f:6e:97:6b:f8:
c4:3c:a9:0a:a4:01:dc:b0:d6:96:65:68:80:cd:c3:10:5a:57:
6c:92:23:c6:6d:19:dd:67:9e:13:f6:fc:f7:3f:08:71:3c:41:
c5:21:e2:a1:37:3f:c1:dc:aa:f1:91:89:26:52:3c:6f:e7:41:
56:a6:a8:54:f3:81:5a:59:3f:f7:83:c3:87:60:fd:a0:97:99:
92:07:92:c4:40:b1:5d:d9:aa:6b:9d:13:f8:0e:2e:dc:6e:9e:
2e:cb:62:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:45 2025 by rpki-client