Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa
File: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (raw, json)
Hash identifier: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=
Subject key identifier: 15:87:23:66:E1:D3:E0:96:6E:EE:41:2A:3D:87:AD:A6:F1:7E:43:1D
Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial: 0194236A118213ADDF7FFEAEED1BAA9B2995
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.81.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:11:82:13:ad:df:7f:fe:ae:ed:1b:aa:9b:29:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15872366e1d3e0966eee412a3d87ada6f17e431d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:6f:a7:de:67:c5:11:00:ac:00:12:f4:65:
9c:ea:34:33:0b:65:da:19:2a:09:3c:cc:87:d7:e3:
b8:e3:87:7d:93:23:a2:55:04:5a:f2:dc:fb:90:b1:
cc:ee:b6:ff:9c:f1:43:b5:d9:6d:b0:f3:f8:8b:2d:
ae:f2:93:04:25:52:92:43:04:af:82:cb:ba:02:ff:
1a:e8:a6:88:c4:d6:19:82:65:98:4b:f1:25:0c:10:
28:88:21:77:fb:c7:9e:1a:13:91:42:d9:80:c7:ae:
9f:46:02:31:45:bf:09:d2:a2:b5:99:96:ce:9d:ff:
82:bc:3c:04:c3:3c:0b:a8:0a:a7:6d:60:d9:8b:28:
6f:79:64:28:17:0f:a9:39:a5:bd:21:aa:a5:13:16:
19:b2:f3:b3:b5:9f:a8:e1:c4:2a:f9:fa:8b:ee:5e:
dc:81:a1:48:2d:5a:e7:b8:91:ca:cb:81:06:a0:61:
7e:0c:9d:d8:bc:8b:75:c8:b7:db:72:70:12:50:da:
b2:c8:64:22:dc:7e:45:4d:63:a6:af:7f:c8:d4:4d:
2a:77:49:d8:48:24:b3:7a:9f:69:1b:c1:94:2a:7e:
17:05:20:e5:bb:69:55:02:79:90:8b:d6:eb:1f:e8:
d7:8f:45:28:e1:89:ec:a4:a0:f4:7f:b7:af:2d:87:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:23:66:E1:D3:E0:96:6E:EE:41:2A:3D:87:AD:A6:F1:7E:43:1D
X509v3 Authority Key Identifier:
keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.181.0/24
Signature Algorithm: sha256WithRSAEncryption
10:63:2f:71:33:8b:7a:aa:02:5d:ae:76:9e:ee:69:56:b1:58:
2f:7e:40:0a:4d:c4:0a:8a:b6:40:0d:3c:8a:76:e3:fa:d0:48:
6c:82:3d:0a:cd:32:97:00:3a:4f:18:e2:51:33:1a:e6:d7:b3:
7f:17:67:07:cc:f9:12:1d:01:5e:4a:e3:05:97:73:29:91:a9:
0b:9c:60:b9:af:10:dd:e6:f1:c4:8e:a2:1f:aa:75:fa:f0:09:
7d:d0:e1:f5:bc:d0:35:0a:cb:63:38:19:ac:9f:ca:b0:27:f9:
8a:92:dd:d7:dd:82:23:4b:c2:0c:57:63:00:93:73:d8:bc:62:
b9:68:34:30:34:2e:f1:31:0c:ab:70:c1:07:20:b2:73:5f:ae:
2a:19:97:c8:e0:51:ab:a8:4f:92:3f:62:1b:c1:9d:21:76:2b:
95:4c:0d:8e:46:1d:5f:c1:56:db:a8:16:eb:70:e1:0f:9f:d9:
ea:47:f6:15:c5:49:07:2d:85:09:fe:14:5b:c7:24:51:de:b9:
f2:41:e6:93:5d:95:7a:d1:cc:87:a2:4b:39:27:bd:86:14:a8:
21:2b:64:44:21:5d:7b:f0:d4:ed:73:a2:2e:92:f8:d0:9e:16:
f5:97:9f:25:fe:4e:6d:63:4a:90:f0:81:99:73:b9:84:dc:ff:
1a:60:dc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:31 2025 by rpki-client