Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-fXjfmC3v8FZ6EYEmi36KVVHPxw.roa
File: 1-fXjfmC3v8FZ6EYEmi36KVVHPxw.roa (raw, json)
Hash identifier: MqPdlHuk0rtDIjfuE3NmvX28q/E4Fm/aSHCDqIGjL4U=
Subject key identifier: F9:F5:E3:7E:60:B7:BF:C1:59:E8:46:04:9A:2D:FA:29:55:47:3F:1C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B21FBD7370D3AD7B8EF55B0BFBE5AF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-fXjfmC3v8FZ6EYEmi36KVVHPxw.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56449
IP address blocks: 81.15.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1f:bd:73:70:d3:ad:7b:8e:f5:5b:0b:fb:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f5e37e60b7bfc159e846049a2dfa2955473f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:05:82:39:cc:5b:44:2c:bf:5b:3b:41:4d:
a0:90:82:5a:e6:f5:b7:8f:cf:fc:04:f6:09:a2:62:
09:ec:99:09:cb:47:1a:ce:b0:7e:16:a3:a4:5e:cc:
03:a9:d9:74:b7:40:94:c4:b9:9b:27:6d:5a:43:18:
86:65:c5:42:a6:2b:4c:a8:62:56:22:6f:d2:d2:57:
22:c5:4e:35:e8:c0:12:ba:a3:2f:73:30:45:79:4a:
d7:61:98:5b:46:d3:4d:7e:d5:95:bc:82:a8:66:cc:
e1:00:22:2b:30:33:fd:71:67:46:ad:06:da:fa:87:
f7:c0:0e:ce:67:d1:80:b9:3c:87:e4:89:36:16:3d:
6f:ef:74:8f:2f:ed:7c:04:4c:19:29:86:f2:b4:a9:
3e:c6:4c:a7:26:99:4c:51:d4:97:c2:d7:e8:a4:fc:
f2:f7:c1:58:e2:93:71:3f:ad:ba:49:81:7a:ee:72:
2d:cc:70:fc:02:99:94:8f:bd:77:0f:0b:61:fe:29:
89:7a:91:4e:15:43:aa:c7:3c:ee:56:cb:22:71:03:
f4:93:4a:c3:77:66:0a:58:e8:ee:25:34:56:2d:2e:
94:ee:84:df:85:85:c1:f5:ce:86:7b:24:b8:1c:7e:
c5:12:f8:76:77:2d:e7:d6:90:91:3d:55:eb:0c:27:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:E3:7E:60:B7:BF:C1:59:E8:46:04:9A:2D:FA:29:55:47:3F:1C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-fXjfmC3v8FZ6EYEmi36KVVHPxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.138.0/23
Signature Algorithm: sha256WithRSAEncryption
51:70:3b:e0:ce:65:81:ff:26:fc:b2:df:c6:14:ae:68:2e:d2:
a2:55:ab:d8:bb:d3:ed:8a:1b:3d:af:20:10:ad:3b:4c:07:1a:
43:a6:a8:2d:f1:bc:66:13:4a:cc:95:d6:07:55:3c:ab:29:c6:
54:b1:a4:1a:8d:7e:bb:54:13:7d:d8:80:78:e4:22:c6:5d:38:
79:44:91:98:eb:32:eb:c7:5a:b8:a5:2a:b3:8c:2b:8a:50:54:
7b:e0:90:89:06:26:f0:5e:b1:ba:1b:69:18:7a:be:a4:fd:f2:
3c:31:eb:fc:87:9e:d4:7f:fb:f5:85:57:5e:31:76:f9:a0:30:
ea:bc:7c:7b:cb:f3:7c:76:14:b8:fc:43:c4:41:ab:c1:c3:70:
7d:31:af:e4:d5:e4:1b:12:46:74:49:05:76:3d:cf:87:60:ac:
5b:d7:8b:e5:ef:77:36:c1:03:dd:b2:85:df:ab:45:6f:92:fa:
4b:46:58:93:9a:01:bf:3d:a7:ae:4f:bf:f7:27:8f:39:e2:1d:
dc:50:ca:15:29:46:af:37:78:ae:4b:63:24:b8:3b:44:d5:75:
c0:94:d1:5e:1b:bb:72:f7:a5:64:d5:e3:f4:02:02:ca:e5:de:
1c:57:7b:6b:27:08:5a:26:59:ad:f3:08:47:b8:39:15:7f:08:
a5:56:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:03 2025 by rpki-client