Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/AXSoaMu602i_53-BQksf4H8rVso.roa
File: AXSoaMu602i_53-BQksf4H8rVso.roa (raw, json)
Hash identifier: Gozi2rQxeKnJmmPgfnbAWudEjv4AS8oCMzPcEaljedc=
Subject key identifier: 01:74:A8:68:CB:BA:D3:68:BF:E7:7F:81:42:4B:1F:E0:7F:2B:56:CA
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D75BD1C2D20D481516F8BEE9F6911C
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/AXSoaMu602i_53-BQksf4H8rVso.roa
Signing time: Wed 01 Jan 2025 21:48:23 +0000
ROA not before: Wed 01 Jan 2025 21:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.1.81.142/32 maxlen: 32
178.251.228.102/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5b:d1:c2:d2:0d:48:15:16:f8:be:e9:f6:91:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0174a868cbbad368bfe77f81424b1fe07f2b56ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:9b:b7:a4:d6:bb:40:34:24:7b:2f:d0:16:
65:3f:22:ba:b3:a0:3e:ec:91:2d:5b:fe:b8:49:3e:
4f:16:1f:74:39:41:82:0c:f6:72:0f:d0:ea:96:66:
55:7d:d1:74:fc:8a:24:48:3f:7c:ce:35:95:70:88:
17:f1:f6:e0:f6:a6:85:83:3a:63:ca:a0:52:57:4d:
0c:c3:e8:7f:62:89:9d:26:1d:cc:71:a8:f3:23:27:
13:ab:6a:aa:91:f5:39:e6:e7:33:a7:32:40:cc:a8:
cd:b0:62:5a:24:6b:43:1d:f9:54:2b:b8:7e:da:0d:
d9:13:55:02:25:17:28:b6:89:c1:fa:34:6a:98:13:
9d:51:2d:34:f7:01:54:a5:59:56:e7:e6:26:1e:1d:
ae:ad:b9:07:85:08:50:34:9e:0e:87:2d:51:f6:48:
09:8c:11:6a:9f:56:2f:f7:8a:d9:7b:b6:1f:35:62:
dc:56:22:c9:d1:ad:f3:6d:fa:f2:82:9e:12:ea:fe:
a0:23:49:4b:1d:a2:16:b7:7c:0a:5f:07:26:94:25:
9d:01:02:91:1f:87:ff:26:66:9a:7a:d2:b1:f8:18:
ab:50:7e:69:c3:60:58:01:22:6b:9d:bc:7e:0e:e9:
48:b9:9c:5f:11:87:07:6d:a0:ee:db:6f:14:8e:c0:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:74:A8:68:CB:BA:D3:68:BF:E7:7F:81:42:4B:1F:E0:7F:2B:56:CA
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/AXSoaMu602i_53-BQksf4H8rVso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.81.142/32
178.251.228.102/32
Signature Algorithm: sha256WithRSAEncryption
11:ef:61:4e:8e:8a:18:f8:b7:1b:ac:74:c3:79:d6:58:ea:4c:
e3:e7:9a:35:f1:5a:78:7f:52:a5:bb:38:cf:e0:ee:f6:ca:e0:
af:5b:06:96:d7:6d:06:d7:62:3b:f3:cc:95:e6:2a:46:c6:64:
33:3c:20:3a:2b:d8:8e:5e:5d:a5:75:83:56:20:4f:47:ed:40:
fc:69:3b:84:a8:7f:83:7f:02:98:4d:e1:f3:7c:5b:1b:ba:bd:
0a:71:03:73:b5:f3:2a:a0:fa:9d:ed:73:d1:ad:16:59:f4:15:
f1:bd:57:0f:02:7f:7d:7e:84:c7:fb:3e:ec:0e:02:93:a4:90:
68:9e:04:fd:ff:59:2f:f7:4a:2f:a2:4d:3b:05:b5:f2:da:58:
92:55:c8:aa:ed:78:1c:28:2d:80:dd:a2:10:68:b8:2d:b3:19:
c6:f5:52:7f:8a:a4:ac:74:48:64:43:59:f8:9f:78:05:29:25:
3b:83:40:a3:b2:1f:ad:ea:30:c2:a9:19:29:7e:e1:b1:35:1e:
b0:b6:f6:05:9a:15:1c:7f:15:ea:cb:00:b8:11:99:17:c0:1b:
1d:51:a5:9b:dd:2b:5f:65:e4:8e:8d:e8:04:a7:60:52:d0:f5:
ad:78:7c:db:bc:e2:cf:40:33:ea:73:f4:45:dc:23:d4:84:f5:
44:b2:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:49 2025 by rpki-client