Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/lQhZODbXs0J_Q9A2HiV5GHO3MUU.roa
File: lQhZODbXs0J_Q9A2HiV5GHO3MUU.roa (raw, json)
Hash identifier: qqVb0tgUBkpQlAZiUVfWhBiMHoJp83HNXRe5dZzS4Fc=
Subject key identifier: 95:08:59:38:36:D7:B3:42:7F:43:D0:36:1E:25:79:18:73:B7:31:45
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA364B03088A27AE1D51580431218
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/lQhZODbXs0J_Q9A2HiV5GHO3MUU.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202376
IP address blocks: 81.25.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:64:b0:30:88:a2:7a:e1:d5:15:80:43:12:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9508593836d7b3427f43d0361e25791873b73145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:dd:1b:9e:54:9e:82:ef:3b:3d:2b:e3:d5:
63:89:a0:29:72:eb:23:a7:11:8e:23:f8:fc:6c:6a:
05:a1:6e:8e:de:74:c0:78:79:68:78:ee:d9:90:a1:
33:9b:f3:0f:43:13:39:c6:0d:e6:93:6d:1d:da:dd:
b0:05:9f:1b:eb:51:a7:cc:66:67:c2:20:e2:ed:d7:
b6:92:89:a5:d1:d9:f3:54:ec:b6:38:02:c4:a6:e4:
b7:c4:f7:aa:55:9e:ba:5b:42:d3:d7:fc:38:7f:bc:
03:bf:dd:11:7c:53:82:fa:a7:e5:f7:f2:e1:fb:c4:
9f:05:9b:55:e5:2d:62:6f:7d:7e:f6:5c:83:0e:39:
ac:07:a2:8d:10:23:15:60:d4:d9:6b:4b:5c:ba:63:
c0:54:c7:51:05:7c:6a:ba:45:91:30:db:01:99:34:
83:f3:d9:5b:d8:0d:b8:82:81:55:ad:b5:d9:f7:79:
f9:e4:2a:a4:4e:30:fc:87:17:a2:44:73:e0:db:a6:
86:e0:e1:cc:0c:a8:53:f8:80:9d:40:c6:bc:45:f0:
36:52:4b:b6:3f:f9:76:f4:e2:51:44:e4:c5:89:90:
dc:ae:ed:06:12:20:06:fd:7d:bc:6d:36:2c:2e:5a:
b7:47:b8:80:57:e1:fd:18:fc:08:3a:12:59:92:fe:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:59:38:36:D7:B3:42:7F:43:D0:36:1E:25:79:18:73:B7:31:45
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/lQhZODbXs0J_Q9A2HiV5GHO3MUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3c:ca:e7:96:49:c1:4d:d0:2e:81:91:da:96:6d:4e:93:bf:
d2:70:a3:12:1a:d6:b8:c0:c2:74:d4:fa:b8:8b:18:b4:71:43:
c0:d8:ac:39:99:a6:d9:50:f1:65:53:0e:d7:7a:5c:6c:36:4a:
1b:4d:de:70:05:15:69:6c:71:d6:65:7c:09:56:1a:d5:5a:ca:
3f:92:54:03:39:be:e1:5c:b6:a4:30:51:6f:6d:23:5e:79:53:
c4:4f:80:ee:59:93:1f:ef:08:bf:dc:03:60:51:55:03:05:0c:
54:20:14:df:20:a0:a8:4b:ce:e6:4f:df:ef:e4:2e:d3:cc:85:
05:41:82:f8:43:98:13:3f:d1:f5:b9:a1:16:b4:e1:12:ea:4a:
b5:3d:85:a6:91:19:8a:57:0b:93:8c:7d:fd:b5:ff:fb:e4:75:
a0:8a:71:80:cb:4c:d2:6a:af:26:12:cb:b7:13:a8:bc:ed:00:
29:5f:5b:08:93:e5:f6:e5:16:95:bf:f4:62:36:1f:b1:cf:b7:
92:a3:3e:61:b8:89:c9:2d:6b:5d:92:4d:71:55:3f:0f:8c:a6:
fb:3e:96:af:90:6a:ab:df:c2:f1:d4:9c:10:86:df:39:94:89:
77:2d:b0:27:c7:81:e9:8b:a1:3d:3f:fe:39:88:09:bb:14:ff:
06:08:76:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:21 2025 by rpki-client