Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A49d_BeiTEUQG4p_3mJzcU9LAxc.roa
File: A49d_BeiTEUQG4p_3mJzcU9LAxc.roa (raw, json)
Hash identifier: Yk0iZpFyJXXMqGPy0ILeZNptWZYqa7K2r7Sh5AS5hIk=
Subject key identifier: 03:8F:5D:FC:17:A2:4C:45:10:1B:8A:7F:DE:62:73:71:4F:4B:03:17
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B7827E3DCBF91311A3E4AFAE1801
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A49d_BeiTEUQG4p_3mJzcU9LAxc.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196802
IP address blocks: 148.81.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b7:82:7e:3d:cb:f9:13:11:a3:e4:af:ae:18:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038f5dfc17a24c45101b8a7fde6273714f4b0317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:92:df:03:ed:dc:7e:cd:ee:c7:be:cb:e8:
50:b7:5a:b2:87:b4:dd:f7:94:d7:97:1c:df:10:50:
82:39:13:ee:21:b1:aa:4b:1c:ed:2a:e6:08:dc:ab:
b0:fe:5f:58:8a:fa:0c:8f:d8:1e:65:92:8d:ed:b7:
22:f8:dc:82:cb:b4:a4:f6:8f:d9:05:7c:20:5f:eb:
34:64:e8:be:97:94:63:8b:60:41:5f:9b:b9:01:d8:
1a:7b:67:69:28:9c:a2:9e:01:67:f2:0a:6b:8f:e7:
ab:fe:00:ef:7e:a4:d1:3f:07:2a:49:f2:d8:5e:a2:
a4:65:6f:cd:5d:bf:f8:3e:8f:7c:c0:6b:c9:43:26:
8a:7c:01:79:5e:ad:de:dd:b2:32:1c:fc:45:7c:7d:
41:27:3e:e9:5d:a9:40:35:e5:ef:7c:8b:47:ad:ba:
a9:32:17:02:8b:a7:ee:c6:ef:04:fb:44:9f:8a:3c:
f2:02:e5:0d:14:88:51:ab:9e:73:2b:11:9f:e0:97:
41:fb:1e:9d:3b:60:37:5c:d3:a8:e8:bb:e8:7b:21:
84:ac:81:4e:07:fd:19:27:c9:c5:3d:14:ef:c7:1d:
62:04:1c:27:cf:ea:df:56:93:35:f4:8e:39:d7:2c:
5e:67:16:ca:65:83:98:59:64:29:af:28:0c:61:b9:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:5D:FC:17:A2:4C:45:10:1B:8A:7F:DE:62:73:71:4F:4B:03:17
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A49d_BeiTEUQG4p_3mJzcU9LAxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.117.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3a:6a:11:11:28:8e:95:82:0b:72:1c:78:e2:ca:8b:cc:ef:
66:6d:ff:d5:7b:fc:fc:06:03:35:f7:fb:ed:9f:8a:6f:a5:8f:
b0:41:03:18:be:32:79:14:24:c3:06:be:fb:74:a2:25:3c:39:
be:c5:16:22:fd:45:35:75:49:17:87:b8:c2:fb:eb:06:bf:80:
09:c9:08:5b:cb:f8:ed:c9:66:13:9e:e8:85:3b:2e:3a:3c:86:
d7:1a:13:93:0e:3c:a2:c7:b8:27:67:cc:bc:6d:14:07:34:86:
9c:bd:65:8b:3f:74:ac:38:90:96:80:00:89:52:32:bf:f4:3a:
4f:c6:f4:b3:f0:7d:7b:98:f0:e9:40:23:24:38:15:92:79:65:
09:e1:bb:50:16:cf:b0:38:23:9d:a2:ce:e5:fb:4d:5d:9f:be:
07:04:a5:22:de:15:07:74:2e:44:c5:ce:fa:05:af:37:7a:8a:
f2:93:81:7c:00:d6:60:ca:48:7a:f4:04:cd:7f:dd:02:23:14:
69:8b:9f:07:8a:97:14:36:3b:59:90:27:1f:a5:d1:01:7c:c7:
ca:62:76:6f:3c:99:28:a0:15:98:80:85:5c:71:cd:8f:b6:1b:
ab:cc:cc:e9:58:1d:d3:c9:88:df:66:0a:83:4e:1e:e7:08:10:
fb:4c:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:16 2025 by rpki-client