Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa
File: J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa (raw, json)
Hash identifier: Ci6kg2a6GSjpPc9RFHsQWbp71+Q5BJmxJkaiYnBdvGA=
Subject key identifier: 27:96:65:D1:EF:77:C3:B3:AE:86:DD:D0:4C:94:3C:02:0B:7F:2B:71
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143C0EAAE072A42ADD34D5173504961
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207204
IP address blocks: 148.81.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c0:ea:ae:07:2a:42:ad:d3:4d:51:73:50:49:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=279665d1ef77c3b3ae86ddd04c943c020b7f2b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:e6:cd:a7:8f:6f:28:6f:30:b1:74:dc:da:
94:15:e1:88:2f:57:97:9e:28:99:09:32:a2:ed:34:
27:ba:c0:aa:1b:7d:d5:a2:bf:46:9c:10:66:5e:cc:
94:8c:9e:b6:4f:85:04:41:70:97:68:45:61:03:3c:
91:df:20:f2:ab:95:fb:dd:c1:65:d8:4a:d4:60:81:
55:d2:fb:24:df:7a:84:e7:9d:90:c6:d4:12:a4:0f:
8d:f6:84:48:8c:8e:a6:3c:54:4e:0b:a8:94:51:2f:
df:85:d1:e5:ba:59:02:df:41:35:ee:45:c6:c4:45:
87:b0:6b:13:45:72:9a:19:be:2f:2f:b5:c6:9e:e1:
ae:9a:d6:5f:7f:90:21:e8:c8:f1:ad:d5:2b:b4:5c:
1b:a2:5a:61:69:3d:f7:c2:ee:b2:56:ff:e8:10:e3:
52:1f:58:cc:e2:8e:00:49:bc:f9:32:75:a2:a3:f2:
88:bc:7e:ed:45:81:3e:14:3c:40:67:2d:5c:93:90:
23:4f:f9:c6:24:47:44:2c:29:a3:3e:cc:1d:53:a9:
c4:da:06:40:f7:23:c8:e2:39:fb:da:df:b3:1a:ce:
9a:9a:60:ea:83:26:56:35:36:f2:f6:61:f4:e3:af:
e8:cd:0e:0f:86:16:f7:a6:dc:49:a1:c5:5b:90:cf:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:65:D1:EF:77:C3:B3:AE:86:DD:D0:4C:94:3C:02:0B:7F:2B:71
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/J5Zl0e93w7Ouht3QTJQ8Agt_K3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.206.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9b:3b:d2:4e:58:34:07:f3:35:2b:30:d9:59:b5:be:a6:15:
21:82:20:c1:ad:dd:3e:41:e5:90:27:34:9a:d5:a4:58:e4:ea:
db:d9:a1:5f:e7:e0:c5:3a:25:e8:4f:44:a9:d4:12:3a:75:07:
c2:e5:f6:5b:c3:04:ec:03:76:26:79:d6:c6:36:32:b2:4a:22:
0b:33:64:07:71:be:e5:3d:1a:1b:b3:73:63:d3:92:a6:c5:c5:
b3:66:1f:9a:98:78:80:a9:da:dc:1d:f7:05:19:2c:34:10:9d:
34:c6:ce:b6:a7:70:31:e2:cf:59:91:90:01:08:4f:6c:0c:ec:
64:29:3a:1c:3d:26:ef:03:d0:8b:8d:5f:d8:37:46:75:cd:52:
9a:bb:1b:15:fc:a2:9c:9a:8a:a7:74:c9:00:63:02:f0:ea:76:
80:05:b7:e3:07:a0:a3:0d:a0:ad:f1:84:91:1d:33:a5:62:34:
a8:f4:29:81:f4:1d:ec:13:ff:5a:c2:bb:1b:0c:db:d8:b1:f4:
d2:71:6b:8e:d3:75:78:8a:b0:f3:19:19:a6:06:0d:05:dd:c5:
01:64:72:3b:6f:24:79:e7:31:30:52:a7:6f:42:9e:6a:50:08:
0d:1e:95:35:75:62:8d:57:b2:a9:06:da:f3:7e:1a:8a:da:9d:
1b:57:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:45 2025 by rpki-client