Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa
File: b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa (raw, json)
Hash identifier: LmA3Cohl41GAEztGDTKc3Ga2ZxVmadMDX0gNG66wU94=
Subject key identifier: 6F:95:F5:27:36:D3:25:4B:AA:55:F5:F4:0D:E8:69:35:C2:7F:F6:47
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BD7ED8FF6D29DF68EEE460DDDD8B
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202121
IP address blocks: 148.81.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bd:7e:d8:ff:6d:29:df:68:ee:e4:60:dd:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f95f52736d3254baa55f5f40de86935c27ff647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:54:43:1d:5c:3e:4f:c6:08:2b:0e:12:04:
b1:e9:4f:3d:b6:28:3c:cf:00:39:0d:12:6f:66:d2:
6c:a5:93:65:e0:82:e8:b5:df:7a:f2:f2:65:78:58:
36:77:3f:39:61:ba:5a:28:cc:28:c8:78:a2:43:10:
f7:47:10:1e:66:98:ca:91:ff:76:6a:69:3c:f1:71:
72:0b:46:39:7f:83:4f:06:a2:94:46:29:9a:e3:7e:
04:36:91:36:3f:5a:81:0e:0d:3c:c1:cd:ce:06:9a:
9a:34:07:10:a3:ca:70:f8:5d:0b:89:ab:02:7e:4c:
01:3e:c4:f8:61:d5:50:94:27:43:d1:d5:31:0e:01:
45:98:f5:63:7b:4e:b6:33:f7:b1:ca:2c:80:77:72:
13:4c:52:e3:bc:3d:fb:eb:65:3c:9f:1b:bd:64:32:
83:10:b7:c8:6b:06:19:11:da:c0:15:a0:d5:9f:37:
ea:ba:0b:82:7c:a8:a3:a4:6a:36:86:53:3e:0b:15:
d3:32:e6:5a:33:26:80:30:3f:c0:1f:e2:78:04:10:
64:80:4f:5c:81:38:98:d7:15:0a:54:20:03:e7:9f:
67:1c:e1:cc:22:9c:ee:0f:b8:e1:2e:8c:98:45:b1:
55:5a:b1:65:d2:95:5c:91:c5:0d:10:2b:88:c9:c9:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:F5:27:36:D3:25:4B:AA:55:F5:F4:0D:E8:69:35:C2:7F:F6:47
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b5X1JzbTJUuqVfX0DehpNcJ_9kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.246.0/23
Signature Algorithm: sha256WithRSAEncryption
36:d6:5b:57:7f:24:c6:7e:4e:f6:c9:68:06:d0:70:42:3a:2a:
bb:cb:e2:65:a8:12:80:f0:46:72:90:1f:bf:7c:a9:7e:e8:74:
d6:db:05:ae:79:7d:af:f0:46:90:10:4a:93:e9:9c:fa:f0:17:
c0:16:aa:c7:ad:0e:13:00:82:3c:6b:98:da:7a:86:34:07:ee:
20:52:8c:57:c9:c8:17:83:6b:fd:89:1d:96:2f:87:7c:31:b3:
40:7c:3f:c5:2e:9c:dc:35:b1:01:a3:f6:30:61:b5:1b:3d:8b:
a4:3f:4a:09:69:cf:34:f3:e6:f0:1a:95:8d:27:63:7d:c4:68:
f9:15:0b:86:59:5b:9c:a0:71:81:d7:2a:24:97:b9:e9:c0:84:
ac:81:2c:d0:c8:04:90:90:6c:2c:4b:ae:1c:2e:6f:ea:e2:f9:
e7:c1:6b:6a:61:77:68:a4:55:47:5d:a1:21:6e:01:7b:86:1d:
1a:37:f5:43:22:4a:e2:b5:6c:95:dd:a5:71:3d:d3:a4:3a:e8:
3a:6e:d3:c4:99:eb:63:05:5e:21:27:3f:10:1a:8d:36:03:9b:
b1:1d:d6:69:cf:e2:2a:0e:38:cb:67:92:bd:eb:4a:1e:9a:11:
9d:9f:7c:33:5b:e9:72:2f:52:71:73:95:02:d4:86:25:9f:f3:
da:0d:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:19 2025 by rpki-client