Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/RbrpoNIXXajBUk8qJ4MBqJWZufY.roa
File: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (raw, json)
Hash identifier: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=
Subject key identifier: 45:BA:E9:A0:D2:17:5D:A8:C1:52:4F:2A:27:83:01:A8:95:99:B9:F6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 01942143E116E05857BD992DBC259A1A8503
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/RbrpoNIXXajBUk8qJ4MBqJWZufY.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25100
IP address blocks: 81.5.64.0/18 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e1:16:e0:58:57:bd:99:2d:bc:25:9a:1a:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45bae9a0d2175da8c1524f2a278301a89599b9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:3d:e1:7c:a7:8f:31:f4:5c:81:05:bb:d9:
c1:de:54:0b:35:ac:95:3f:2a:ca:37:af:bc:3c:78:
b8:56:d5:ad:24:05:a6:51:cd:83:7e:fc:49:f7:20:
e8:0c:8b:73:c5:b0:38:02:fb:b9:c8:88:d0:61:c6:
5c:70:eb:0c:a1:9a:6c:3d:f9:00:c2:7a:21:21:e8:
d9:55:cd:a2:1a:ea:98:7f:64:2c:97:1b:7f:2e:0e:
ed:54:dc:11:fc:c7:24:7e:d0:82:3a:f9:f0:d6:bf:
97:db:f8:5c:1c:fb:34:61:46:2c:73:02:40:f9:8c:
2a:d8:e3:64:0f:54:0d:d8:09:69:c8:da:dc:47:cb:
8b:20:0a:c1:ec:cc:2f:d8:04:b1:f7:fb:4c:63:2b:
92:79:1a:24:2c:4d:53:84:07:de:96:43:fe:03:27:
be:a9:74:5a:08:42:fe:cb:b2:27:54:54:bd:dc:3f:
84:48:7d:b6:8d:1e:4b:71:c0:25:ab:55:33:28:30:
46:ff:33:09:32:4f:15:97:77:d6:77:40:45:6c:c9:
de:a9:a0:87:69:60:0f:f8:52:09:22:e7:38:7f:42:
9e:65:58:46:b9:80:fa:96:d9:66:b8:3e:37:58:6c:
ec:d2:c1:c2:98:a4:aa:9d:f2:fb:2e:b8:37:ec:b0:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:E9:A0:D2:17:5D:A8:C1:52:4F:2A:27:83:01:A8:95:99:B9:F6
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/RbrpoNIXXajBUk8qJ4MBqJWZufY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:f0:c4:16:d0:66:0e:f5:65:19:89:56:bd:3c:ec:42:c4:14:
41:36:c5:cf:16:68:53:82:0a:ab:80:75:6d:c3:41:a4:de:6e:
2b:b8:4d:c6:97:a0:38:1f:60:53:7e:c6:3a:9e:4f:fa:2f:17:
f2:0c:a5:80:3a:8d:ad:26:25:05:58:0b:02:f0:8f:ec:c6:64:
80:8d:fb:42:77:77:fc:47:bf:7c:90:07:81:65:53:a0:a2:12:
72:21:14:95:ed:69:8b:56:b5:a5:b7:70:c8:31:4a:8b:0d:0e:
a3:d2:f3:90:7c:fb:25:ed:20:1e:78:23:26:ca:2b:b4:ad:e5:
39:e5:88:3d:8f:6e:91:8a:d5:34:22:bc:82:53:8c:3e:07:a2:
f9:75:68:c0:c5:be:fe:0a:07:b1:7c:6e:9e:e2:f8:9e:f6:ed:
5e:a8:12:19:44:a8:4d:10:46:0f:45:a8:df:44:4e:f3:34:f6:
4a:fc:4a:3c:08:55:cb:6d:13:bd:f8:68:cd:3d:8e:19:44:16:
a3:f4:e7:7e:1b:54:5c:91:bd:a4:25:ef:92:22:b8:3e:ab:8e:
e8:bb:85:6f:4c:bf:f4:aa:58:53:f1:74:26:d0:7c:1e:dd:fd:
52:14:04:8c:46:84:68:49:49:21:d2:68:73:f9:d9:0e:b8:f9:
8e:e3:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:45 2025 by rpki-client