Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MIKgnqH13OFFi71SDBiDILACw2g.roa
File: MIKgnqH13OFFi71SDBiDILACw2g.roa (raw, json)
Hash identifier: uUwOBQYJlbgF1BM7huEXgAFbkWqoyH0RjCXKsBfxKv8=
Subject key identifier: 30:82:A0:9E:A1:F5:DC:E1:45:8B:BD:52:0C:18:83:20:B0:02:C3:68
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F976F50EEA96813CAD2049C16DCB
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MIKgnqH13OFFi71SDBiDILACw2g.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35278
IP address blocks: 109.205.58.0/24 maxlen: 24
193.222.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:76:f5:0e:ea:96:81:3c:ad:20:49:c1:6d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3082a09ea1f5dce1458bbd520c188320b002c368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:18:68:13:0d:aa:de:d4:06:1f:f1:c4:e3:
22:9a:b7:f3:06:50:87:74:89:a6:81:58:57:7c:5f:
11:4a:d9:f6:a7:fc:30:51:f6:24:d8:6e:90:af:c0:
22:04:55:82:a5:78:e4:5a:f2:53:c1:0c:91:48:38:
43:8e:a4:3c:4a:54:12:c9:bc:9b:c3:fe:2a:a7:ce:
31:0c:31:a9:9b:48:2b:7c:47:97:79:12:e7:98:cb:
00:fc:ef:7e:fa:67:b4:5d:d0:e3:7e:9c:db:d3:64:
3b:94:fd:a4:b0:74:48:e1:b7:54:2a:85:62:d2:09:
aa:0e:ba:cc:ee:bf:5e:30:c9:bc:41:16:ed:e4:73:
4d:9a:7a:65:7e:0a:d8:c1:98:80:f4:47:01:a3:29:
1c:c3:b6:68:5b:13:b7:0c:9c:d1:89:96:88:8b:18:
a8:a4:92:95:fe:59:e6:e0:2d:8b:bb:b2:4e:17:c7:
b7:78:5c:55:16:77:d3:df:02:b8:00:21:e1:90:40:
72:ee:b8:1d:65:02:ea:9a:d8:c6:61:c0:18:e1:08:
bf:ee:64:76:93:e5:64:b2:1e:c9:e7:0d:c0:77:73:
67:dc:43:dc:7a:3e:22:48:1a:a5:72:42:bb:c1:03:
1d:55:48:72:5b:87:63:b6:f4:16:7e:5d:8d:ec:97:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:A0:9E:A1:F5:DC:E1:45:8B:BD:52:0C:18:83:20:B0:02:C3:68
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/MIKgnqH13OFFi71SDBiDILACw2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.58.0/24
193.222.62.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f0:f3:35:db:11:ec:10:72:86:91:1f:b4:28:5b:bb:06:74:
74:07:1a:d6:8f:50:37:8e:dc:e9:71:b7:38:a4:88:96:dd:e5:
2c:d1:57:48:b3:7b:4c:06:a5:7c:8b:3c:af:43:0e:31:29:48:
bf:44:bb:73:08:3b:ab:2a:4e:15:03:bc:70:5d:82:5e:6b:64:
93:14:68:e1:83:85:1b:44:d7:ce:65:cf:0a:3c:f3:ed:15:08:
f3:71:fa:ba:79:cc:0a:14:67:23:34:32:3d:76:ec:c0:c5:51:
08:8c:d1:b1:2c:e5:ab:9c:ee:34:be:94:90:3e:eb:3e:f0:53:
c2:0e:7d:44:89:5c:98:31:4b:86:a7:0c:20:41:40:25:aa:42:
b9:9e:af:9f:5f:50:8e:8c:b8:f0:a0:d0:56:4f:b6:10:41:89:
65:21:90:21:5a:2f:9c:ef:a9:61:9b:48:15:df:91:c8:18:b6:
64:51:4f:65:13:7a:fa:cc:d9:08:4d:fa:45:37:79:de:d4:66:
24:85:8a:2f:7b:4e:7f:8a:99:8e:0b:ca:22:1e:c1:49:36:74:
c0:88:22:b7:d2:4c:0f:99:ff:ef:dd:98:14:f1:72:47:61:bf:
4b:3e:5b:88:c6:45:76:58:b2:1f:2d:d5:89:28:90:fc:bb:e1:
2c:db:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:05 2025 by rpki-client