Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/MGKJpERDE2jnyWueLH30KtbVtvg.roa
File: MGKJpERDE2jnyWueLH30KtbVtvg.roa (raw, json)
Hash identifier: 1ThnV+vZEowhnC8JJvBU7EgcOXPtpnTjvVoY61XcB6A=
Subject key identifier: 30:62:89:A4:44:43:13:68:E7:C9:6B:9E:2C:7D:F4:2A:D6:D5:B6:F8
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195D6E4BDB5EC29FD89F01CE77763523B9F
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/MGKJpERDE2jnyWueLH30KtbVtvg.roa
Signing time: Thu 27 Mar 2025 09:17:49 +0000
ROA not before: Thu 27 Mar 2025 09:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 31.42.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:e4:bd:b5:ec:29:fd:89:f0:1c:e7:77:63:52:3b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 27 09:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306289a444431368e7c96b9e2c7df42ad6d5b6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:2c:38:65:14:50:20:a6:c6:58:05:8a:86:
6e:3b:3a:f9:38:c7:c1:c5:7a:fc:d8:fd:b2:bf:1e:
4d:69:49:92:1a:11:3e:9b:ad:34:63:a3:29:7d:18:
f6:90:5b:e1:7c:47:e7:82:3e:3d:e9:3d:71:38:1d:
4c:e4:fa:89:28:47:6a:b4:8a:e5:4e:f0:89:a0:3b:
3a:f0:12:0a:89:4b:8c:d1:71:a2:df:ce:58:f8:e7:
8d:74:cf:e4:de:de:69:86:94:9c:e2:8d:df:e7:e0:
42:05:26:f5:0a:bd:d7:a9:d0:30:b7:15:60:38:b2:
d6:8a:f6:ef:c4:4d:fc:c2:64:00:b4:f4:14:4f:5f:
42:14:4a:19:41:d3:5a:1f:44:f7:a4:b9:8d:1c:02:
0d:71:ac:32:0f:18:8c:54:34:18:3c:3e:83:62:ce:
4a:86:b9:2b:8b:1f:87:45:0f:95:9a:61:70:98:58:
04:b3:78:e2:fc:52:00:8d:8e:10:91:d2:4d:48:c2:
b5:77:0b:bb:5c:e7:9e:9b:9e:22:f3:b2:2f:ad:f1:
3d:ef:a8:3a:e7:dc:48:f2:00:e1:b1:14:e8:18:94:
f0:8d:5e:21:88:49:cd:ce:08:c7:07:49:ea:1e:48:
59:60:3d:3c:4a:65:bb:e5:63:6d:58:25:49:0a:9a:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:62:89:A4:44:43:13:68:E7:C9:6B:9E:2C:7D:F4:2A:D6:D5:B6:F8
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/MGKJpERDE2jnyWueLH30KtbVtvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:34:fa:76:79:03:a1:0b:3e:60:a9:49:86:ef:49:d8:e0:c0:
af:28:5e:f5:2f:f7:48:64:73:2a:a8:cf:61:96:a6:48:76:a4:
09:95:3f:5c:58:0f:24:da:79:ff:44:ed:b3:b9:42:ba:de:05:
1e:51:68:6c:b4:b1:e1:1d:d4:bc:c1:e4:2d:d6:cd:01:94:0b:
cb:a5:43:6c:80:a4:8b:a8:c6:e9:e0:21:7b:33:49:92:8b:fc:
2b:18:ed:cb:9a:02:74:72:8e:bf:0b:84:59:db:85:a8:8b:7d:
aa:48:e1:f7:4f:4f:59:8b:e3:6a:d1:3e:a7:9d:77:6a:38:b2:
bf:a2:39:52:02:79:5a:52:dd:69:b0:80:39:e8:cd:ad:d3:c3:
67:31:38:98:da:57:f0:11:18:c7:fb:63:81:00:4f:03:d4:b0:
3f:99:e6:f3:47:e2:a4:1c:ca:ef:b1:c4:63:aa:d4:1b:64:c8:
0a:d8:ca:8e:d5:29:4c:fe:45:f7:d2:b6:a6:f8:d4:6a:e5:0d:
13:87:1a:bd:ea:4c:c6:65:e1:53:49:2a:15:5e:ec:d6:d6:58:
42:ec:27:76:90:44:41:d0:85:25:fb:d4:0b:34:6e:d4:4e:76:
54:2e:f3:dd:ef:71:c7:d7:33:31:d6:45:1c:12:0a:9d:66:61:
1a:61:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:28:38 2025 by rpki-client