Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa
File: MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa (raw, json)
Hash identifier: kNSd9iF0Y8DMXrvxWEyFS2FyQT8gup1m11Nuuk6HbNM=
Subject key identifier: 31:D2:FB:4C:CF:FC:14:8E:05:48:D2:A9:38:69:87:12:4C:61:DC:87
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 01942369DE04557258C94457DC2A657C69A0
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa
Signing time: Wed 01 Jan 2025 19:48:48 +0000
ROA not before: Wed 01 Jan 2025 19:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 192.124.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:de:04:55:72:58:c9:44:57:dc:2a:65:7c:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Jan 1 19:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31d2fb4ccffc148e0548d2a9386987124c61dc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:a1:7a:6c:57:9b:42:f0:b7:6a:fd:fa:cd:
7e:cb:a6:3c:fd:68:17:dd:23:54:6c:ad:da:28:40:
69:f2:9d:c1:2c:8a:4d:c1:c2:c1:01:8e:db:11:e2:
c0:76:d2:5f:0c:67:03:f9:90:3d:30:08:01:93:b4:
ee:4c:20:a5:91:79:be:a7:bd:00:0b:a5:a0:d1:db:
19:3f:7c:c2:73:26:aa:0d:e7:3e:7c:44:08:db:23:
30:f7:a8:bd:e4:3c:df:ae:94:65:1b:b8:c2:4b:b4:
de:c8:e2:0e:a2:fe:79:f0:4c:0b:c6:75:fd:0c:e5:
ee:90:24:66:cd:11:90:bf:98:07:15:e1:b1:ba:e0:
3c:23:ed:6a:d1:8f:51:94:ee:b2:2a:af:19:8e:5a:
b7:9e:a0:e2:4f:7c:40:3d:89:0f:b4:c8:9b:64:bd:
b2:72:a9:09:6f:fc:a4:4b:9a:39:47:53:ba:17:35:
36:ec:27:38:03:b1:3b:b4:a6:4a:db:df:ba:73:42:
3d:3a:bf:68:9c:a4:08:5b:a2:2e:b5:2c:98:cf:df:
39:29:77:df:3f:17:10:3a:36:17:b1:60:19:01:6b:
1f:73:39:b6:8e:48:73:c7:6e:f7:a8:da:e8:13:b1:
1f:85:a3:e2:c3:ab:97:d5:a2:07:4e:f8:70:92:49:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D2:FB:4C:CF:FC:14:8E:05:48:D2:A9:38:69:87:12:4C:61:DC:87
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/MdL7TM_8FI4FSNKpOGmHEkxh3Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.112.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6e:6c:b8:6f:91:d4:cf:1a:5d:3b:bc:69:e0:08:ac:52:ad:
2d:8b:24:bb:1d:1d:da:41:dd:54:c7:ce:b5:dd:2a:db:25:c4:
34:95:1e:1f:00:fe:11:ad:5b:6c:f1:3e:cd:41:0d:6f:ad:a5:
c2:87:b9:b1:90:d9:f8:ee:f5:87:94:16:d7:b4:74:3e:d5:44:
73:20:73:b2:69:5d:68:c7:1c:82:99:b2:33:a1:44:2b:8b:7d:
83:9b:23:b7:88:a1:e2:48:c6:37:58:27:33:98:90:2e:ad:6e:
fb:72:3b:19:19:e9:a0:59:4f:02:21:bd:db:59:fb:27:28:4c:
ae:9e:37:92:d6:c6:03:7b:53:9c:84:e2:3e:64:ed:11:85:eb:
ee:13:e6:78:e3:1c:3c:26:33:cd:e0:5d:90:66:2b:5b:b2:88:
cc:fa:a6:ad:1e:0d:77:0b:88:c7:83:c0:f5:cc:51:37:0a:87:
48:13:a7:4b:b2:f5:a9:c6:32:e0:2e:4b:41:38:ef:7b:63:3a:
8c:b1:13:4a:cc:2e:c2:99:88:9e:86:68:ac:ed:70:09:04:c4:
2d:8c:b5:a0:c2:7b:0a:41:1b:b9:7e:84:d0:b3:98:2c:a8:0d:
a6:1d:1c:b2:ac:e6:85:af:1d:8b:4f:6b:bb:45:57:7a:72:10:
da:ec:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:38 2025 by rpki-client