Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/mOQsXh6W-nguYweUEP-GggtQ8co.roa
File: mOQsXh6W-nguYweUEP-GggtQ8co.roa (raw, json)
Hash identifier: BRX6qGv8sEq7HbLRmf+hKda82RdBa8GI6j+263A+qA8=
Subject key identifier: 98:E4:2C:5E:1E:96:FA:78:2E:63:07:94:10:FF:86:82:0B:50:F1:CA
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 0195D57CF0756DD58400F507C96A6974BED1
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/mOQsXh6W-nguYweUEP-GggtQ8co.roa
Signing time: Thu 27 Mar 2025 02:44:49 +0000
ROA not before: Thu 27 Mar 2025 02:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59253
IP address blocks: 194.127.192.0/23 maxlen: 23
195.85.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d5:7c:f0:75:6d:d5:84:00:f5:07:c9:6a:69:74:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Mar 27 02:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98e42c5e1e96fa782e63079410ff86820b50f1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:a6:36:c5:47:ee:45:c9:bc:8e:fd:1d:cf:
50:d8:92:48:fb:a3:6b:f4:c8:77:ed:74:92:9c:96:
cf:f4:c4:13:b8:22:05:13:e9:3d:e7:2f:39:e1:ac:
b5:95:6f:83:9b:ce:29:d8:a0:11:06:54:76:89:af:
47:5d:2a:30:80:14:18:61:39:38:d9:a6:6d:c1:5d:
bc:97:b1:d5:49:31:02:7b:e0:70:c5:8f:84:de:51:
28:9a:c2:ea:8e:95:0f:9b:1f:3b:a5:8d:06:e4:11:
64:13:33:7a:c4:47:fe:f9:c7:0a:0d:1c:b0:df:f9:
1b:f6:67:92:0b:42:83:47:6c:3e:38:9d:bf:27:f5:
77:70:c1:5a:99:04:00:2d:a8:a5:6d:c2:87:a3:f1:
90:c1:29:51:5b:a9:24:1b:bc:ff:c8:b9:42:4d:ef:
49:7d:02:f1:01:c1:56:56:03:91:18:85:54:e9:e3:
df:a4:9b:f9:65:e6:fd:95:b5:75:4d:2e:fa:44:58:
48:fe:ad:ef:da:17:15:81:26:2f:db:db:18:38:6e:
fc:b6:95:fc:c1:48:1a:b8:4f:5e:09:8e:ef:3c:fa:
c6:21:94:84:2c:e9:c1:6d:fa:8d:91:be:b2:9a:da:
bb:1c:d8:e0:04:7d:33:38:37:61:75:9b:7e:ff:9a:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:2C:5E:1E:96:FA:78:2E:63:07:94:10:FF:86:82:0B:50:F1:CA
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/mOQsXh6W-nguYweUEP-GggtQ8co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.192.0/23
195.85.19.0/24
Signature Algorithm: sha256WithRSAEncryption
07:80:e3:2d:f1:19:25:ae:f3:69:25:91:a9:29:f8:d4:b1:a7:
32:1a:1f:da:06:b6:f5:d3:92:55:be:9f:c4:85:8e:01:b2:dd:
93:ba:95:f1:33:45:06:fb:bb:8f:b9:67:b3:79:d6:08:a8:0f:
f4:f5:25:8a:4d:21:5b:02:09:a5:ef:ee:b3:a2:42:b1:7f:07:
d4:eb:b5:36:81:7a:57:3d:9a:be:2b:1e:09:82:4b:3d:bd:24:
55:fc:2d:fd:9f:2f:1b:ea:cc:ca:de:df:c1:1a:91:33:82:1c:
e5:15:36:f2:aa:60:76:70:e8:96:8a:e2:f4:00:7d:b5:02:a3:
fb:b5:c7:a0:0c:45:87:62:95:be:73:b3:62:35:6d:59:b5:b8:
d5:01:e9:03:e9:6c:4c:14:44:d0:7e:e1:2f:79:81:7f:22:b2:
8a:af:dc:b7:e3:30:6d:4e:2a:4a:4b:67:5b:6d:d7:a3:ae:f1:
e3:28:97:5a:a8:a9:35:7f:05:4d:7f:54:e7:33:2c:7d:77:e6:
58:be:06:01:5c:e1:96:1f:87:3c:ad:cd:12:4b:5b:83:ab:76:
49:c9:fa:8c:0a:02:a6:8e:19:8f:89:45:e5:5b:cb:a8:23:f3:
f9:e2:0c:69:3c:32:e4:95:c0:43:ab:7d:ab:97:97:58:1a:e5:
76:d5:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:07 2025 by rpki-client