Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/mwni58KyYHbpUQER4Pt8qtMcan4.roa
File: mwni58KyYHbpUQER4Pt8qtMcan4.roa (raw, json)
Hash identifier: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=
Subject key identifier: 9B:09:E2:E7:C2:B2:60:76:E9:51:01:11:E0:FB:7C:AA:D3:1C:6A:7E
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019420686C87FC853434021D805FC1B91999
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/mwni58KyYHbpUQER4Pt8qtMcan4.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 195.88.246.0/24 maxlen: 24
195.88.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6c:87:fc:85:34:34:02:1d:80:5f:c1:b9:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b09e2e7c2b26076e9510111e0fb7caad31c6a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:c4:63:72:7f:19:46:80:86:c3:17:29:b0:
11:b0:06:73:84:e0:d6:6d:93:76:aa:da:00:b3:4d:
51:84:c7:b0:20:74:26:0c:0f:93:e7:e5:3c:c2:b4:
5c:a4:d5:fa:12:31:fd:77:4e:97:16:bb:7b:18:89:
02:49:d8:d6:02:ed:a3:23:2c:bb:f2:59:4c:9e:2a:
49:63:96:1f:98:0e:83:50:9a:38:71:30:9b:9b:9f:
54:6e:d0:de:ed:89:76:de:9b:1c:02:69:0e:22:cf:
04:f9:49:98:27:48:f6:2d:96:76:c0:f1:9b:c3:1b:
f1:97:83:16:4c:c7:e7:79:65:09:55:e3:be:e1:59:
d4:b4:be:22:f6:10:0a:c9:88:29:65:50:d1:32:b7:
a0:27:40:aa:6d:80:99:0c:54:82:91:77:d2:6d:02:
85:9f:9e:d3:47:90:37:8b:b9:dd:bb:8e:8d:32:cf:
6d:01:68:a7:2e:a0:03:86:92:c7:09:bf:8b:78:5b:
f6:10:d6:b8:78:02:b6:2e:20:ff:5c:fa:09:94:2e:
70:8b:e6:7c:f2:bb:da:ae:c6:74:f9:54:65:7e:72:
cf:51:2d:0e:88:72:9d:53:8e:00:bc:3c:d7:62:ae:
71:3a:69:57:66:7d:b1:16:8c:97:c2:2c:10:73:5d:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:E2:E7:C2:B2:60:76:E9:51:01:11:E0:FB:7C:AA:D3:1C:6A:7E
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/mwni58KyYHbpUQER4Pt8qtMcan4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.246.0/23
Signature Algorithm: sha256WithRSAEncryption
06:41:6a:79:f6:03:5b:4b:63:3c:c1:67:ee:fa:cb:06:92:8a:
83:79:12:3e:17:61:65:58:f5:85:5a:e6:de:a4:b8:13:33:7a:
93:ed:0a:8d:36:63:08:44:be:44:0b:3c:48:c8:0d:10:e5:d5:
42:5d:25:9e:5a:d7:13:df:27:d8:b8:fb:4d:55:53:15:ed:15:
3c:6f:b5:45:a5:dd:85:49:f5:c0:a1:72:03:5a:5d:ad:5d:3c:
f0:21:52:ac:4e:5e:2e:9a:35:e4:14:2d:20:c4:1d:b3:5f:22:
12:94:a3:78:47:af:4a:cb:69:32:a7:94:b4:fa:6c:20:59:9d:
2d:35:0a:3a:b6:e2:1c:72:b9:6c:45:62:ff:d7:d6:9f:4b:5d:
35:1e:65:36:3b:76:b9:b0:03:2d:0e:e6:58:b4:55:1e:0c:49:
48:73:61:15:5e:0f:9e:d8:8e:4d:82:bc:41:53:28:25:8d:a3:
f1:c5:23:9e:6b:45:8f:7b:80:ee:f4:c1:95:c2:04:ba:7c:0f:
91:11:6e:2e:49:b2:25:0a:a1:ea:a0:ee:2f:8f:45:07:1f:7e:
32:92:25:c2:a6:45:57:16:10:d9:1b:2b:de:93:2e:a1:0d:47:
5b:76:28:77:08:ad:38:b9:93:fa:cf:f8:78:95:03:36:18:78:
b7:6c:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:42 2025 by rpki-client