Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/MPADllIHWdYho5SL9cNb4fTjF5g.roa
File: MPADllIHWdYho5SL9cNb4fTjF5g.roa (raw, json)
Hash identifier: 0EWuYNC8MZ5sfsDzG+GHQhkCofnYevzEpH/1M0Pt09c=
Subject key identifier: 30:F0:03:96:52:07:59:D6:21:A3:94:8B:F5:C3:5B:E1:F4:E3:17:98
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019422FC3FF4DC5EA227B55058435C886FB8
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/MPADllIHWdYho5SL9cNb4fTjF5g.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 194.110.246.0/24 maxlen: 24
2a11:2a47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3f:f4:dc:5e:a2:27:b5:50:58:43:5c:88:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30f00396520759d621a3948bf5c35be1f4e31798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:93:49:ce:35:72:48:e5:e4:0d:d4:9d:f7:
62:b3:93:fd:f7:c1:dc:df:03:09:f9:a5:f2:43:fc:
04:46:bd:99:fd:53:8b:c4:57:cf:0d:ae:0b:4f:de:
cb:d5:3e:36:a5:82:47:25:64:94:c1:aa:ab:50:cc:
77:09:be:fa:ac:b9:2e:64:0f:4d:36:53:b0:78:86:
85:ee:8b:a1:5a:dc:fb:01:d8:a3:b9:83:f3:64:12:
d6:85:c2:50:e6:6e:c0:41:29:3d:64:de:59:42:9b:
4d:f1:db:76:ca:fa:11:e2:d0:b9:af:e4:52:c4:ca:
e6:b6:bf:9f:16:10:9b:46:03:2d:0b:f8:0f:42:3c:
c2:62:35:41:9f:d9:c9:d7:e1:28:50:2a:8e:43:08:
6f:5f:b3:e2:43:7b:8a:cf:c2:c5:27:9f:04:91:d2:
ee:48:a5:46:d7:e1:f4:a7:cd:34:74:09:56:83:88:
26:3c:c1:2b:c2:3a:d2:05:59:25:ef:18:5d:c7:dc:
5f:6b:16:99:5c:f8:87:7f:f2:f2:77:57:d9:46:30:
79:dd:d7:59:8d:9a:b7:4b:7c:f3:f6:68:99:be:03:
39:ae:8e:a3:17:1a:79:df:c2:ab:d3:93:96:4a:73:
f8:d0:19:6f:d9:e7:40:f1:90:d5:85:65:fe:9e:a5:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F0:03:96:52:07:59:D6:21:A3:94:8B:F5:C3:5B:E1:F4:E3:17:98
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/MPADllIHWdYho5SL9cNb4fTjF5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.246.0/24
IPv6:
2a11:2a47::/32
Signature Algorithm: sha256WithRSAEncryption
72:ef:eb:e7:c8:11:8e:5b:3b:b4:a7:85:cf:49:d6:05:30:69:
7a:15:5f:16:5a:63:90:51:fe:bd:ec:08:be:07:45:33:a7:9d:
84:8c:51:fc:fe:c2:6e:72:d1:90:a2:1d:b0:ae:4e:7c:d5:89:
b7:73:63:8e:72:11:e8:15:04:a6:38:42:36:f3:8a:c6:3e:a4:
72:69:83:27:58:ed:91:b8:b7:49:f0:0c:ce:38:e5:25:99:72:
21:30:0d:5a:f1:20:f4:02:3e:93:95:85:27:23:e5:18:54:f8:
70:6e:3a:c5:97:dd:43:a6:15:37:55:b5:54:86:a6:c3:ad:a4:
89:42:3b:2c:fe:49:03:7b:72:72:b6:13:ee:a8:ca:55:98:6f:
f2:36:49:9c:90:64:f2:f2:97:e6:12:bd:f7:b1:88:64:3d:5f:
fa:c6:86:a9:9a:09:db:d9:6c:f9:63:74:9a:a0:0a:2f:c3:2e:
03:bf:d4:97:b8:02:00:26:af:e7:3b:78:c1:c4:e8:78:a7:de:
ad:5e:33:c8:83:4e:15:fe:a7:d0:9c:20:e3:2f:21:df:78:bd:
4f:8b:e5:91:f4:03:00:09:90:45:32:b0:7e:9f:9d:e1:de:d7:
46:b4:60:aa:07:f7:26:7c:04:5f:cc:1e:0a:ed:db:67:f1:53:
e1:75:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:11 2025 by rpki-client