Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MRygv3MuloWs8KvcghLLj56EsCk.roa
File: MRygv3MuloWs8KvcghLLj56EsCk.roa (raw, json)
Hash identifier: VvN4LboWfosN56WKZEKz8HgMLMMZBdP07k9Bavq15E8=
Subject key identifier: 31:1C:A0:BF:73:2E:96:85:AC:F0:AB:DC:82:12:CB:8F:9E:84:B0:29
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019584EA1047291FCF4E8E9E9094FF65C359
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MRygv3MuloWs8KvcghLLj56EsCk.roa
Signing time: Tue 11 Mar 2025 11:14:46 +0000
ROA not before: Tue 11 Mar 2025 11:14:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 194.113.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:ea:10:47:29:1f:cf:4e:8e:9e:90:94:ff:65:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 11 11:14:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311ca0bf732e9685acf0abdc8212cb8f9e84b029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:25:13:da:60:7c:05:6f:94:52:12:a0:a9:
cf:09:24:83:6f:29:e3:c0:1d:1b:52:5c:a5:9b:66:
b9:f0:b0:df:76:97:fa:55:60:6b:b4:10:60:fd:d7:
23:92:fa:bf:ca:f3:ac:6c:ad:a9:f4:f0:61:49:33:
44:77:22:1d:58:75:a3:16:b9:aa:b8:ad:20:6b:82:
47:b8:f8:b6:06:9c:4d:78:78:10:16:bc:98:5e:a7:
80:15:ca:bc:84:97:80:20:dd:4f:0f:c9:f4:81:13:
33:1b:3d:00:9b:03:b1:a4:d4:c5:d4:70:f2:db:bd:
f4:5c:a4:1a:d6:5f:77:2e:b9:a8:d4:1b:3d:72:09:
b5:fb:1b:8a:35:49:f1:bb:20:d5:ff:55:21:86:74:
18:7c:a2:45:d3:ce:5d:0d:f8:f7:07:41:41:e4:21:
a8:5e:93:e2:80:47:5a:4f:ae:fc:24:cf:c5:60:b7:
0d:47:7f:fc:a8:96:fc:98:ba:89:70:1d:38:1b:7e:
9b:cb:f0:ab:3f:e0:3a:6e:a8:3c:b5:a5:15:0e:ef:
9b:21:7e:b4:56:00:f9:aa:e9:ce:04:90:31:61:ae:
be:f1:e2:c8:8c:69:e9:ce:6f:e7:a6:52:1d:55:ff:
27:13:37:b1:42:53:96:fc:10:50:e8:1f:30:61:1b:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1C:A0:BF:73:2E:96:85:AC:F0:AB:DC:82:12:CB:8F:9E:84:B0:29
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MRygv3MuloWs8KvcghLLj56EsCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:09:2a:02:e9:7e:2c:02:b7:d6:a1:82:dd:ae:dd:52:1e:d5:
de:d8:fa:20:ea:63:b6:b1:e2:3c:54:df:6b:65:96:0e:29:00:
05:99:44:39:e6:d8:01:62:34:87:e8:17:94:ef:9b:48:a0:75:
a1:8c:ad:f6:6e:6a:81:97:39:15:46:4f:c0:0c:9a:d1:cb:2e:
e1:6a:91:f9:8d:e2:ed:8a:c4:55:a2:c6:87:02:64:81:ed:fc:
17:27:d8:f1:6d:1a:40:78:2c:3b:56:e3:24:fa:c6:89:54:75:
59:35:a0:91:36:c3:fc:d8:10:16:de:18:74:7f:09:08:4b:03:
55:cb:ae:90:e6:8a:3c:0a:ca:88:b8:63:dc:7f:3a:d7:08:3f:
24:f8:87:8f:50:b7:29:68:79:91:3d:a5:c9:d4:e9:71:27:79:
c7:ea:44:c0:d9:27:71:ed:b7:7e:ef:da:9c:3a:42:58:ef:01:
39:6f:46:fc:30:87:c1:2b:d3:ed:e7:b8:9a:41:31:03:b4:63:
2c:73:51:44:fd:3c:2a:74:af:d3:3c:61:4d:79:47:ea:68:5a:
54:ca:9e:0b:78:e8:bd:80:ab:16:4a:44:f9:ef:30:00:cb:40:
a2:8a:e3:a8:cd:d3:b3:7e:92:14:f7:d6:32:e7:f6:58:e1:02:
ae:89:6d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:58 2025 by rpki-client