Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MpuaQae2Bc5Uq8nIoqZNMBUF4fk.roa
File: MpuaQae2Bc5Uq8nIoqZNMBUF4fk.roa (raw, json)
Hash identifier: mk1tpniWYaa1+oUz7u6iYfT3sBnlIDpqkU508rNCdVs=
Subject key identifier: 32:9B:9A:41:A7:B6:05:CE:54:AB:C9:C8:A2:A6:4D:30:15:05:E1:F9
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281404AB6865E1545EFFDEB4DF7493
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MpuaQae2Bc5Uq8nIoqZNMBUF4fk.roa
Signing time: Thu 02 Jan 2025 17:55:02 +0000
ROA not before: Thu 02 Jan 2025 17:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41782
IP address blocks: 85.196.168.0/24 maxlen: 24
85.196.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:14:04:ab:68:65:e1:54:5e:ff:de:b4:df:74:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=329b9a41a7b605ce54abc9c8a2a64d301505e1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:5a:a1:d5:a3:f3:17:19:2c:39:0c:c7:2a:
5d:86:47:e0:51:58:1f:48:5d:4d:61:8c:ab:39:3a:
62:f3:b6:ce:47:70:71:4a:6a:10:14:bf:b6:0f:20:
f3:77:89:00:c6:2b:ca:17:9b:a6:72:24:28:d6:31:
e7:a5:84:43:af:83:2a:f1:8e:7d:0e:d3:86:f6:76:
70:2d:97:0a:4b:02:df:3e:7d:02:b0:d6:1d:69:24:
65:1b:9e:50:3f:6f:82:5e:98:e2:85:64:50:d9:45:
b7:49:f2:4d:8c:9b:7e:4d:ac:cb:f0:3e:52:65:eb:
40:98:21:ff:c5:8e:ad:89:84:31:e3:10:f1:47:81:
01:54:34:9a:70:2a:f2:5f:34:fc:51:9a:8e:11:06:
31:08:b2:50:94:ca:fb:77:c1:34:d8:4f:84:a9:1a:
6f:4b:6d:9a:5b:f7:f3:3d:e7:aa:d8:a6:57:bb:74:
80:68:ad:75:d7:08:e1:11:76:ad:f8:94:71:b8:b3:
dc:49:c2:c2:08:d7:61:c5:5e:5f:5a:15:a8:9a:11:
66:52:63:84:66:ba:9a:f6:f5:09:4a:5d:aa:9a:2b:
b0:6d:99:b3:ce:b8:c5:44:28:48:98:a0:ac:60:ee:
e3:15:ee:a6:91:6e:99:fc:96:0e:c4:89:c5:65:43:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:9A:41:A7:B6:05:CE:54:AB:C9:C8:A2:A6:4D:30:15:05:E1:F9
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/MpuaQae2Bc5Uq8nIoqZNMBUF4fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.196.168.0/23
Signature Algorithm: sha256WithRSAEncryption
26:64:e0:40:33:aa:44:98:de:f5:4a:43:9a:9e:41:17:c5:10:
6b:20:f7:77:c1:7d:6d:5f:10:f9:cf:b7:d1:50:0b:22:27:79:
84:d8:64:65:65:87:7a:d9:ea:cd:f3:bd:98:0b:da:0c:6f:a3:
f2:dd:d5:b7:99:b2:32:2a:c8:57:fb:c6:70:17:17:ee:9d:86:
69:7f:cc:4c:c3:5f:e1:45:c3:76:d4:ec:d5:b1:63:02:54:7c:
93:92:1e:b6:e7:ad:8f:26:11:36:1e:61:a8:ea:73:de:33:7c:
27:97:56:5e:72:37:6d:6f:46:e4:9c:c7:a6:a4:13:62:f3:f7:
fb:09:14:5d:ea:c9:78:e0:49:c8:38:81:3f:72:06:c4:6d:fd:
a0:fa:84:82:db:b7:8d:cb:23:dc:2d:2e:c6:ef:f5:5f:52:23:
58:6d:46:91:52:4a:83:82:9f:e7:5c:47:68:38:4c:55:b7:b2:
9d:71:b4:45:1c:2b:fb:e4:0a:66:e1:9e:04:03:1a:d1:39:e0:
2a:3c:ff:88:ab:d4:00:87:81:06:3b:0e:1d:8e:37:76:fc:24:
09:5f:7d:06:9a:28:71:fa:32:53:66:78:0a:50:8e:88:5a:bd:
d5:8d:29:bd:d7:2f:fe:7c:00:89:17:29:69:98:9b:5e:ca:33:
81:21:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:37:16 2025 by rpki-client