Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/McMBr1hsxhXrROzf0sr3mjGRuDc.roa
File: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (raw, json)
Hash identifier: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=
Subject key identifier: 31:C3:01:AF:58:6C:C6:15:EB:44:EC:DF:D2:CA:F7:9A:31:91:B8:37
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 0194214470975B549FACB6EACC944BC35BB7
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/McMBr1hsxhXrROzf0sr3mjGRuDc.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210558
IP address blocks: 45.141.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:70:97:5b:54:9f:ac:b6:ea:cc:94:4b:c3:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31c301af586cc615eb44ecdfd2caf79a3191b837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:3a:00:58:76:40:6f:ce:6f:d7:25:fc:33:
e5:fc:3f:28:ca:f3:c9:91:ae:b4:d4:20:82:37:e8:
3a:cf:cb:65:73:97:6c:4b:f1:20:5d:9f:e8:71:fa:
c5:7a:3a:1f:6b:80:eb:25:12:a0:81:dd:54:87:99:
64:27:02:7f:e7:20:a3:80:d6:0b:28:0a:ae:88:c5:
f3:d4:c3:1f:86:6c:ce:99:11:f7:95:d6:01:2d:17:
c2:90:41:e0:b1:d7:fe:da:4c:70:b0:b1:9a:97:94:
fa:55:60:de:75:33:8a:86:ff:2d:14:29:59:50:23:
06:54:62:a4:a0:c4:64:e0:04:4d:58:94:58:59:ce:
1b:ea:3a:35:5e:10:62:9a:af:37:e9:f4:41:79:6c:
c8:f7:74:1b:b0:9c:96:46:b6:3e:be:bf:c8:05:d1:
12:6f:b3:ae:70:45:c9:db:32:05:93:c7:7b:f4:d0:
21:58:23:60:b6:91:5b:c5:9a:66:50:9a:2b:27:f9:
02:6a:d1:76:46:d1:ce:c8:92:09:75:c8:de:45:07:
ab:c1:f8:b6:36:ab:ce:0a:50:14:eb:10:dd:7d:00:
cd:12:5b:92:a2:20:b4:5e:14:c5:e5:87:90:be:f4:
d0:e3:d3:37:91:34:74:d5:25:78:a2:01:77:44:fe:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C3:01:AF:58:6C:C6:15:EB:44:EC:DF:D2:CA:F7:9A:31:91:B8:37
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/McMBr1hsxhXrROzf0sr3mjGRuDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.215.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:3c:cc:ab:3b:5a:bf:2b:73:de:03:24:53:8d:95:8f:f7:f9:
a7:ac:1b:1c:0f:0b:6c:5c:1f:72:80:ec:13:1e:de:5a:97:6b:
25:58:58:3a:38:c9:fe:1a:03:45:56:91:07:58:35:63:0f:a1:
f1:7e:0c:1a:c1:04:1b:18:00:2b:76:d5:c9:04:e3:a8:70:f9:
5b:65:13:7a:ef:72:b9:23:8f:73:00:57:5c:f6:f4:ab:4c:01:
ca:08:5b:2a:42:7c:2a:08:3c:01:e9:cd:bd:e5:5a:29:9d:41:
e6:6e:66:55:9a:93:25:8c:83:14:1b:b0:7a:67:97:a3:42:86:
f6:b6:0a:3c:f9:bd:08:87:71:50:40:75:00:49:57:27:80:f4:
64:89:0b:e7:59:68:c1:a3:fd:06:8c:d7:f9:43:98:9b:5d:27:
6b:7d:58:60:3d:bb:68:4c:cf:90:8f:54:d5:a2:97:b0:1e:5c:
0f:48:79:26:f9:ad:14:ec:1b:fc:c3:4d:6f:c2:6f:e3:db:f2:
e2:3a:23:f2:2c:94:ef:76:b3:9e:e8:2f:e4:51:cf:78:59:e1:
cf:89:f5:9c:f4:2e:04:31:7e:e6:af:20:af:2c:35:e0:2e:90:
1e:61:97:6e:55:c9:8f:65:1d:ef:a3:5e:30:57:be:0a:63:a8:
6d:6e:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:51 2025 by rpki-client