Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MGBgFnuOh3WnHDaMYkQQAjeU-SY.roa
File: MGBgFnuOh3WnHDaMYkQQAjeU-SY.roa (raw, json)
Hash identifier: OdbbWCytL3KtDhZsM2rekYGvwev/h+0wntsoGdzn87g=
Subject key identifier: 30:60:60:16:7B:8E:87:75:A7:1C:36:8C:62:44:10:02:37:94:F9:26
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194206845B89BD8EDC9C7AB2803CE119809
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MGBgFnuOh3WnHDaMYkQQAjeU-SY.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 193.233.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:b8:9b:d8:ed:c9:c7:ab:28:03:ce:11:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=306060167b8e8775a71c368c624410023794f926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:04:c3:db:92:b8:b6:fa:0d:9f:4a:cd:4a:
22:45:8d:09:6c:19:c2:bb:7a:29:a1:27:26:75:11:
a6:b2:c0:f8:9f:56:46:a0:e1:85:71:49:34:66:fa:
74:bb:f8:5e:76:68:8d:58:21:13:8b:25:a2:61:22:
cc:8b:7e:c0:b9:69:e9:cc:f0:fd:11:d6:d9:83:86:
b4:6c:1b:5d:70:5e:e3:28:a5:bb:17:0b:06:d2:15:
86:d5:a9:04:f3:cb:b7:b5:fb:f3:1c:b4:46:db:77:
20:2e:fe:52:72:62:0b:94:36:11:da:ea:97:f3:4b:
56:a2:b5:74:02:dc:93:04:fe:01:ac:d3:b9:76:29:
4e:73:97:05:f9:cf:7b:d3:b9:83:43:81:11:97:ad:
1a:b3:cc:59:db:cc:77:d1:bb:6c:cb:45:3f:fc:8e:
7c:1a:4e:ad:7d:f4:30:6f:05:03:3b:76:cc:3e:47:
7a:e3:cc:cb:62:bc:f5:83:a8:97:6c:ef:04:7d:cb:
8c:ff:bf:d3:4c:e6:be:e6:fe:37:2f:ec:27:bf:84:
05:73:1d:6e:9b:69:14:a0:b1:50:2d:38:87:05:5a:
60:d9:7b:11:24:14:09:73:38:14:13:ba:e3:c1:c4:
62:fc:0f:37:78:62:95:11:ed:84:b3:b5:47:36:a0:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:60:16:7B:8E:87:75:A7:1C:36:8C:62:44:10:02:37:94:F9:26
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/MGBgFnuOh3WnHDaMYkQQAjeU-SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.23.0/24
Signature Algorithm: sha256WithRSAEncryption
53:82:01:a8:66:81:1a:95:f9:dd:2a:17:a0:7a:46:34:74:8e:
a5:4c:a7:de:d9:e1:8e:94:8e:c9:b7:75:65:c0:8e:88:b2:ba:
64:61:d8:76:42:5e:7f:d7:40:bf:66:22:86:68:d1:4d:d2:46:
39:3f:21:9c:fc:8e:34:43:92:36:b0:bf:d8:e0:cb:d4:c6:6f:
42:e8:fc:23:62:06:e2:c5:92:c8:be:13:38:18:9e:88:18:ff:
05:90:0c:fd:91:d4:55:a4:fb:10:97:ef:7f:5e:c1:36:d1:9f:
8b:d1:91:1b:b1:66:07:a2:75:1d:b8:45:8b:29:87:1d:67:07:
ab:b4:fa:b4:3c:0f:3e:31:4d:62:8a:e1:02:f9:b3:b7:c8:94:
91:d1:75:40:3f:28:05:60:1b:0b:81:a2:4b:12:29:0e:17:02:
80:c2:78:35:20:58:46:61:7c:3b:6f:d4:b7:0c:a6:84:aa:9f:
2f:71:9a:77:ff:1c:61:5f:fb:30:d3:f1:b7:9d:23:d7:d4:33:
61:46:e3:5e:3b:31:23:a2:26:47:ec:e3:fb:c5:05:ae:da:d9:
1d:62:04:92:4f:5e:cb:04:ad:0f:f4:a3:47:66:8f:e4:2a:73:
b8:e9:51:93:bb:f6:1f:56:5c:f0:66:39:12:6b:5f:da:1c:5b:
67:c6:7c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:03 2025 by rpki-client