Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa
File: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (raw, json)
Hash identifier: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=
Subject key identifier: 9A:92:DC:2B:AA:0E:90:EC:C9:37:FF:32:BF:9E:90:87:D3:DB:DE:35
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 019427B68F11B3C24F0CC5EF8DC6CE47B982
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209275
IP address blocks: 185.174.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8f:11:b3:c2:4f:0c:c5:ef:8d:c6:ce:47:b9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a92dc2baa0e90ecc937ff32bf9e9087d3dbde35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:d3:a1:79:9d:8e:be:7d:a6:3d:f1:5e:b2:
20:37:be:dd:7e:22:e4:3f:60:9f:bc:12:dd:5f:0d:
ff:5f:bb:d7:fa:74:25:64:70:0d:5c:93:97:6e:bb:
86:7b:02:a0:48:c8:46:81:5f:e2:09:89:c7:ef:97:
e0:10:c2:ff:2a:ab:4f:89:38:c5:1a:8a:7e:6e:d9:
c9:1d:ea:6e:52:a1:9d:23:0b:fe:9e:37:da:b6:2f:
8f:b4:a2:b4:c5:21:53:a4:79:86:58:ce:13:62:31:
1e:aa:71:24:bb:3a:67:93:dd:ff:c8:e4:5d:53:45:
b6:89:93:0b:51:58:a3:2a:5c:d5:b4:cf:18:a5:06:
dd:1e:6f:5e:6d:05:90:d8:4b:ff:81:c1:7e:e3:f2:
ee:a8:f3:ca:17:62:f2:68:b2:ac:8d:03:05:97:7c:
17:b1:62:b2:90:41:c4:9e:0f:63:2c:3e:28:ce:13:
78:a6:c6:26:3a:32:db:c6:3f:b6:40:be:22:1e:41:
41:0e:51:02:12:c6:25:08:43:86:27:55:d5:31:fb:
83:4c:c3:d2:d2:e6:48:82:0e:9f:e2:86:5f:19:04:
a2:0d:57:4b:f3:25:69:6e:aa:f9:e7:0b:ba:c5:65:
74:07:00:b4:54:95:99:c3:bc:52:a7:38:44:95:19:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:92:DC:2B:AA:0E:90:EC:C9:37:FF:32:BF:9E:90:87:D3:DB:DE:35
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.31.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7e:13:e4:d1:43:93:7b:32:43:e1:c2:d6:11:73:4f:87:66:
8f:81:e9:68:d7:a8:23:67:21:f7:e0:c3:6f:23:09:fe:30:4d:
64:a2:06:31:76:3b:e3:8a:48:4b:3a:a9:08:eb:07:90:0a:85:
09:28:f5:ab:61:c1:3c:24:84:58:68:f0:c9:22:18:53:fd:cc:
4c:18:4d:e9:b1:cc:66:ea:fd:48:0b:46:09:05:4c:1c:9e:39:
a1:ce:47:a4:31:a1:56:50:0f:18:e9:c3:5c:a2:3a:84:cb:78:
4b:79:dd:cb:33:9a:b5:a0:0b:ab:39:3f:69:96:28:80:ff:e6:
ff:70:93:87:1a:fd:da:13:3f:1d:b5:11:0c:ac:ca:a1:3e:b1:
1a:22:de:34:b2:62:78:9c:ff:5d:52:a3:d4:aa:e8:5f:a5:d2:
fd:e1:6e:41:7f:4c:f4:59:6f:c8:a5:56:a4:61:d5:1b:46:29:
b3:87:45:77:f6:db:98:e3:04:f3:c8:05:de:d0:6a:7e:e2:9b:
a2:a7:ce:e6:cf:1b:8c:8d:24:4b:bf:8e:6c:65:c3:0e:6a:f0:
95:d4:7b:af:87:0c:31:dd:0a:24:6e:d4:01:93:a3:24:7f:7b:
f3:a8:b5:fc:48:23:be:8e:6f:a6:f0:4c:cd:fa:f0:8e:f0:5e:
6a:a5:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:40 2025 by rpki-client