Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MeMpqtUkrPjBg0Jawq4oHtGC4dU.roa
File: MeMpqtUkrPjBg0Jawq4oHtGC4dU.roa (raw, json)
Hash identifier: KG+2RfGGDcT1Pxo1cuiQiQyGpnJu3Swg419Hn93Do4Q=
Subject key identifier: 31:E3:29:AA:D5:24:AC:F8:C1:83:42:5A:C2:AE:28:1E:D1:82:E1:D5
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D1577480C73E73D9A2CC8DCA00C16
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MeMpqtUkrPjBg0Jawq4oHtGC4dU.roa
Signing time: Sun 01 Jan 2023 13:54:49 +0000
ROA not before: Sun 01 Jan 2023 13:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62164
IP address blocks: 212.2.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:15:77:48:0c:73:e7:3d:9a:2c:c8:dc:a0:0c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31e329aad524acf8c183425ac2ae281ed182e1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:0f:dc:ef:a3:43:8d:70:94:46:67:88:d7:
f9:8a:94:82:d2:ee:2e:1f:b3:bb:f9:ea:2f:df:91:
f2:d6:ef:21:60:f3:6b:cb:9d:a1:01:ef:5a:4a:a4:
11:c7:6d:89:3f:b0:df:3e:de:f0:3d:47:17:b8:de:
55:3c:c7:f5:70:8c:d2:2a:be:c3:05:e2:8e:9b:80:
26:17:e1:7c:47:2b:13:cf:cf:c2:42:05:a4:e9:a4:
14:1e:ad:95:e8:e7:f7:ea:4a:77:d2:9c:a0:fe:6f:
f2:5f:d1:ae:29:34:2b:c8:6e:8f:48:a8:c4:25:d7:
2e:ec:d4:42:67:7b:f9:99:92:e1:38:dd:50:d9:a9:
0f:bd:64:cb:d2:90:1a:81:23:06:ee:e7:41:d8:74:
4b:97:95:d8:75:37:16:e0:1a:73:19:d2:88:63:f1:
c7:3b:11:1f:89:e5:4c:b7:fc:14:a9:36:56:78:e0:
f4:f9:75:20:65:00:4f:7b:0e:86:02:84:39:9b:33:
bc:cf:7f:04:32:cf:9e:4c:94:b9:3d:4c:0a:d0:7c:
d5:69:ce:ba:38:75:93:ba:ec:84:cd:b4:9f:36:94:
f5:25:52:fb:d6:b6:74:24:8b:61:59:0f:cb:5e:88:
e3:ab:85:91:23:6c:72:37:d9:c0:65:f6:b5:ca:76:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:29:AA:D5:24:AC:F8:C1:83:42:5A:C2:AE:28:1E:D1:82:E1:D5
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/MeMpqtUkrPjBg0Jawq4oHtGC4dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.236.0/24
Signature Algorithm: sha256WithRSAEncryption
30:31:53:ec:2d:d1:14:77:98:89:00:f5:69:05:a8:e0:06:55:
0d:23:f3:3d:e3:ce:7d:83:73:75:dc:33:d9:c7:9e:84:94:9a:
f1:85:2a:29:92:de:c0:fd:9b:40:c2:19:ce:ec:98:60:14:63:
2a:51:49:be:a7:b6:a9:ea:2b:b8:2c:11:53:76:b0:1a:29:51:
b2:0c:58:d7:a5:31:93:b2:b8:78:85:2c:51:af:af:4d:aa:7f:
36:53:a3:f4:1e:2a:08:04:82:5f:67:b0:cd:12:44:be:c7:59:
61:6c:d8:ed:53:04:4d:f2:71:b1:65:d8:05:6c:fc:a2:8e:f4:
7e:3c:05:46:04:4a:f9:d7:85:f0:ef:7a:74:ef:f5:39:09:82:
47:6d:bc:42:f3:a8:1e:10:ee:2d:77:c4:8b:6d:a4:b2:df:7e:
ae:21:c5:7a:ad:5e:68:5c:5f:8a:db:64:95:fe:d0:d8:72:aa:
3d:fc:ca:c7:4d:46:7c:28:d2:1c:44:fd:e8:f5:16:83:4e:74:
f1:21:e7:ed:11:1b:8d:9d:b0:cf:a6:15:cb:28:ce:96:24:cc:
58:12:28:fe:0e:c6:3a:c3:5b:f0:f0:ab:dd:25:30:04:16:a7:
dc:37:98:78:26:a6:92:db:06:e5:c4:18:23:c8:63:20:58:4d:
12:2a:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:25:45 2025 by rpki-client