Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1-MSRWSQtqSdDykFqgK028cizJi0.roa
File: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (raw, json)
Hash identifier: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=
Subject key identifier: F8:C4:91:59:24:2D:A9:27:43:CA:41:6A:80:AD:36:F1:C8:B3:26:2D
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0194266C2BE7DA95B72D572BA351755ECF01
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1-MSRWSQtqSdDykFqgK028cizJi0.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 82.115.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2b:e7:da:95:b7:2d:57:2b:a3:51:75:5e:cf:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c49159242da92743ca416a80ad36f1c8b3262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:59:6a:c5:69:46:a2:4e:3c:f0:98:c0:a0:
38:b1:cf:9c:08:9f:e3:b7:6e:82:cc:a8:aa:08:d8:
cf:47:19:c3:ee:80:f3:58:ce:3b:cc:04:19:9e:58:
e4:f1:4e:82:3f:8c:56:51:78:06:17:4b:cc:da:0f:
f0:1e:41:d2:1f:d0:bd:49:c5:2c:6b:8a:52:42:67:
bc:ec:19:d4:60:62:d5:21:db:4e:cd:95:d0:72:f5:
ec:31:bd:ca:c0:a8:6d:c7:57:e6:e2:1a:6c:85:13:
d5:23:ed:f5:92:e6:d9:0c:67:1b:de:6f:85:de:98:
f5:27:8e:43:61:fc:38:25:10:fe:22:a7:fd:1c:a8:
43:32:8a:77:65:1a:92:67:2d:00:63:e3:00:05:71:
80:69:47:a9:bf:10:a4:1a:71:31:ac:93:4b:f8:2c:
0b:8a:7f:a8:33:2c:e4:90:6f:6c:b1:ab:41:b9:22:
17:e9:e4:d8:d1:f0:21:0c:db:99:3e:f6:55:57:98:
00:95:0f:99:fd:bd:8d:56:57:5f:db:3c:32:e0:48:
e6:da:1b:f8:0b:bb:7d:41:69:e7:5e:3c:6b:d3:66:
66:c3:22:b1:24:98:87:31:09:0b:c9:d9:5c:bb:4e:
8d:0c:cd:3f:a6:17:73:5d:45:7d:3c:5f:00:1c:2b:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C4:91:59:24:2D:A9:27:43:CA:41:6A:80:AD:36:F1:C8:B3:26:2D
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1-MSRWSQtqSdDykFqgK028cizJi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fc:7c:b5:17:ec:e8:d5:47:96:b4:29:8f:65:66:89:9f:10:
ca:b1:64:f1:7a:d8:36:ef:bb:44:c5:9c:7a:20:6b:5c:ec:40:
51:dd:b2:66:3b:32:98:5d:93:bb:ed:ec:64:05:a8:b9:dd:4a:
eb:be:63:b3:a8:d2:5e:61:ff:aa:d2:c6:fe:f7:1a:e0:db:37:
83:82:5c:e4:4f:15:ed:ec:fc:57:58:8b:1d:92:2a:dc:eb:e6:
60:88:f8:d1:b3:1e:08:11:0e:df:a7:21:30:e9:c6:20:b4:a0:
17:9a:05:da:cf:71:57:67:5a:46:41:da:b3:6d:7b:9c:aa:00:
fb:cd:4e:10:04:2d:31:e9:fb:3c:5b:7c:44:12:8a:e3:0c:dc:
2e:28:5b:b8:36:df:72:f4:0f:20:2d:dd:d3:71:4b:dd:53:88:
c3:07:7f:09:5b:52:c6:13:33:07:d2:43:59:87:d4:db:33:18:
73:8e:2a:23:96:cd:08:61:f6:61:7e:5e:bc:9a:43:c6:78:aa:
cf:55:42:d9:56:21:fa:ea:6b:22:8a:12:0a:ea:72:9a:88:32:
a5:a4:26:09:d8:e0:72:e8:52:bb:0f:84:4d:62:c3:8c:73:0d:
ed:76:f6:fa:63:c3:77:6a:35:a9:a9:a6:13:9a:ab:79:fe:dd:
19:df:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:42 2025 by rpki-client