Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/MPSpsfmm1aBr8PDg6LyP8ShoPfU.roa
File: MPSpsfmm1aBr8PDg6LyP8ShoPfU.roa (raw, json)
Hash identifier: 4CLEgTtvNEmoTzRcuQA1AS5u+FjJ5c/zaGsG0yBJgkg=
Subject key identifier: 30:F4:A9:B1:F9:A6:D5:A0:6B:F0:F0:E0:E8:BC:8F:F1:28:68:3D:F5
Certificate issuer: /CN=be132774bbf8f4aa1f2c2fc317872199861ac904
Certificate serial: 69A6A4
Authority key identifier: BE:13:27:74:BB:F8:F4:AA:1F:2C:2F:C3:17:87:21:99:86:1A:C9:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhMndLv49KofLC_DF4chmYYayQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/MPSpsfmm1aBr8PDg6LyP8ShoPfU.roa
Signing time: Sat 01 Jan 2022 03:52:15 +0000
ROA not before: Sat 01 Jan 2022 03:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.9.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6923940 (0x69a6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be132774bbf8f4aa1f2c2fc317872199861ac904
Validity
Not Before: Jan 1 03:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30f4a9b1f9a6d5a06bf0f0e0e8bc8ff128683df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:68:3b:0c:4f:f8:ed:91:5d:73:ba:40:1b:
3d:18:79:3f:e5:ab:78:42:a1:96:76:cd:8f:e2:85:
01:39:5f:b0:c2:2a:42:99:10:c7:ca:bb:ee:d2:f9:
49:07:eb:72:e0:79:5e:82:61:0e:bc:fc:51:b0:28:
53:50:0f:86:18:20:7f:2c:31:7f:ee:ff:b5:95:63:
60:b7:3c:b5:e3:0b:24:16:f4:a3:0b:b0:54:1c:12:
60:60:ea:41:00:d8:75:4d:23:66:aa:6a:f7:4c:b2:
84:06:fd:36:80:16:90:73:14:3a:b3:ed:e3:4c:0e:
f7:62:1d:9e:1a:d8:84:dd:75:53:1f:99:4e:40:52:
e6:d3:84:48:4d:54:aa:30:c6:25:8a:92:ab:5f:1c:
d3:f1:c4:29:48:c4:66:3f:c1:73:50:4b:6c:57:2d:
32:a2:d0:17:99:f1:2a:e6:ce:d8:e8:af:73:ef:cd:
f1:72:c7:d5:69:a2:4f:21:dc:40:dd:88:d0:59:b6:
4d:d0:73:55:81:e1:71:4e:8a:5c:30:ab:99:ca:ff:
4d:d6:23:78:c6:c2:5e:14:af:ba:87:b9:58:c2:14:
7e:13:7f:65:99:96:a7:11:7b:c9:90:a1:b7:ff:2a:
a2:00:23:16:8d:0d:a3:27:7f:ad:51:4a:8b:7b:cb:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:A9:B1:F9:A6:D5:A0:6B:F0:F0:E0:E8:BC:8F:F1:28:68:3D:F5
X509v3 Authority Key Identifier:
keyid:BE:13:27:74:BB:F8:F4:AA:1F:2C:2F:C3:17:87:21:99:86:1A:C9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhMndLv49KofLC_DF4chmYYayQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/MPSpsfmm1aBr8PDg6LyP8ShoPfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/cee4c2-e8ac-4742-bd06-e49c43f18746/1/vhMndLv49KofLC_DF4chmYYayQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:76:72:93:98:72:ff:68:1b:e1:c0:dd:34:e5:c6:3b:a7:c5:
c0:34:ff:b7:4f:f1:d5:08:48:e7:0d:86:b8:af:7e:3b:73:c7:
d7:78:b4:88:6e:59:cf:42:05:06:24:2c:aa:b0:43:ec:07:a7:
50:b9:fa:62:da:5e:1d:64:dc:c0:40:60:45:f5:9c:fc:7e:82:
3d:f0:1b:7e:eb:73:65:3b:92:05:7d:a9:e6:ff:a3:03:24:93:
d6:ff:fb:ef:24:c1:00:29:d1:25:3e:ca:22:cf:24:82:3b:ef:
de:00:2a:d5:d0:83:9a:2a:2a:de:0c:39:a7:b0:cb:3e:51:45:
6d:1e:5d:c1:03:7a:00:6e:c3:90:3b:14:cc:9c:f1:f0:22:b7:
31:dd:18:ac:b6:81:7e:c0:1a:2f:1b:79:09:5d:83:57:71:01:
d9:aa:1c:76:29:6c:00:5f:f4:85:65:45:0a:34:32:28:a3:a1:
c2:27:f1:93:9f:19:86:3c:c5:37:ad:80:92:78:e9:ee:cf:b7:
64:06:7e:ca:f6:7a:58:f0:cb:4b:80:de:31:f5:60:b9:28:69:
43:1f:9c:3f:45:ac:58:07:9b:ff:e3:2f:ca:9b:88:54:4f:67:
7e:4b:66:ad:ad:8d:e1:de:18:2d:c8:8f:30:a7:fb:ca:fa:82:
b0:97:94:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:41:49 2025 by rpki-client