Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/mRVXq0jSQeINzgzvWn8_tqd_T1U.roa
File: mRVXq0jSQeINzgzvWn8_tqd_T1U.roa (raw, json)
Hash identifier: PxXEDBN3s528YCxI5BOz87jQJRpFbPQowTa3bYh1x6M=
Subject key identifier: 99:15:57:AB:48:D2:41:E2:0D:CE:0C:EF:5A:7F:3F:B6:A7:7F:4F:55
Certificate issuer: /CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Certificate serial: 04CBBC58
Authority key identifier: 19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/mRVXq0jSQeINzgzvWn8_tqd_T1U.roa
Signing time: Sat 01 Jan 2022 16:02:26 +0000
ROA not before: Sat 01 Jan 2022 16:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29551
IP address blocks: 193.24.208.0/22 maxlen: 22
91.238.180.0/23 maxlen: 23
2a00:1910::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80460888 (0x4cbbc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193b6e4d0be89035e79939b5002fc5c16c9bcc
Validity
Not Before: Jan 1 16:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=991557ab48d241e20dce0cef5a7f3fb6a77f4f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:4e:39:99:35:d8:56:6c:fc:b7:a7:d3:b7:
bf:6a:42:21:28:03:7d:34:33:2d:48:0e:01:69:b0:
35:cb:a4:f2:09:40:1c:13:02:cf:0d:fe:3f:03:e5:
a0:c0:e9:c4:65:ac:93:d1:59:49:6f:7c:16:ed:4d:
14:8c:d5:1a:3e:35:c8:f1:1c:36:fa:cd:9d:34:ce:
1d:5c:cf:74:89:44:91:39:69:60:98:c9:db:63:c8:
48:f3:63:d1:fb:f6:a8:cf:c0:e2:e6:3d:ff:c5:97:
3d:34:4e:de:e9:4e:82:0a:2e:55:20:22:40:0b:7a:
e2:e9:d5:dd:8a:52:3e:a0:0a:87:2a:fb:5c:36:0f:
55:bb:13:81:7c:19:a9:bf:3b:e2:aa:be:6a:4f:ae:
e4:f4:1b:48:07:c0:de:09:df:f3:c7:00:1f:c3:eb:
d4:3e:c7:1a:a5:d7:5f:9e:64:f1:b0:77:04:3a:54:
84:98:74:2f:a4:e2:e9:c8:80:45:bf:e4:d3:ca:83:
a2:74:65:67:e0:b5:8f:e9:e5:95:0a:90:11:d4:8d:
87:fe:99:91:7b:fe:f0:b4:83:cf:97:e2:20:89:0b:
3b:d2:da:7d:fb:9e:ed:7d:20:dc:d6:96:e5:95:82:
d2:3b:95:13:2f:5c:99:cf:ba:fc:d1:14:c1:e0:d5:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:57:AB:48:D2:41:E2:0D:CE:0C:EF:5A:7F:3F:B6:A7:7F:4F:55
X509v3 Authority Key Identifier:
keyid:19:19:3B:6E:4D:0B:E8:90:35:E7:99:39:B5:00:2F:C5:C1:6C:9B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk7bk0L6JA155k5tQAvxcFsm8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/mRVXq0jSQeINzgzvWn8_tqd_T1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e93848-3525-4bcc-b22d-893989aef00e/1/GRk7bk0L6JA155k5tQAvxcFsm8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.180.0/23
193.24.208.0/22
IPv6:
2a00:1910::/29
Signature Algorithm: sha256WithRSAEncryption
77:b0:a1:45:20:e7:79:92:74:8f:5c:47:b5:63:92:31:4e:ec:
ba:6f:6e:a0:df:bc:89:a6:95:62:cd:4b:86:ee:91:8a:09:05:
2b:30:2b:1f:95:13:ca:bb:1b:0e:74:e6:f9:4d:de:99:09:86:
f5:5f:cf:b9:db:d7:f1:89:cf:dd:bf:21:30:4e:3d:f1:f0:be:
b4:35:55:cc:59:d4:45:6e:6e:f7:72:82:2d:9c:ab:00:a0:6f:
ea:af:b1:e9:bb:3f:0d:ac:90:4f:8c:66:5e:3d:60:82:77:ca:
3f:04:29:d9:cb:ff:7a:8f:40:34:60:db:cd:0c:b8:5d:76:c2:
00:7e:bd:fc:18:ea:5a:bf:42:7a:79:ba:6f:9f:a7:ee:ba:e7:
3d:b8:7c:67:97:3a:ad:12:6f:d8:35:8f:38:16:a9:62:e0:fb:
8d:0c:6e:ed:f4:bb:06:bd:65:08:66:ae:6d:fa:c2:b2:b6:41:
e5:f2:2a:97:ad:c4:dc:fa:20:b7:a0:79:f8:d4:c2:f6:07:47:
1e:26:81:cf:1b:6b:3b:eb:ff:7e:09:57:32:dc:8f:0e:61:75:
b8:19:03:fb:92:b1:45:4e:be:57:3e:7c:57:c4:09:6c:5e:cb:
9f:b5:e5:a5:88:4f:26:df:fd:c7:0b:c2:6b:04:aa:b4:95:8f:
1f:e3:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:45 2025 by rpki-client