Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MB5EKAfESidUzHi73RexEt7Hyq0.roa
File: MB5EKAfESidUzHi73RexEt7Hyq0.roa (raw, json)
Hash identifier: 1Mpf4cIr/uXZXzLyQ+rUzJfJoo5EbMkale9ruyj5J7M=
Subject key identifier: 30:1E:44:28:07:C4:4A:27:54:CC:78:BB:DD:17:B1:12:DE:C7:CA:AD
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50C89F73
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MB5EKAfESidUzHi73RexEt7Hyq0.roa
Signing time: Sat 01 Jan 2022 16:01:42 +0000
ROA not before: Sat 01 Jan 2022 16:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16079
IP address blocks: 194.209.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355325299 (0x50c89f73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=301e442807c44a2754cc78bbdd17b112dec7caad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:4a:5d:96:e4:99:34:82:a9:99:50:5d:d5:
04:85:33:a2:88:de:9d:a2:f5:2c:96:20:79:02:7c:
bd:60:36:3f:83:f4:0f:74:e7:3d:38:bd:ca:a5:be:
cf:02:cf:7a:77:d4:02:7d:a1:b5:9d:a8:4a:53:b3:
70:bf:ed:27:e6:8a:c3:26:f2:fa:84:f9:ba:a0:a7:
a3:63:33:46:d8:16:90:56:ce:55:9d:ec:da:2b:80:
5b:2b:04:bf:f9:ae:d0:d1:8e:9a:d5:e1:b8:17:09:
30:5b:27:71:0d:8f:30:8e:d5:74:61:9c:89:d1:4e:
00:00:c1:81:23:83:10:7c:b1:8c:30:6f:d0:3d:9a:
bb:39:d2:6e:93:3b:c7:84:48:4c:9d:12:36:16:26:
62:76:48:99:b7:42:c0:1c:20:d7:57:a1:d7:0f:c5:
b3:a3:1a:f5:cd:bc:e1:d7:d8:f8:94:d3:c3:13:b3:
72:e9:f8:6a:9c:aa:90:02:94:9f:6d:b1:ff:af:36:
33:9f:bd:73:93:a7:41:ec:99:45:ab:68:91:b0:6f:
c8:b9:d1:e7:e1:68:c6:7a:05:d2:b8:1c:b5:9a:fe:
3e:90:20:c1:1e:90:84:ee:3d:8d:4b:ba:9a:0a:ec:
a4:50:44:69:d6:48:69:9d:4d:23:d1:5d:33:7a:ac:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:44:28:07:C4:4A:27:54:CC:78:BB:DD:17:B1:12:DE:C7:CA:AD
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/MB5EKAfESidUzHi73RexEt7Hyq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0f:50:7b:69:09:29:54:38:de:3b:90:ca:3e:d5:83:19:b2:
17:b0:45:ad:b9:86:e6:b7:c9:83:e5:a0:61:d1:3f:94:a6:7b:
69:83:83:ba:59:b3:fb:96:0b:71:60:ad:ad:ca:73:7a:7e:00:
23:77:f7:9a:16:fd:a6:3a:97:1c:e4:e4:bc:7a:ab:9a:5b:3e:
5d:e2:3f:54:99:2e:72:cb:f7:87:d0:c4:34:cc:63:11:2b:0b:
b4:e1:3e:c5:31:b1:7b:e2:31:15:c0:7a:15:04:76:dc:55:44:
d6:60:53:49:f3:73:dc:57:e8:c0:58:52:4e:9c:d5:22:34:06:
ef:f9:78:fe:1f:97:f2:b2:ef:44:f2:21:b5:f1:0c:83:45:92:
82:9f:6a:45:82:6e:2e:0c:24:a2:16:57:ec:c4:3d:a0:45:85:
cb:eb:8b:17:76:3b:0f:9b:c5:c5:09:d1:e7:02:24:be:70:2e:
30:b3:40:dd:38:1c:59:98:89:62:6a:33:9a:e7:5b:ca:55:75:
32:b4:43:df:06:57:f8:32:57:3e:88:3a:78:1a:60:40:ae:d8:
c4:32:04:3b:af:09:e5:e1:58:0a:fc:58:71:76:1e:5f:89:e4:
61:d7:bc:16:56:7f:7a:10:a9:6e:02:8d:9d:95:49:0c:73:8b:
2f:60:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:19:26 2025 by rpki-client