Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa
File: mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa (raw, json)
Hash identifier: mR7ch814nod8YJeRcpIlHri0tj0aQVOIDu8w+ijK6HU=
Subject key identifier: 99:7A:8B:2E:BE:A7:63:8F:CE:F3:10:92:1E:CC:CD:51:C7:58:35:14
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 019424456EFC7ADCFB3CE6B47CBFC7F0BD59
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211566
IP address blocks: 193.3.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6e:fc:7a:dc:fb:3c:e6:b4:7c:bf:c7:f0:bd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=997a8b2ebea7638fcef310921ecccd51c7583514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:e3:7d:75:86:0a:25:66:e3:1e:18:51:c5:
8c:00:a1:01:2c:11:cf:9a:f6:0a:f6:ee:96:8d:e4:
98:04:04:e0:a8:ae:7d:75:03:e2:95:83:2d:46:0a:
0f:14:56:66:83:fd:ac:f9:d6:87:be:58:ca:ea:9f:
aa:a6:47:c7:04:25:01:eb:23:d0:a0:8a:6e:0e:59:
c7:e1:e4:7b:1f:08:dd:1d:84:cc:c7:b3:05:02:0c:
19:e4:1c:9f:da:ac:ca:6c:56:8d:f7:08:a5:9d:22:
c5:f4:6e:e2:43:e7:3a:f6:a6:05:5a:df:41:a0:33:
a5:6e:a5:75:03:e9:43:cf:3a:b7:2a:07:62:c6:5e:
17:4f:f2:f1:2a:e4:62:a6:f2:06:b5:fe:cf:8f:74:
98:0a:c3:88:7e:46:cc:8b:06:63:87:73:e0:19:50:
14:e3:70:03:06:bc:6a:d9:dc:44:50:bc:4a:3f:75:
0a:33:6f:27:28:89:38:a7:e0:08:1e:83:a9:ed:b2:
cf:3b:95:c0:e2:b6:b8:cf:e6:bf:d3:eb:5f:69:d5:
9e:5c:50:aa:20:3d:dd:b9:98:0a:38:9e:70:87:91:
b8:30:81:03:2d:27:af:68:f6:df:73:cb:c2:85:54:
d4:f3:53:54:c3:d8:3c:98:59:35:8c:47:c7:63:dd:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:8B:2E:BE:A7:63:8F:CE:F3:10:92:1E:CC:CD:51:C7:58:35:14
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:31:99:9a:ba:89:93:54:37:36:d9:b1:60:7a:97:1b:be:82:
85:ed:fd:f0:c0:6e:0d:5e:86:ef:d5:3a:c4:96:ee:c1:d7:e6:
29:9d:6e:f4:8a:91:90:73:98:56:8c:79:b5:d0:eb:68:71:dc:
33:d1:cd:40:b1:42:86:c4:20:2c:26:36:ca:63:ac:f4:dd:58:
3e:aa:e9:1d:e6:63:1d:d4:1e:7b:1f:09:de:fc:ee:2b:81:1d:
59:5e:ca:3b:17:15:d1:9b:c3:16:59:18:a1:96:19:68:63:3e:
10:5d:b1:0b:08:ce:12:60:15:c8:90:2d:89:26:f8:02:cf:b5:
a4:79:e9:16:8b:e9:80:be:84:35:cc:f4:bf:c1:d9:83:92:22:
d7:1d:58:64:40:a5:60:41:e4:12:ab:c5:75:73:a7:37:0b:7b:
9b:96:f3:64:f0:80:59:cc:51:1e:2a:35:0f:f8:75:1f:1b:08:
4d:42:43:03:a9:0a:1d:9b:90:92:10:de:56:c7:74:19:24:82:
1d:4e:02:58:5a:08:d3:8b:b8:d9:aa:0b:85:4e:59:70:7e:e2:
8c:74:18:c3:92:ba:6c:99:5a:2a:6c:a7:59:89:6b:87:4c:b0:
31:1a:0f:e9:9e:a3:f8:d0:dd:c9:9f:e8:5c:26:b7:c3:54:17:
3c:1d:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:27 2025 by rpki-client