Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/Mjvr4NGuE3pDO-CFSsaHEnCm6Eg.roa
File: Mjvr4NGuE3pDO-CFSsaHEnCm6Eg.roa (raw, json)
Hash identifier: CQ+ihi2qHHSRaH79QR/imDhwScEG4hZDICfAO3dm1pg=
Subject key identifier: 32:3B:EB:E0:D1:AE:13:7A:43:3B:E0:85:4A:C6:87:12:70:A6:E8:48
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 0197CAABBEE4A376FE2E93157AAFF9EBF7B5
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/Mjvr4NGuE3pDO-CFSsaHEnCm6Eg.roa
Signing time: Wed 02 Jul 2025 10:25:42 +0000
ROA not before: Wed 02 Jul 2025 10:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8315
IP address blocks: 145.131.0.0/20 maxlen: 24
145.131.4.0/24 maxlen: 24
145.131.5.0/24 maxlen: 24
145.131.16.0/20 maxlen: 24
145.131.29.0/24 maxlen: 24
145.131.32.0/20 maxlen: 24
145.131.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:ab:be:e4:a3:76:fe:2e:93:15:7a:af:f9:eb:f7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jul 2 10:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323bebe0d1ae137a433be0854ac6871270a6e848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:f7:ae:b8:42:40:57:13:66:cf:65:49:f4:
a8:3c:9c:75:4b:df:b1:57:49:e7:6d:23:ca:a8:53:
3d:54:f0:7f:f2:8b:a8:5e:c8:43:36:f4:d2:73:bd:
80:37:53:26:ec:ca:9f:9a:7a:bc:3b:3f:22:64:2e:
5a:75:2d:70:5e:3c:d8:70:8a:f4:47:35:9a:87:41:
80:5b:18:78:69:d3:95:e7:90:2c:36:be:b5:93:23:
45:c1:6c:ec:b6:a5:45:cb:f8:89:90:87:b0:c8:fc:
38:84:ae:07:9e:cb:be:19:53:ea:68:31:18:52:72:
8c:8b:69:d6:0f:37:33:0b:8d:9c:37:84:8e:b5:34:
c9:fa:71:df:48:05:45:ea:ce:1a:fd:8c:f6:34:8a:
a5:30:d9:26:d5:f1:17:ff:74:4d:79:ce:ee:1e:6d:
96:3f:d2:c2:2e:1e:5e:4c:a5:59:6a:40:e8:fc:ce:
d9:3e:3c:ba:23:18:5a:21:87:9b:79:8f:bb:65:d1:
c7:0f:b9:d1:ff:dc:00:e0:ec:be:ed:c0:67:1c:5d:
f5:f7:46:90:e7:dd:84:dd:00:8c:4d:8f:52:22:16:
e6:25:b8:d8:4a:46:82:c9:72:da:c4:59:ab:14:61:
b8:d0:6b:51:ba:aa:df:b0:a8:dc:9b:89:2c:d1:16:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3B:EB:E0:D1:AE:13:7A:43:3B:E0:85:4A:C6:87:12:70:A6:E8:48
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/Mjvr4NGuE3pDO-CFSsaHEnCm6Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.131.0.0-145.131.47.255
Signature Algorithm: sha256WithRSAEncryption
37:02:25:3f:a8:ec:6e:cb:f5:82:7b:a3:c0:85:6d:fb:73:59:
88:25:0c:6b:98:e3:84:71:c1:1d:2a:5a:af:84:c0:9e:a3:10:
6e:9b:b8:b7:94:e3:e6:7c:f5:6b:b0:65:45:36:e6:63:04:79:
bc:d6:3b:4f:bc:b2:8b:2d:db:df:3c:49:5a:e0:b8:e2:24:24:
74:fe:d7:32:79:d6:c9:2b:57:24:b8:b7:c2:3b:4f:94:ae:0c:
31:87:3f:21:13:b1:25:95:2e:02:27:77:a0:0b:6a:54:0c:b5:
27:e1:38:39:8e:52:37:43:ed:ab:98:4a:ab:13:5e:1f:b7:cf:
18:b3:7c:a4:37:d3:ae:d1:fc:82:c6:36:df:44:e6:2b:d3:6f:
3f:d0:89:61:7b:82:cf:83:58:ca:74:77:f8:a0:45:13:c8:4b:
56:b0:fe:23:16:6e:6a:34:f3:81:4e:bd:72:f0:c4:9d:bf:26:
9a:7a:99:a1:e8:22:a7:22:86:d0:5d:64:9e:73:2e:ae:fe:fd:
a8:8f:01:c3:ca:e3:fa:0f:93:33:11:3b:0b:50:e0:6a:86:7d:
95:63:4c:e9:cd:56:74:99:fc:b2:46:da:11:ca:81:aa:17:94:
3d:65:bb:a8:c9:af:82:de:1c:40:85:00:68:ee:93:9b:52:03:
2c:f7:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:18:10 2025 by rpki-client