Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/M1JMBMjlsJbVljDt2PzSy5MjCBw.roa
File: M1JMBMjlsJbVljDt2PzSy5MjCBw.roa (raw, json)
Hash identifier: sQKzTWvI6Di9zG+70fZhGo8ykxUqEGqnJHybbUE2olY=
Subject key identifier: 33:52:4C:04:C8:E5:B0:96:D5:96:30:ED:D8:FC:D2:CB:93:23:08:1C
Certificate issuer: /CN=588db30c807839cc534dd6d11ab90420f873d639
Certificate serial: 019427B4F62B80156E41F862F3C44D846F9C
Authority key identifier: 58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/M1JMBMjlsJbVljDt2PzSy5MjCBw.roa
Signing time: Thu 02 Jan 2025 15:49:18 +0000
ROA not before: Thu 02 Jan 2025 15:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395754
IP address blocks: 193.138.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f6:2b:80:15:6e:41:f8:62:f3:c4:4d:84:6f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588db30c807839cc534dd6d11ab90420f873d639
Validity
Not Before: Jan 2 15:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33524c04c8e5b096d59630edd8fcd2cb9323081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:e6:47:e7:46:1b:56:45:30:b5:38:da:63:
48:31:c9:5a:31:28:b6:81:dc:23:aa:ef:74:ee:b3:
f8:5e:da:ec:fd:21:87:ac:6c:ce:cf:0a:60:03:39:
2f:03:fe:2b:43:e3:bf:11:dc:2d:02:93:b8:11:66:
3f:55:3e:96:98:74:9c:0e:8d:1f:ff:71:9a:74:8f:
eb:77:82:55:a9:82:32:5d:02:8e:2b:ae:a5:42:70:
35:32:be:24:1a:d1:a0:a2:98:ce:fb:52:ac:1f:c2:
1f:0d:db:86:3b:da:dd:b4:b7:9c:51:a8:36:49:68:
b9:dd:c5:4d:7e:6e:4b:0a:ca:90:47:4a:de:b1:14:
91:04:bb:f3:2e:ea:72:6a:a0:a0:17:1e:58:eb:8c:
bf:2b:ff:0d:fc:91:dd:40:f5:9e:ce:91:2f:d4:67:
5f:72:94:1e:56:81:54:f0:15:22:b1:6c:46:46:0b:
d3:15:1b:b8:9e:7a:93:36:56:86:c2:6f:85:8c:a8:
b3:b0:20:46:b4:e5:b7:ec:75:33:ef:5e:f2:63:fb:
63:7f:f0:bf:98:20:dc:33:78:9c:23:0e:65:98:e9:
5d:f4:cb:86:ff:7f:ed:dc:78:4e:ce:68:e1:76:49:
4b:1b:a2:82:cd:f3:64:71:ca:25:f5:62:83:db:3c:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:4C:04:C8:E5:B0:96:D5:96:30:ED:D8:FC:D2:CB:93:23:08:1C
X509v3 Authority Key Identifier:
keyid:58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/M1JMBMjlsJbVljDt2PzSy5MjCBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.77.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8e:5a:14:97:5e:03:d3:26:b8:2b:fa:a5:18:56:a8:60:18:
b0:e9:8a:6a:30:91:6d:5b:6b:ee:09:a8:68:39:4a:df:e8:08:
02:d7:4c:db:61:e1:37:df:bd:1b:f4:86:80:c1:40:c2:92:6e:
1f:47:0d:28:c3:2c:b9:2e:6d:c5:b3:f6:0b:98:eb:85:30:9f:
8c:68:21:64:fe:4b:2e:52:ad:59:e5:2c:c9:ec:02:dd:1e:23:
ed:95:52:f4:3b:fa:da:61:ee:5e:b2:7c:06:0c:12:59:3b:c7:
5e:f0:cb:46:bb:f4:dd:9c:ca:b2:62:89:81:b8:94:99:e9:f6:
a7:f0:32:76:82:e0:50:50:70:05:5e:fa:20:a3:ac:e0:1a:b7:
96:8a:c1:29:1d:a8:09:18:f3:a3:d9:3c:04:85:45:4a:b9:55:
5d:ec:74:89:80:e1:37:c9:50:9e:fc:51:9b:fb:d0:3b:5a:9b:
f4:14:80:88:7f:3b:0e:fd:7f:00:e9:c0:91:53:cd:7d:d8:2e:
5d:4d:64:19:98:39:c1:7c:1b:70:69:bc:b8:de:88:62:bb:79:
51:4a:41:6c:01:7f:4b:3c:56:e2:53:d0:06:e1:03:c7:02:70:
89:49:52:28:ba:cd:f2:51:c0:39:68:ff:5b:d0:4a:49:3f:b9:
1c:5a:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:07:15 2025 by rpki-client