Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/Mo-swtwYVYW-xQqGZsCmy2GGqwk.roa
File: Mo-swtwYVYW-xQqGZsCmy2GGqwk.roa (raw, json)
Hash identifier: xOtyL6z3uhRGFPvEiVm8H46tU7UwLNPzCojfBVcuLpY=
Subject key identifier: 32:8F:AC:C2:DC:18:55:85:BE:C5:0A:86:66:C0:A6:CB:61:86:AB:09
Certificate issuer: /CN=8d00a003cd5e8948e1b12d267d0ea567a2211677
Certificate serial: 023F557B
Authority key identifier: 8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/Mo-swtwYVYW-xQqGZsCmy2GGqwk.roa
Signing time: Tue 03 May 2022 14:32:52 +0000
ROA not before: Tue 03 May 2022 14:32:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 130.255.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37705083 (0x23f557b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d00a003cd5e8948e1b12d267d0ea567a2211677
Validity
Not Before: May 3 14:32:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=328facc2dc185585bec50a8666c0a6cb6186ab09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:11:86:a2:af:c0:3b:39:74:46:0f:d6:33:
0b:23:b8:f5:b3:58:9b:4a:6f:c6:0c:cd:01:b9:6b:
08:50:f4:74:9b:52:6d:7f:b2:97:17:f4:e7:27:86:
25:c6:84:2d:74:1a:9f:e8:97:b2:f9:11:a3:08:67:
81:61:15:78:29:ba:a3:f5:aa:ff:5e:65:2c:72:a0:
6b:71:e0:06:ad:74:e4:c5:85:0b:4d:ee:dc:60:2a:
5b:40:dc:03:d4:13:fd:e3:53:77:5e:9f:2b:d9:39:
80:95:42:11:77:7b:fb:13:b7:6f:9c:30:ee:b8:1b:
1e:3e:e4:51:38:11:ab:81:12:4a:b0:dc:0c:09:47:
1c:ef:82:3b:c4:b1:48:21:55:74:b9:59:54:18:8f:
96:f4:b5:d2:02:35:0b:52:39:95:70:38:3f:13:e5:
e0:7e:b6:88:94:09:c8:df:f9:79:3d:86:99:81:ea:
c2:06:d4:1e:53:ca:ca:85:39:c3:f2:7b:f9:f5:81:
ab:66:81:aa:90:02:4b:8a:5b:a9:73:52:52:d6:f7:
4d:df:28:b2:29:47:87:5f:40:ce:11:27:8d:15:83:
02:1b:8e:c0:c7:09:4e:7f:57:1b:e4:21:49:3f:7e:
65:f5:a3:fd:11:0e:80:41:33:02:cf:f7:d7:8e:80:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:AC:C2:DC:18:55:85:BE:C5:0A:86:66:C0:A6:CB:61:86:AB:09
X509v3 Authority Key Identifier:
keyid:8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/Mo-swtwYVYW-xQqGZsCmy2GGqwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.172.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bd:80:c3:0b:a0:88:7c:f3:b2:90:8e:18:00:3e:0e:26:66:
a5:de:61:7e:85:fa:89:a9:df:06:9f:8e:e2:5a:36:75:37:ed:
e0:0b:0d:26:f9:ab:02:01:5f:c3:91:8b:ce:5a:9c:2d:9a:39:
30:87:85:87:81:f7:ef:c3:56:75:7f:cc:16:3b:12:60:d9:c3:
63:f1:50:b8:61:ad:a8:41:41:08:40:6e:e2:66:bc:90:67:e7:
93:a9:14:93:13:b5:81:24:85:93:f6:1d:00:09:1c:31:79:b4:
a4:02:53:cc:c8:31:77:29:70:a2:5c:2e:cb:6f:55:8b:e5:db:
58:ec:4e:2d:e1:01:b9:4b:ec:49:00:5a:b4:59:16:f1:88:4b:
7c:e5:4e:c1:a1:23:c5:1a:7c:6c:f8:e4:fd:90:8b:91:0f:48:
a7:9e:30:41:b5:04:e4:86:80:99:d3:18:3a:71:21:71:fd:91:
ad:0b:bf:39:fd:02:c1:0c:e8:01:b4:cc:48:8d:3f:41:ac:2d:
cc:4b:9e:81:39:8e:84:02:af:49:ce:68:52:4b:54:dd:9c:d3:
af:3d:85:52:3a:7f:37:a9:01:60:3b:06:a3:08:ff:28:01:4e:
f6:6c:f1:d6:48:e4:97:08:23:61:82:30:86:c5:87:3f:12:a5:
a8:03:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:33 2025 by rpki-client