Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa
File: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (raw, json)
Hash identifier: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=
Subject key identifier: 31:DB:67:D9:63:52:04:DB:04:F4:06:BD:8A:FA:68:BA:CA:53:67:37
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 0194206853FADB213AD0ACB488B1AA9749A0
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 185.77.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:fa:db:21:3a:d0:ac:b4:88:b1:aa:97:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31db67d9635204db04f406bd8afa68baca536737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:cc:76:49:65:ee:2a:31:5c:a1:39:ec:e6:
8d:66:49:c0:10:03:7a:9e:1e:c8:18:04:37:b9:53:
00:2e:27:92:d9:8d:14:66:c4:01:ac:e0:99:d4:49:
61:0d:ca:6d:e9:13:db:cd:f8:e0:86:08:57:d0:4b:
49:bd:43:b8:da:d3:30:79:df:ff:3f:50:cc:38:29:
39:23:97:5e:b5:dc:be:bc:6e:11:f7:b7:cf:f6:2b:
94:ef:46:37:97:96:47:cd:32:4e:ef:1c:bf:27:7f:
9b:28:b6:d5:34:03:9c:04:09:98:c3:80:18:3b:c6:
75:bf:31:71:54:ba:b9:7e:98:d1:09:bd:33:02:a3:
84:5a:5b:fe:ad:65:7a:2b:3c:d7:56:22:ca:43:ae:
df:cc:f7:c7:ee:6f:29:4b:18:7f:21:d2:9e:c0:73:
4b:37:1b:f2:1a:8b:03:be:17:3a:83:4f:33:a5:26:
c5:cd:00:33:c4:b4:3a:76:53:3a:a6:bd:bc:fc:34:
29:ba:e4:1c:1a:73:6d:e5:69:2c:66:93:99:f7:9e:
dd:0d:98:a5:21:98:4b:45:ac:a0:0a:8a:74:eb:ae:
63:44:67:e0:28:9a:65:8f:f8:d9:5f:e1:5c:8c:6c:
63:29:b8:54:c7:ec:68:96:6c:5a:49:40:1d:1e:6c:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DB:67:D9:63:52:04:DB:04:F4:06:BD:8A:FA:68:BA:CA:53:67:37
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ba:cf:6f:73:d8:29:d6:bf:dc:aa:20:53:7a:6b:de:13:d9:
c6:9a:7f:6f:f6:c1:8a:e7:d3:31:7f:c2:5d:85:5a:3b:08:71:
e2:88:65:58:f0:cf:c6:ab:8d:8e:a6:d3:6a:c4:ca:20:d0:a7:
c3:3c:5e:e4:4b:09:4f:53:e1:34:e2:b5:38:cb:86:4f:14:ed:
f6:1b:bd:a5:87:04:af:a6:cd:da:61:92:d4:20:e2:ae:e3:cd:
df:d0:82:c4:54:3f:11:35:4c:2f:82:1e:5e:b6:9b:f8:94:41:
12:e3:c0:6b:57:70:b4:c7:3d:48:b4:25:cb:b0:6d:89:92:f8:
c7:d3:2a:13:ac:fd:c5:ba:bc:ad:d3:cd:de:12:19:14:47:bc:
c1:e6:f3:3f:c6:16:bc:78:49:e3:6e:89:07:6b:88:56:83:0b:
1d:0f:9c:a8:f0:b7:5b:90:1a:28:5d:26:e8:44:44:d8:de:99:
e5:98:fe:13:39:06:0d:b8:72:97:d6:bc:5e:85:89:4e:78:00:
a9:4d:ef:e4:6a:6a:df:21:58:f1:ee:7a:f7:03:b6:71:6d:3a:
8f:ae:72:79:34:71:52:1f:27:90:1e:08:60:4a:42:d8:58:7b:
2b:f8:1f:7b:70:87:a6:4e:c8:fb:c6:fc:40:8b:cf:17:1b:82:
15:1d:c7:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaFP62yE60Ky0iLGql0mgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj
ZWVkNTkwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWRiNjdkOTYzNTIwNGRiMDRmNDA2YmQ4YWZhNjhiYWNhNTM2NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5/Mdkll7ioxXKE57OaNZknAEAN6
nh7IGAQ3uVMALieS2Y0UZsQBrOCZ1ElhDcpt6RPbzfjghghX0EtJvUO42tMwed//
P1DMOCk5I5detdy+vG4R97fP9iuU70Y3l5ZHzTJO7xy/J3+bKLbVNAOcBAmYw4AY
O8Z1vzFxVLq5fpjRCb0zAqOEWlv+rWV6KzzXViLKQ67fzPfH7m8pSxh/IdKewHNL
NxvyGosDvhc6g08zpSbFzQAzxLQ6dlM6pr28/DQpuuQcGnNt5WksZpOZ957dDZil
IZhLRaygCop0665jRGfgKJplj/jZX+FcjGxjKbhUx+xolmxaSUAdHmwTGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDHbZ9ljUgTbBPQGvYr6aLrKU2c3MB8GA1UdIwQY
MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt
MjczOGJjYjQzZDZkLzEvTWR0bjJXTlNCTnNFOUFhOWl2cG91c3BUWnpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk
LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuU0AMA0G
CSqGSIb3DQEBCwUAA4IBAQAdus9vc9gp1r/cqiBTemveE9nGmn9v9sGK59Mxf8Jd
hVo7CHHiiGVY8M/Gq42OptNqxMog0KfDPF7kSwlPU+E04rU4y4ZPFO32G72lhwSv
ps3aYZLUIOKu483f0ILEVD8RNUwvgh5etpv4lEES48BrV3C0xz1ItCXLsG2JkvjH
0yoTrP3Furyt083eEhkUR7zB5vM/xha8eEnjbokHa4hWgwsdD5yo8LdbkBooXSbo
RETY3pnlmP4TOQYNuHKX1rxehYlOeACpTe/kamrfIVjx7nr3A7ZxbTqPrnJ5NHFS
HyeQHghgSkLYWHsr+B97cIemTsj7xvxAi88XG4IVHcfc
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:47:34 2025 by rpki-client