Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/MSgwMQBVeKrb-aSmClVXWXeIrYA.roa
File: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (raw, json)
Hash identifier: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=
Subject key identifier: 31:28:30:31:00:55:78:AA:DB:F9:A4:A6:0A:55:57:59:77:88:AD:80
Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial: 01942825BEECFC736651FD281D6FC4A2B307
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/MSgwMQBVeKrb-aSmClVXWXeIrYA.roa
Signing time: Thu 02 Jan 2025 17:52:29 +0000
ROA not before: Thu 02 Jan 2025 17:52:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49832
IP address blocks: 167.160.20.0/24 maxlen: 32
185.88.11.0/24 maxlen: 32
2a06:1ec0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:be:ec:fc:73:66:51:fd:28:1d:6f:c4:a2:b3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Validity
Not Before: Jan 2 17:52:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31283031005578aadbf9a4a60a5557597788ad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:50:7c:23:71:86:71:fc:c5:a1:ca:9d:2a:
21:45:49:c8:98:5f:cb:2e:62:fc:a7:c1:6b:bd:a8:
89:88:35:ab:8b:75:93:af:18:b7:74:75:a4:41:fe:
66:7e:bf:cb:c6:5c:f1:ea:ca:96:cb:fa:1e:7e:c5:
6b:31:d7:76:44:39:43:9f:bc:fb:92:af:5e:15:40:
2a:a7:fb:be:b6:c6:79:70:e7:07:d7:1e:da:21:b9:
ca:0f:fd:b8:da:f3:3c:65:1b:05:ec:23:ae:24:ac:
08:94:75:2e:09:43:66:38:88:0b:fc:dd:6a:67:da:
2d:98:3c:cd:15:e7:62:05:8a:94:9e:88:18:63:73:
92:ec:df:04:12:fe:15:53:db:db:a9:e6:5d:90:d5:
5b:69:f5:b7:66:a5:06:da:c0:79:17:c1:c3:4a:b6:
9e:e6:7d:98:2c:8d:8b:91:1d:9a:30:fd:20:59:0b:
d8:1d:7f:93:20:62:5e:90:2d:13:87:d5:0a:20:63:
cf:f7:bf:db:5a:6f:24:e2:ac:b0:80:ca:cb:e3:9c:
83:c4:ac:b8:05:3c:34:cb:da:da:0b:62:81:74:b6:
f4:24:97:91:40:45:27:47:ce:6e:95:93:7a:1b:00:
dd:75:e9:bf:16:c0:16:cc:18:51:0e:53:15:ed:a5:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:28:30:31:00:55:78:AA:DB:F9:A4:A6:0A:55:57:59:77:88:AD:80
X509v3 Authority Key Identifier:
keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/MSgwMQBVeKrb-aSmClVXWXeIrYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.20.0/24
185.88.11.0/24
IPv6:
2a06:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
64:95:fb:01:f0:61:45:3d:b0:95:78:82:45:a0:28:c9:9f:70:
8f:1b:37:ab:4b:40:55:d1:64:2d:ad:50:21:3f:4c:56:96:59:
22:0d:84:c3:91:91:bb:7d:23:a9:36:ff:89:f1:b9:77:91:9c:
da:58:7c:04:29:7c:12:37:48:51:f9:bc:50:d4:dc:86:b0:c7:
86:aa:81:de:19:75:23:aa:2e:13:af:38:2f:db:c1:9e:57:4b:
88:30:0e:22:22:1e:94:6a:e6:de:ea:4b:87:3d:d2:4b:77:98:
0e:09:0e:3c:1a:99:44:35:95:50:1b:54:9e:90:e0:e0:67:98:
18:00:84:61:4f:c9:c0:be:38:0b:6e:61:c1:b2:c1:c5:5a:af:
9f:56:00:d7:91:b0:ef:b4:39:3c:69:d8:7a:18:7d:b6:42:68:
51:ab:fd:9c:f9:7b:60:51:95:8b:60:2d:3f:47:6e:90:fc:48:
0f:cd:cc:56:e8:ab:69:ed:f3:c4:db:80:87:17:36:f8:a4:4f:
8d:ef:c7:2e:7f:51:dc:5d:9b:ca:23:ca:9b:91:60:e9:90:a0:
49:b2:60:80:ee:dc:20:ab:0b:d2:17:2c:87:e0:1f:0d:16:b1:
bc:63:d3:1a:f1:12:22:a9:8d:77:e1:71:cb:e1:bf:ac:04:34:
5f:60:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:32 2025 by rpki-client