Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/mlSv0z_DmDnRb-AxotDJXsB_eHs.roa
File: mlSv0z_DmDnRb-AxotDJXsB_eHs.roa (raw, json)
Hash identifier: a6N3OYEbnbT+vGvxsKvRq+KvHJJy4jyn8uVLzPAW9y4=
Subject key identifier: 9A:54:AF:D3:3F:C3:98:39:D1:6F:E0:31:A2:D0:C9:5E:C0:7F:78:7B
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 0194221FD79B1D5A1DFBF37EEB2FA2C2331A
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/mlSv0z_DmDnRb-AxotDJXsB_eHs.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 193.178.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d7:9b:1d:5a:1d:fb:f3:7e:eb:2f:a2:c2:33:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a54afd33fc39839d16fe031a2d0c95ec07f787b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:ef:a2:e8:c6:f4:bb:4a:f1:ac:de:7c:8f:
2e:88:ec:20:a7:92:c0:8b:33:ac:3a:90:eb:d6:e4:
fb:85:34:46:7c:6d:9b:ff:4f:3f:1b:58:c4:7d:e7:
2c:d2:14:47:d8:39:9d:5f:80:51:27:9f:ff:76:9e:
0a:14:79:10:82:8a:a8:ac:96:38:a6:51:73:70:7e:
75:3e:21:30:21:f1:c2:50:53:a8:73:1b:15:85:5c:
ed:f3:2a:c3:7b:12:0e:9c:9f:e5:d3:b2:4b:22:e4:
ce:a3:4e:8f:c7:fb:7c:97:8f:b9:f1:91:f5:f5:63:
ee:3e:2f:7e:c2:58:3f:43:ab:e0:bd:07:a3:f2:cb:
2a:7d:cf:7c:e0:bf:3b:94:60:15:46:27:da:f9:d8:
eb:58:a8:ce:b8:57:53:cb:cf:ee:fe:70:94:ab:06:
3b:4f:c9:7a:94:ae:65:55:6f:73:17:3a:3e:7d:8c:
88:0b:e5:eb:ce:89:bf:48:96:ec:d9:54:7d:65:53:
69:7f:fe:3f:63:f5:c6:49:95:4c:76:43:0f:66:85:
90:75:6f:d1:04:d0:f3:0e:85:1d:b0:c0:57:91:13:
d2:df:a4:01:64:f5:9e:fd:9a:a0:24:aa:a2:96:a7:
91:59:4b:24:55:98:38:94:30:76:dd:26:d3:4d:bd:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:AF:D3:3F:C3:98:39:D1:6F:E0:31:A2:D0:C9:5E:C0:7F:78:7B
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/mlSv0z_DmDnRb-AxotDJXsB_eHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.227.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8e:29:6d:8b:fa:9e:14:d3:26:d9:29:23:c5:41:16:1d:dc:
41:4a:a0:2a:ab:7a:b9:8c:a2:2e:6e:ff:24:e5:b4:8f:bf:ab:
53:74:2b:e8:10:98:6e:54:55:b9:6b:6b:49:94:6d:7c:d2:58:
53:c9:bb:95:b8:71:c2:ea:2d:b1:37:64:72:5c:9b:e0:b9:5a:
f1:c0:73:fb:19:14:7d:1d:8f:83:16:c7:d4:f5:41:f1:69:f1:
56:3d:3d:c8:63:9b:d0:f3:84:58:20:0b:88:7e:e9:58:35:dc:
40:7c:97:5e:8a:66:45:e6:36:fc:f5:40:92:7a:df:36:30:08:
d3:4b:62:d5:8a:91:f5:89:4d:9b:df:2b:7b:95:0f:7f:4d:bd:
78:77:7e:88:f2:cd:43:cc:27:84:b3:f7:33:c3:da:cf:63:21:
75:d0:ed:3a:52:b2:52:d3:8e:56:8a:30:87:64:0a:58:ca:34:
3d:8d:8c:2e:1d:84:d5:ba:e0:37:61:40:24:b3:9e:d8:93:06:
86:a4:58:17:05:89:de:df:54:73:5a:75:f3:b5:86:2f:f4:2a:
78:18:4b:31:33:4f:3b:b0:29:f9:80:d2:65:12:55:f4:9b:a4:
1c:a4:58:e8:79:fb:ab:bf:49:c9:21:1c:55:ae:18:ec:15:e5:
a9:31:61:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:38 2025 by rpki-client