Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/MlEcqu5SePqG8aOqELHrvg4iDjU.roa
File: MlEcqu5SePqG8aOqELHrvg4iDjU.roa (raw, json)
Hash identifier: IkgRn9f4eGTbczJeVIrZNhG1GFJuarHYmw0QnXiN79U=
Subject key identifier: 32:51:1C:AA:EE:52:78:FA:86:F1:A3:AA:10:B1:EB:BE:0E:22:0E:35
Certificate issuer: /CN=c811722d9031563f6fcb87521fde0868010008ba
Certificate serial: 01869D5799119F84388B8CFDC9B8E4232CFE
Authority key identifier: C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/MlEcqu5SePqG8aOqELHrvg4iDjU.roa
Signing time: Wed 01 Mar 2023 13:23:29 +0000
ROA not before: Wed 01 Mar 2023 13:23:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212785
IP address blocks: 79.110.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:57:99:11:9f:84:38:8b:8c:fd:c9:b8:e4:23:2c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811722d9031563f6fcb87521fde0868010008ba
Validity
Not Before: Mar 1 13:23:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32511caaee5278fa86f1a3aa10b1ebbe0e220e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:b4:79:3a:4e:bd:a8:da:e7:01:6d:c7:58:
78:1e:e4:c5:97:c4:c3:9a:b1:6e:cc:07:57:92:11:
98:63:00:37:af:bf:45:a8:cc:da:63:15:fc:b3:f9:
b2:1f:03:79:b7:75:fd:c0:a8:28:46:54:ae:3a:6d:
94:6a:ea:10:bf:79:34:b0:e3:ee:b2:66:70:7b:16:
cf:0e:4a:e7:91:84:6b:10:b1:23:a6:ac:ba:da:d6:
7c:93:69:3c:5e:da:b3:4d:80:e8:ca:3d:06:25:cd:
0f:11:8b:29:0c:45:4c:bd:bb:b6:55:cf:b6:a7:24:
e5:35:de:7e:ef:e2:d7:a3:46:2c:34:6a:34:a6:86:
c9:3d:b9:50:8c:a6:0a:b3:54:15:f4:15:1b:2c:6b:
e8:5d:25:e8:f3:e0:a5:37:10:81:7b:f5:47:24:37:
88:6e:b2:23:18:ae:4e:d3:a3:64:fd:bb:c9:5e:25:
af:21:fa:b2:c1:c3:71:7c:4e:40:5b:90:75:5f:69:
24:e8:d1:b9:80:5a:68:36:18:21:0f:d3:16:b8:bc:
55:40:9c:c7:46:8a:28:f0:32:da:fc:76:8f:49:cd:
26:69:b5:c4:d2:73:0e:01:0b:40:be:88:03:76:b6:
5d:aa:a3:41:3b:ce:12:51:51:24:e9:08:9c:e8:40:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:1C:AA:EE:52:78:FA:86:F1:A3:AA:10:B1:EB:BE:0E:22:0E:35
X509v3 Authority Key Identifier:
keyid:C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/MlEcqu5SePqG8aOqELHrvg4iDjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.224.0/24
Signature Algorithm: sha256WithRSAEncryption
50:75:c6:1a:91:75:a1:65:aa:63:94:39:c3:5a:03:a8:6e:99:
05:13:29:a7:1d:07:2c:6e:1a:8a:34:04:3d:2b:39:bd:41:f3:
7a:3a:91:68:4b:4a:94:79:0e:67:d6:c5:91:1c:dc:6b:f3:40:
20:fa:de:31:4f:da:2e:ad:97:3b:14:3b:03:ce:29:48:6b:51:
37:da:e6:ca:1f:78:77:0b:8c:09:f6:dc:53:26:18:3f:a4:88:
3e:59:a7:5a:af:bf:2d:58:9d:c5:b1:32:04:36:be:a6:6f:21:
0d:84:22:74:92:6c:58:f4:55:da:86:f5:86:e4:fd:6b:5c:fb:
ad:5c:de:b4:28:a6:a3:27:e2:ba:99:60:32:94:27:38:fb:61:
a9:74:75:1c:15:d6:b6:6c:22:76:79:34:d2:53:bd:46:a0:37:
ba:2d:1a:37:ee:4c:52:4f:5c:e7:f8:35:86:ab:60:dd:08:84:
ca:fc:ed:97:2c:35:c5:39:1a:f9:c1:cb:4e:be:50:10:8d:fa:
09:e7:24:3c:96:a3:ec:15:e1:0d:c2:0a:12:11:09:7e:99:38:
03:93:47:0c:13:bc:74:a9:7a:12:50:b3:1e:12:60:89:c7:57:
82:55:cf:45:d8:d7:d0:44:91:aa:d0:13:4a:ad:ca:93:2d:57:
0a:60:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:00:55 2025 by rpki-client