Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/Mlxl7eCppPg-EJzw_72LjKlie5U.roa
File: Mlxl7eCppPg-EJzw_72LjKlie5U.roa (raw, json)
Hash identifier: eql4wA8IHtkhF3Qka8k3GlUGBXjG6JyLviUckF6U/v4=
Subject key identifier: 32:5C:65:ED:E0:A9:A4:F8:3E:10:9C:F0:FF:BD:8B:8C:A9:62:7B:95
Certificate issuer: /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial: 01839F00FE03BA2103DB97FA158BCC210C27
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/Mlxl7eCppPg-EJzw_72LjKlie5U.roa
Signing time: Mon 03 Oct 2022 17:59:45 +0000
ROA not before: Mon 03 Oct 2022 17:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 194.69.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:00:fe:03:ba:21:03:db:97:fa:15:8b:cc:21:0c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Validity
Not Before: Oct 3 17:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=325c65ede0a9a4f83e109cf0ffbd8b8ca9627b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:4c:ec:19:00:d6:6f:0a:18:43:ae:dd:5a:
0c:1c:55:22:91:9d:b0:6c:e9:89:bb:b6:38:2b:49:
7c:8f:73:22:a8:da:d3:a6:e3:9e:b2:cc:4c:e5:cd:
4a:cb:9a:10:28:2d:8b:7e:ce:1f:44:5e:fa:df:86:
1d:54:4c:6e:2f:10:7d:c8:da:22:7b:7e:1a:25:59:
12:46:dd:fd:86:62:03:33:c0:3a:dc:00:7c:ea:17:
c5:af:89:1a:f2:90:c9:2f:d8:eb:c7:49:73:95:1f:
44:10:31:a8:b4:11:71:35:26:4f:bc:1f:3c:ef:11:
96:24:e5:8f:82:46:58:6b:be:86:8e:22:ff:35:90:
27:ee:f7:f8:7f:95:21:86:c5:30:30:1c:e3:ad:6a:
fb:09:41:e8:8b:34:e4:a1:f4:bd:ee:0f:34:51:90:
92:22:28:e2:f2:17:3f:02:29:f3:d2:da:c0:fb:49:
3d:ad:89:69:10:6d:48:ac:3d:ac:34:ad:85:5d:8d:
20:a2:78:c0:d3:c7:b0:e4:c0:73:3c:0a:45:3e:88:
ce:53:35:29:c1:ad:e1:d3:28:30:ea:79:e3:cc:6f:
b0:45:8d:f1:d9:d4:d9:df:ed:aa:a3:1c:b8:af:28:
df:16:ed:f9:f7:85:61:5f:65:1b:af:e4:19:0b:82:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:65:ED:E0:A9:A4:F8:3E:10:9C:F0:FF:BD:8B:8C:A9:62:7B:95
X509v3 Authority Key Identifier:
keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/Mlxl7eCppPg-EJzw_72LjKlie5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
67:db:1e:04:fd:aa:0b:86:bc:db:24:99:06:fd:4e:60:a8:b0:
ed:40:3a:53:d7:2a:fa:87:e6:72:7e:92:00:d8:d8:68:54:25:
f7:6b:99:11:d0:24:04:e9:72:e6:0d:3d:e1:74:ac:9e:ee:8d:
ac:6c:f1:b1:b3:62:3c:f5:9a:eb:55:ab:47:0c:cc:93:b2:ea:
89:3d:8a:b9:51:6e:5c:3f:da:6d:c5:45:d2:01:52:09:40:14:
3b:b9:a5:98:77:39:fc:95:eb:ad:ee:79:86:16:9b:f7:94:60:
9f:b5:27:23:98:6d:96:9a:bc:23:b1:30:87:9b:de:de:e9:fa:
1a:c3:53:f3:5d:75:17:c9:f7:cd:c9:14:2d:e4:2a:db:32:e6:
42:b0:d6:f0:df:08:f6:3c:2c:26:7e:7c:bc:32:5d:ee:f7:85:
e2:14:86:29:a1:ff:1f:f6:72:3b:4e:d3:a0:01:18:e9:b6:01:
1e:08:f7:f0:88:a3:f9:24:a8:cb:22:b7:8b:46:a1:23:c9:57:
f2:eb:89:60:33:34:a7:97:ed:7c:fd:bf:5b:b3:d6:f6:17:77:
5c:15:cb:71:49:a1:28:af:8d:54:c6:39:d9:46:2b:93:d2:da:
8e:d3:5e:85:f6:b0:19:bc:b5:98:10:9f:72:39:5b:eb:5c:2e:
9a:14:72:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:39 2025 by rpki-client