Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/_MMRM5gPmnbq2reAxzdSDLSF69Y.roa
File: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (raw, json)
Hash identifier: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=
Subject key identifier: FC:C3:11:33:98:0F:9A:76:EA:DA:B7:80:C7:37:52:0C:B4:85:EB:D6
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 0194266B295BE4615D5B62B61322B13A1C2E
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/_MMRM5gPmnbq2reAxzdSDLSF69Y.roa
Signing time: Thu 02 Jan 2025 09:49:04 +0000
ROA not before: Thu 02 Jan 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39581
IP address blocks: 194.50.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:29:5b:e4:61:5d:5b:62:b6:13:22:b1:3a:1c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Jan 2 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcc31133980f9a76eadab780c737520cb485ebd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:77:92:26:00:13:87:21:17:79:47:f5:d0:
a5:a2:32:c6:67:00:74:16:0b:6c:de:b5:39:54:2e:
01:9a:bd:ac:9b:6b:c3:fd:e4:6e:5c:1b:86:b2:14:
4a:1f:c8:3c:f7:fa:a3:0d:e8:c2:1c:4b:b0:f8:6a:
11:68:3a:45:6c:bf:fb:f0:ba:ce:58:b1:66:be:ba:
cc:eb:31:e9:21:02:ff:c0:7e:89:3b:82:3e:0b:88:
30:a6:69:d2:0b:93:92:82:0a:26:86:5a:16:77:2d:
59:d1:ef:73:58:1c:a8:83:c9:68:16:2a:01:3d:70:
ad:42:3f:e8:7a:6e:e0:48:30:c2:2b:a5:d1:51:af:
41:3a:42:0d:e5:47:13:04:82:40:32:d5:51:49:0a:
9a:1b:ca:b3:dc:2b:d4:a2:9a:70:3f:9f:a9:95:82:
cb:f4:54:aa:28:29:81:be:96:6c:82:90:cf:2c:81:
27:f1:41:5b:94:ee:b7:e4:a6:d3:85:1d:d1:3f:89:
ea:36:ba:6c:ba:7e:95:c8:64:a5:b6:73:75:11:04:
29:de:4e:9e:a5:90:c6:4f:13:7a:7b:c9:f2:d0:4f:
ea:ca:a5:dc:ae:0a:23:e3:9f:c9:fe:ab:40:9e:46:
46:f2:fa:5b:c9:a3:d1:61:11:27:9a:2d:fa:4a:4e:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:11:33:98:0F:9A:76:EA:DA:B7:80:C7:37:52:0C:B4:85:EB:D6
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/_MMRM5gPmnbq2reAxzdSDLSF69Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.63.0/24
Signature Algorithm: sha256WithRSAEncryption
47:12:bc:6a:75:db:c7:49:bb:bc:3e:e8:5f:c8:8c:b0:1b:89:
f0:d3:7c:47:1f:86:37:12:40:0c:1f:58:fc:ba:fd:fe:9c:5a:
01:ff:1c:3f:19:17:70:6f:be:01:71:7e:fa:74:a6:b3:f4:60:
7c:39:c7:c1:f5:a0:07:f1:56:ea:68:33:80:20:2f:8d:71:f9:
81:c8:cb:cb:22:62:9a:e8:56:d5:49:46:55:29:aa:45:48:54:
3e:06:3d:5d:5d:df:29:9a:f8:f6:c4:02:3e:03:7a:c1:b5:89:
69:71:a8:80:9b:3b:b4:c8:82:77:75:e9:31:1c:00:2c:6d:97:
9b:68:8c:23:10:3a:ae:cd:3a:34:28:1c:ab:d8:f5:10:c8:85:
fd:23:1a:3d:a4:4b:84:d6:f2:3a:36:41:b2:a4:fb:29:e6:92:
3f:03:09:c5:b5:f1:13:69:76:d4:f2:0b:01:ff:1a:fb:28:97:
2a:9b:45:10:c3:14:1f:5e:97:0a:d5:df:a0:f0:11:b0:2e:80:
5c:4f:49:57:f2:c1:1a:07:b8:28:6d:97:7f:b5:3c:d1:da:8d:
8d:7b:85:3b:c3:55:7f:45:52:d6:c5:65:dc:06:9c:87:32:74:
6a:9d:51:bf:a7:2f:14:03:b5:97:67:5b:00:44:c7:6a:7d:01:
7a:4b:e2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:59 2025 by rpki-client