Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/MolDZI8sij9HpYQuaPl8G2-T4Is.roa
File: MolDZI8sij9HpYQuaPl8G2-T4Is.roa (raw, json)
Hash identifier: M2iHd1fWWl5XBhjtKpdOePW7oZJ5HpdNJctzRVWHUZM=
Subject key identifier: 32:89:43:64:8F:2C:8A:3F:47:A5:84:2E:68:F9:7C:1B:6F:93:E0:8B
Certificate issuer: /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial: 0185712791614D8BE9C0B63120A19C8A4364
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/MolDZI8sij9HpYQuaPl8G2-T4Is.roa
Signing time: Mon 02 Jan 2023 06:24:56 +0000
ROA not before: Mon 02 Jan 2023 06:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207921
IP address blocks: 195.39.246.0/23 maxlen: 24
2a0f:4ac0::/31 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:91:61:4d:8b:e9:c0:b6:31:20:a1:9c:8a:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Validity
Not Before: Jan 2 06:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=328943648f2c8a3f47a5842e68f97c1b6f93e08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:e6:85:b6:b6:56:9e:55:61:ff:14:98:d3:
29:d0:3f:33:51:57:60:9b:ab:62:aa:e3:9b:66:d7:
59:d5:06:27:c6:b1:de:49:34:6c:65:08:fd:66:fe:
6e:1a:54:32:2b:a1:61:17:df:d5:64:41:12:d9:1f:
af:fa:80:ac:12:bb:3e:a5:94:9a:3f:06:73:6c:cc:
cb:5c:17:f9:51:57:5d:a9:06:61:a2:8e:dc:64:92:
fc:d3:75:7e:a3:4b:02:f0:6b:16:b0:9f:cb:38:dc:
0e:2a:4f:87:67:12:0b:ef:a5:b3:68:8a:32:87:c7:
c6:d9:9a:0c:09:9c:d4:b4:4b:63:86:aa:2f:14:b7:
cb:4a:91:09:06:1c:bf:2f:65:b3:5f:f9:d0:88:a6:
4f:0e:67:d4:61:7a:fd:ce:e0:e2:84:a3:d4:90:3c:
1a:ff:f5:97:c5:bf:dc:99:86:fc:3f:b6:40:dc:d9:
20:9e:22:e8:5e:ca:08:d4:f8:e5:00:b6:06:32:f0:
df:e9:de:7f:3a:a2:2e:13:40:8c:d0:45:89:4c:41:
7b:7e:7f:1f:03:14:3a:21:29:ca:a3:30:67:61:a0:
1d:97:ab:cc:cd:96:8c:26:1f:a6:3f:da:14:54:e8:
c9:ee:2f:e7:d1:fb:32:37:ec:b4:d2:64:ec:72:61:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:43:64:8F:2C:8A:3F:47:A5:84:2E:68:F9:7C:1B:6F:93:E0:8B
X509v3 Authority Key Identifier:
keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/MolDZI8sij9HpYQuaPl8G2-T4Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.246.0/23
IPv6:
2a0f:4ac0::/31
Signature Algorithm: sha256WithRSAEncryption
af:c5:79:b6:95:ee:62:d2:52:67:10:66:49:39:d1:ce:d5:1f:
2e:d1:68:8c:54:d8:c2:ad:3c:58:3c:09:05:94:74:ed:06:fe:
fb:32:fb:fc:da:6e:d0:c0:96:13:d5:8a:f7:e0:80:6a:f3:29:
7b:fe:9f:f6:4a:91:f8:77:7b:e5:58:2d:d7:98:09:f4:52:56:
52:48:ad:b5:ba:ab:f7:c4:ad:06:2a:e2:f4:23:4c:12:be:fd:
94:aa:c8:fc:a0:84:de:b8:8b:88:9b:39:40:b5:b9:47:02:59:
f1:d5:52:3f:d0:98:25:1a:ab:c9:10:47:73:6e:04:12:33:99:
a7:00:37:73:d9:46:31:eb:99:7f:bc:88:ee:af:e8:4a:17:1f:
12:1d:43:48:5f:bb:f9:8b:9d:b3:05:82:ac:93:14:bc:a3:53:
6e:d4:71:7d:bb:6b:93:49:e4:45:34:45:47:b9:bb:85:a0:6f:
97:0b:00:98:51:26:33:0b:d3:72:fb:b4:79:53:d7:7d:6e:9a:
dc:0a:82:d7:5a:8b:05:16:ea:82:2d:c6:04:c1:9e:3f:b4:1f:
f2:1d:85:aa:ca:f0:de:81:09:85:ef:22:b2:c8:83:62:9b:34:
77:74:b2:4d:77:a3:4e:f1:cb:e1:7a:63:d0:0a:2e:84:ca:59:
8f:0b:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:35 2025 by rpki-client