Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mRGI2ySberYXi96uyLGUVqhyIV0.roa
File: mRGI2ySberYXi96uyLGUVqhyIV0.roa (raw, json)
Hash identifier: WZZ18GljkMRooRnUnn58+6xfYU4vNLtAcBOvQZ9W+Mo=
Subject key identifier: 99:11:88:DB:24:9B:7A:B6:17:8B:DE:AE:C8:B1:94:56:A8:72:21:5D
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01877002909155B37831EBCBBF6628B30A86
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mRGI2ySberYXi96uyLGUVqhyIV0.roa
Signing time: Tue 11 Apr 2023 11:10:28 +0000
ROA not before: Tue 11 Apr 2023 11:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:02:90:91:55:b3:78:31:eb:cb:bf:66:28:b3:0a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 11 11:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=991188db249b7ab6178bdeaec8b19456a872215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:37:ed:29:2c:28:17:3a:52:e7:04:13:a2:23:
da:d2:25:e8:4b:8f:39:4d:cf:17:ac:e9:b7:b2:55:
d6:88:da:0b:df:53:77:bd:6b:4e:29:7b:8c:ed:c1:
e4:ec:f9:44:f3:bc:54:54:89:19:e7:38:a2:89:ea:
22:29:13:f0:00:45:9a:c5:c3:f9:8c:b2:ec:98:1f:
4b:14:06:8a:e1:9d:09:01:fa:c6:30:e6:05:64:c0:
b6:3a:c0:fa:8b:f4:dd:92:1d:82:87:3b:88:90:3d:
de:ad:43:ff:c2:ed:9b:6b:dd:51:e6:24:f3:38:7e:
fc:d7:2b:82:55:90:2b:eb:62:d2:f8:66:46:37:64:
fe:a2:88:b1:91:86:f8:35:c0:58:52:be:1d:13:49:
60:19:cc:47:ed:96:49:22:30:15:2b:d3:7a:d6:0f:
fb:05:1a:19:52:a6:89:01:67:52:70:b9:10:2a:64:
d6:27:f8:6c:14:28:64:7f:69:b9:c8:da:02:99:ed:
aa:7e:32:23:1c:c7:36:d3:39:22:31:e0:79:83:57:
7d:7f:b6:0d:96:09:78:18:d1:1d:91:28:5f:82:df:
af:90:81:33:42:f4:2b:bf:04:0e:54:be:1d:b1:f7:
87:a5:13:c6:a2:c7:4f:e0:27:28:85:e8:ca:bf:d7:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:88:DB:24:9B:7A:B6:17:8B:DE:AE:C8:B1:94:56:A8:72:21:5D
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/mRGI2ySberYXi96uyLGUVqhyIV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c8:23:48:e2:04:df:af:bd:1a:75:fe:58:50:2e:8c:9e:8d:
27:74:de:db:f7:79:f9:92:3e:e5:64:5d:c7:fd:da:07:85:48:
54:c2:a5:e0:a8:c8:98:f5:f2:23:92:68:64:a4:ed:7f:a4:1a:
17:70:a0:d2:b7:12:29:00:30:fc:8a:3b:96:3f:6f:ab:78:39:
c8:3e:a7:74:2b:1e:d4:38:7c:b9:18:6d:4d:5e:77:e7:b5:1c:
fd:d4:e7:f7:27:b1:b1:38:7e:fb:c7:de:de:0e:f5:89:48:90:
3d:f8:61:bc:a7:23:3d:a5:5e:1c:16:81:53:af:79:36:f0:b9:
2d:b4:24:a5:d2:b8:0c:1b:18:8d:df:4a:9a:0b:b5:b2:9b:e1:
04:27:fe:59:f8:2b:2c:46:93:52:f9:5d:a5:08:e0:09:ab:cd:
c0:58:cf:ad:96:26:6d:7d:d0:47:58:ea:d5:7d:39:b8:4d:d5:
89:d5:ee:55:6d:cf:e6:79:e2:44:e1:3d:47:72:e3:22:66:b3:
47:13:3b:b5:2f:2e:02:7d:c7:9e:d4:a3:bd:d5:3e:c8:df:86:
f4:42:58:ff:15:f5:d7:1f:cf:f7:6d:75:50:2c:4f:76:5c:1e:
6c:c5:3d:ec:a8:ed:9c:99:fb:60:cd:d4:ee:ec:e6:34:70:fe:
c0:ae:c3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:25 2025 by rpki-client