Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/01MVfvHrRUsATo8m1nYCeVS5QFU.roa
File: 01MVfvHrRUsATo8m1nYCeVS5QFU.roa (raw, json)
Hash identifier: Tv7S3KxeeQwbuV2XZ5VmoiWDIoaTYAEsv6ByEbQgcvg=
Subject key identifier: D3:53:15:7E:F1:EB:45:4B:00:4E:8F:26:D6:76:02:79:54:B9:40:55
Certificate issuer: /CN=d5401fe547c9ce13b3b28f43973083d3a54333d4
Certificate serial: 0194258FB6D9BC8669A3DB1B2572956F78E8
Authority key identifier: D5:40:1F:E5:47:C9:CE:13:B3:B2:8F:43:97:30:83:D3:A5:43:33:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UAf5UfJzhOzso9DlzCD06VDM9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/01MVfvHrRUsATo8m1nYCeVS5QFU.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 193.105.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b6:d9:bc:86:69:a3:db:1b:25:72:95:6f:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5401fe547c9ce13b3b28f43973083d3a54333d4
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d353157ef1eb454b004e8f26d676027954b94055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:71:a9:9d:92:7e:04:e3:d9:89:80:a9:87:9b:
38:92:43:ea:98:ab:d1:00:0a:c1:00:66:32:53:b5:
f9:75:a8:21:77:ad:85:0a:63:7d:c9:7a:97:82:cf:
f5:51:4b:25:c7:19:fc:12:4a:8b:b6:8e:9b:fd:f7:
d0:66:a0:cf:69:aa:e6:af:0a:43:f0:5a:37:5a:c8:
d2:69:03:06:9b:84:ff:a2:2b:bf:ad:7a:a5:96:01:
27:32:84:7c:98:d2:75:fb:f4:ad:97:d4:8a:5f:88:
23:1e:ea:e1:77:36:34:28:bd:83:38:83:f1:27:a7:
aa:95:12:ee:b8:d6:4f:49:e7:d7:c4:a1:70:e9:f4:
da:d2:dd:a9:e0:6f:00:84:7c:df:c5:8a:5e:c3:be:
b1:34:63:18:a2:39:44:b1:63:4d:5b:04:c2:17:1f:
6c:f3:06:54:24:e4:b3:a0:7c:3f:c0:c7:c7:9c:c8:
72:c1:87:62:28:66:5c:ef:14:02:26:b7:3f:bf:37:
3c:8d:c4:fb:76:45:6f:cd:ad:a0:a5:5c:75:2b:c0:
9c:19:1a:06:6c:9c:8b:53:f2:3d:5c:1d:a3:c2:40:
dd:ee:f3:ec:b3:13:9e:b7:04:c6:78:e3:8e:47:0e:
6a:ec:b1:3d:b4:e8:e1:ba:6c:a5:38:74:08:ba:99:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:53:15:7E:F1:EB:45:4B:00:4E:8F:26:D6:76:02:79:54:B9:40:55
X509v3 Authority Key Identifier:
keyid:D5:40:1F:E5:47:C9:CE:13:B3:B2:8F:43:97:30:83:D3:A5:43:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UAf5UfJzhOzso9DlzCD06VDM9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/01MVfvHrRUsATo8m1nYCeVS5QFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/1UAf5UfJzhOzso9DlzCD06VDM9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.108.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0f:5c:d2:02:fa:c1:c7:82:eb:cc:09:5f:cf:32:a5:45:c8:
32:4a:de:a1:ab:b7:bc:d8:fd:de:cd:18:15:ba:af:09:20:e7:
27:b9:0b:1a:cf:41:53:c7:53:b4:3a:b4:61:dc:46:c8:5f:c8:
cc:7d:d0:69:30:1f:fd:be:ef:b1:6f:90:ef:c8:d6:0b:06:ad:
b8:79:d0:c1:34:a0:6c:41:4c:03:9b:6d:67:76:36:31:e1:09:
c9:53:f0:de:68:85:d6:53:95:f5:21:44:b7:e2:0e:b7:e4:77:
4c:41:b2:9d:15:ac:a5:17:7d:e6:b0:48:4f:24:ed:35:3b:cc:
56:ba:ec:0d:02:ce:40:5b:88:b1:98:d1:74:9f:ce:4b:b6:a5:
6a:bc:b3:c3:1c:b8:69:35:b6:e4:f1:10:90:bc:d2:42:10:11:
89:02:80:74:82:b4:5a:2f:36:55:d3:bd:e4:e4:57:57:48:eb:
22:d0:53:2b:98:9e:73:6e:6b:f1:76:08:9b:b2:cf:72:02:b2:
b0:86:be:53:83:b1:d2:58:ef:49:8e:12:f3:31:f2:db:a3:ce:
57:a8:a4:6b:db:93:dc:8e:37:45:8b:20:f4:1f:83:9a:46:cc:
6d:5c:d3:84:eb:a2:89:0a:69:ad:e5:37:91:ec:fd:bc:c3:1b:
2e:91:17:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:54:01 2025 by rpki-client