Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mBw44dUzM8YgY3guqHq7NgvaMzo.roa
File: mBw44dUzM8YgY3guqHq7NgvaMzo.roa (raw, json)
Hash identifier: q00i8LL1I6sohh0WTJj9q5MF7vXGQkUvM041+fTpVDc=
Subject key identifier: 98:1C:38:E1:D5:33:33:C6:20:63:78:2E:A8:7A:BB:36:0B:DA:33:3A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01957A6C6CE2931246953E3FD19D92EF5052
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mBw44dUzM8YgY3guqHq7NgvaMzo.roa
Signing time: Sun 09 Mar 2025 10:21:20 +0000
ROA not before: Sun 09 Mar 2025 10:21:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214082
IP address blocks: 82.115.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:6c:6c:e2:93:12:46:95:3e:3f:d1:9d:92:ef:50:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 9 10:21:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=981c38e1d53333c62063782ea87abb360bda333a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:bf:9c:74:31:64:d8:5b:1a:7d:01:8b:3f:
7c:e8:72:8b:ef:00:38:2c:bf:b6:9a:7a:36:fc:02:
77:b1:13:a5:a8:b6:fb:c0:b0:be:74:d8:8c:63:de:
ed:2d:11:e6:68:19:96:a0:49:9d:80:89:7d:39:c2:
ed:e9:f4:1e:06:24:a2:c7:13:eb:41:3a:64:cd:c8:
26:0e:4b:c3:b5:2c:b9:61:8a:18:db:bb:b6:0c:0f:
72:01:92:2e:42:20:cc:9b:aa:ad:03:ce:ea:dc:04:
85:e0:86:25:04:a6:74:8a:57:64:84:05:da:f1:3b:
12:73:71:fd:0d:30:2c:0e:fd:28:9c:0f:54:3e:bb:
4c:e1:2b:93:31:40:9f:bb:91:b0:0a:d0:f5:20:2e:
f2:fa:28:1d:cd:29:c3:98:37:83:8f:e8:ae:6c:18:
38:28:82:f0:db:3e:85:a8:6c:d6:3f:c7:27:9d:3f:
0e:c0:50:bb:eb:05:09:b5:21:fe:1f:ec:28:90:ce:
65:e8:be:36:c4:67:83:36:96:2a:da:00:35:48:a3:
c8:29:9c:8f:e3:91:77:f6:ae:41:c3:a1:98:66:da:
3b:5a:8c:7f:2f:dd:be:92:da:0c:f2:ea:a8:13:af:
35:e1:26:80:7a:ca:4e:4e:a9:06:fe:bb:ad:00:69:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:38:E1:D5:33:33:C6:20:63:78:2E:A8:7A:BB:36:0B:DA:33:3A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mBw44dUzM8YgY3guqHq7NgvaMzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ef:52:dd:66:f8:e2:ba:17:e7:91:1f:5a:b4:94:38:dd:10:
3b:bd:d7:09:ab:6c:b4:25:4c:f1:f0:c5:54:b7:37:f7:2f:64:
7c:e8:20:e1:fd:14:78:ab:01:d8:75:3b:d5:f6:4f:00:c7:96:
95:b5:35:bb:3c:dc:30:ac:e5:e8:82:90:ab:8c:6d:71:19:88:
d9:94:4e:77:fb:bf:e3:4b:9d:d7:c6:3a:e6:ab:b5:b4:6a:4d:
d7:7a:80:43:20:3d:43:11:d9:ca:a0:0e:3d:e9:70:25:93:41:
87:e7:33:33:ec:c1:96:cc:93:eb:b4:1b:8b:4b:7a:df:f1:44:
61:c9:4c:c9:18:ed:7b:5f:d4:2b:82:2e:27:63:c4:79:1a:3c:
86:00:fc:91:b0:f0:d0:2d:6a:c6:dc:bc:25:a0:6f:53:47:92:
9c:0f:ce:9e:f8:de:13:06:79:11:84:fb:ef:38:8d:3f:8c:ee:
66:69:70:ae:68:40:e8:b1:6c:3a:9e:a0:fd:f7:ef:5a:04:51:
09:84:7b:a3:c4:fc:69:a4:4d:f8:05:27:9a:51:3f:9f:08:93:
b5:3f:73:29:b4:a8:39:6d:6d:cf:69:bd:bd:be:de:ed:16:04:
74:31:ae:80:ec:5f:ff:e5:bc:19:a0:3e:2d:bd:c7:3f:2c:92:
c4:f4:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:12:01 2025 by rpki-client