Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/mmf39HAPu66pAhfk5t6hl32At34.roa
File: mmf39HAPu66pAhfk5t6hl32At34.roa (raw, json)
Hash identifier: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=
Subject key identifier: 9A:67:F7:F4:70:0F:BB:AE:A9:02:17:E4:E6:DE:A1:97:7D:80:B7:7E
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 01942143B05964E72398A60E560484D97D5A
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/mmf39HAPu66pAhfk5t6hl32At34.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47129
IP address blocks: 193.34.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b0:59:64:e7:23:98:a6:0e:56:04:84:d9:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a67f7f4700fbbaea90217e4e6dea1977d80b77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:2b:cb:99:2b:96:a4:04:6a:b1:09:b3:64:
07:a3:f7:8d:fe:55:cf:95:2a:26:6f:5b:72:38:81:
59:1f:f5:b2:85:6f:bc:87:ac:c9:28:8b:ef:49:6e:
4e:e4:a2:09:32:ce:76:a8:42:c6:8e:27:b7:b3:29:
40:83:95:4c:d4:7f:9e:31:56:7e:40:91:8d:db:8a:
a9:c9:38:a4:ea:8a:23:ae:ef:f9:1d:f9:87:c7:9a:
b2:76:20:cf:1b:15:25:1c:a4:ce:2c:9a:8b:95:88:
14:f3:80:89:dc:f7:6c:da:85:0b:90:92:5f:15:fb:
05:d0:41:d1:c9:98:8b:9d:b0:02:e4:2f:75:62:0b:
5d:0e:4d:1c:25:b3:b5:cc:9c:73:e1:a4:64:98:1d:
17:42:e8:1b:9a:bd:ee:cf:2a:08:67:78:23:67:30:
1b:00:e7:21:9e:6b:ba:7e:91:dc:12:74:a4:35:35:
42:81:f8:d7:4c:13:70:3c:18:70:56:ae:00:29:c6:
6f:64:a0:45:a5:ee:28:4d:17:a6:72:9d:73:81:df:
32:b7:69:03:04:39:0b:af:eb:33:16:38:ca:2e:9b:
40:4c:1c:d7:34:d5:46:d5:88:97:f0:af:ac:1b:54:
8b:f3:83:a2:ce:7a:7b:7e:82:20:57:f7:77:47:12:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:F7:F4:70:0F:BB:AE:A9:02:17:E4:E6:DE:A1:97:7D:80:B7:7E
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/mmf39HAPu66pAhfk5t6hl32At34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:01:ec:31:55:e4:8b:ba:b4:17:ce:f6:63:c6:44:ee:bc:c1:
52:2f:b3:14:c1:52:25:cf:85:88:57:70:49:7e:57:66:2f:f6:
49:a0:58:1a:16:73:38:14:e4:a0:fb:eb:95:ee:0a:dc:a7:04:
e2:02:7e:0b:10:c9:90:3c:2f:e0:05:e6:8d:b4:1c:26:65:ff:
b3:32:87:9e:86:a7:a9:af:d2:a1:f9:bb:d7:71:6a:6e:a2:88:
c3:eb:dc:b5:30:83:5d:26:18:d2:60:ec:33:84:cc:ba:1a:cc:
68:55:b2:80:b0:5b:2c:9e:89:d5:35:ce:17:89:c6:06:57:b1:
b2:68:dd:35:cb:81:7b:5e:cb:e6:c1:ca:e6:3b:82:11:8d:98:
ff:d8:6a:16:82:d3:fc:e7:12:07:9f:85:f4:2f:69:49:11:bc:
49:22:ff:35:3d:41:ad:b1:1c:9f:b1:07:6e:e0:e0:16:e8:d8:
3a:a3:c4:4b:65:64:9b:fb:f5:93:78:0a:40:08:b4:cc:8a:f0:
84:86:1b:aa:90:ed:bd:96:d3:45:fd:2a:e5:b4:bf:dc:fc:d4:
4c:12:c6:b1:da:7b:7d:69:ed:0b:e5:b1:f3:f2:bb:32:19:2f:
e5:7b:17:7f:35:30:14:07:45:ee:a2:b4:d7:a8:18:ef:08:d9:
91:87:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:39 2025 by rpki-client