Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/MzC4INKIsgRwDzo9x7bkUxRAB1c.roa
File: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (raw, json)
Hash identifier: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=
Subject key identifier: 33:30:B8:20:D2:88:B2:04:70:0F:3A:3D:C7:B6:E4:53:14:40:07:57
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 019421B1B5B9D9C65A324808B8BE23C9225C
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/MzC4INKIsgRwDzo9x7bkUxRAB1c.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.227.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b5:b9:d9:c6:5a:32:48:08:b8:be:23:c9:22:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3330b820d288b204700f3a3dc7b6e45314400757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:93:d3:f3:3a:96:3c:76:fe:c3:86:46:ac:
44:ff:84:e1:f0:da:21:2a:c0:d2:29:f0:77:88:b1:
a9:dc:fb:3d:fa:c3:62:7f:dd:35:45:ad:a4:57:62:
35:ce:d4:06:75:c4:a8:b9:3f:0f:43:89:e5:fc:22:
b8:eb:e8:3a:3b:d7:f2:96:47:0f:45:a7:47:b0:8d:
85:cc:7d:45:2e:c3:d7:ee:b3:b7:4b:31:8d:3a:61:
6e:ed:35:b1:f4:8f:fe:ea:73:ef:bf:f3:59:f1:bd:
ab:00:4e:de:d2:09:df:62:66:be:be:53:95:cb:f1:
f2:85:44:da:71:24:1a:b0:99:03:6b:16:0c:46:e2:
e9:80:5b:2d:e7:90:57:58:50:30:b7:79:6f:0e:e1:
e9:8d:ea:37:2a:eb:91:16:bd:fe:7c:87:13:96:06:
8d:83:cd:08:e1:21:df:e1:dd:d7:d5:23:45:ec:a5:
ef:0d:11:51:1f:40:d4:95:df:90:4f:15:dd:85:a9:
da:f1:91:6a:c3:f3:10:b4:a5:75:5d:e7:05:39:c7:
98:6e:26:82:f4:0e:c0:09:fb:42:d0:40:a0:c3:1e:
33:8b:48:94:d6:37:0c:df:fd:70:3c:90:32:d9:7e:
8a:a2:8b:d4:90:32:ab:78:98:2a:fe:d8:f3:80:a6:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:B8:20:D2:88:B2:04:70:0F:3A:3D:C7:B6:E4:53:14:40:07:57
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/MzC4INKIsgRwDzo9x7bkUxRAB1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ca:78:b2:83:f2:5b:9a:91:40:47:c2:b9:fa:68:e8:47:65:
90:e2:14:bb:9f:aa:66:f3:54:2e:1f:27:8e:73:92:ff:63:f3:
da:cf:f5:e1:8a:e1:70:39:47:27:40:13:17:60:d0:36:e8:05:
10:d0:92:06:a8:94:5a:8f:0c:52:38:fb:94:9a:f9:63:a4:86:
56:70:02:1a:43:cb:e0:9a:68:64:ff:2b:1b:b0:11:e1:e4:61:
31:8e:cf:88:10:2c:a3:fa:90:d5:d1:3f:60:2c:26:cb:cf:5f:
17:90:d2:a3:4a:88:62:36:06:87:1d:56:be:df:05:37:e2:7b:
7c:45:c6:f5:57:8f:44:b3:c8:e8:e1:85:03:d6:61:db:d2:69:
22:91:98:91:fe:c2:ca:d8:82:a1:9b:65:c7:90:b0:a7:7c:60:
a8:e5:c1:74:c8:12:39:44:77:22:eb:00:29:98:61:65:df:cf:
73:c0:14:71:16:f4:55:97:9b:4f:03:a9:c2:a0:4c:d2:b5:c4:
f9:81:1a:3f:74:56:6f:43:99:0d:29:c2:31:bf:28:85:38:18:
9c:3d:e9:39:15:73:d7:5e:9d:77:c9:86:23:7a:eb:9b:c8:87:
72:73:ab:d9:cb:41:85:8c:92:4f:b5:c2:e1:17:d9:5b:b2:bc:
9f:e8:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:40 2025 by rpki-client