Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa
File: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (raw, json)
Hash identifier: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=
Subject key identifier: 31:D9:22:E4:77:74:6B:DA:A8:41:35:3D:7A:4F:DF:8F:14:99:0B:F3
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 019420D6251D1F49FEF44AC098E0CDAF3A9B
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 185.191.240.0/22 maxlen: 22
2a0a:2140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:25:1d:1f:49:fe:f4:4a:c0:98:e0:cd:af:3a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31d922e477746bdaa841353d7a4fdf8f14990bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:f6:ac:17:57:bc:6f:2b:b4:67:9a:26:db:
8d:84:7b:d8:f4:7f:30:23:a8:3e:7b:1e:a8:87:18:
4f:d0:63:44:1f:63:16:14:e9:b6:e2:a1:fe:95:85:
33:1f:b3:fc:7d:be:6c:96:5b:68:4d:1e:bf:4b:7f:
ec:6c:d3:5d:02:ce:96:c6:08:2a:f8:62:96:17:b8:
58:a9:34:a4:84:9a:bc:c2:40:6b:5c:a6:b7:33:c7:
e3:87:ab:3a:08:45:1e:29:e1:61:b1:55:34:33:23:
fe:6f:84:4d:57:ff:65:1c:ae:3e:7b:09:93:e6:bb:
f9:7c:85:d9:a1:b7:ff:44:47:c9:f4:1e:62:69:15:
e3:d3:64:bd:76:b5:e8:e7:61:44:76:41:2c:9d:07:
40:66:88:26:2b:1d:96:e0:bf:0f:b5:69:7a:90:98:
6a:57:b3:26:e8:60:be:6d:a2:f6:10:62:b1:87:32:
0b:51:db:9d:b0:0a:0c:c3:89:79:d6:04:da:65:58:
08:ad:ef:fd:32:99:d2:e8:81:1a:04:96:6b:3f:73:
dd:29:4e:91:a6:d7:92:ce:76:b9:a5:d7:b3:cb:c5:
a2:c8:17:86:da:8c:98:e6:95:2b:e0:ac:ef:46:f2:
29:d9:4c:86:85:b1:8e:88:50:9d:77:a0:3f:0f:c4:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:22:E4:77:74:6B:DA:A8:41:35:3D:7A:4F:DF:8F:14:99:0B:F3
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.240.0/22
IPv6:
2a0a:2140::/29
Signature Algorithm: sha256WithRSAEncryption
13:2b:ed:ef:c0:fc:38:4f:e7:52:2e:32:e8:8d:61:4f:1f:3d:
eb:3d:78:50:65:fe:24:3c:c7:2f:88:b5:b6:cf:cf:cf:07:0d:
5c:00:07:01:f6:d5:2c:48:22:0b:8b:5d:34:13:82:50:cd:1d:
d8:12:b6:c2:6f:3c:bc:30:14:96:42:48:a9:f9:03:bf:4a:e2:
22:6c:93:9b:1d:23:e4:27:fb:d9:78:f6:5c:2e:a8:3e:b4:af:
10:3c:1b:d9:27:51:be:e7:d3:07:16:3e:4f:45:9c:03:8f:6b:
84:d8:3c:8c:54:7f:56:d6:89:32:56:7b:7a:00:c0:1f:ab:79:
09:16:0b:16:ef:15:db:ec:ce:eb:dd:8d:40:86:bd:bc:a3:e7:
91:ab:2e:7f:21:0a:18:69:ef:4f:09:b2:99:e0:24:66:69:d3:
0b:13:36:af:b3:1a:70:0a:b7:a6:cb:53:ea:71:01:3a:6a:03:
96:d1:ad:d6:52:08:98:14:33:8a:3f:71:25:8b:a7:38:1b:f1:
ed:70:f5:4b:b6:d8:ec:1e:d0:d1:bc:b9:70:a0:cc:93:d6:ba:
19:fe:0f:b2:92:7d:dc:10:fd:00:c8:f8:4f:1b:12:bb:ea:40:
da:41:fc:5a:50:40:13:6a:32:47:8a:d9:4c:a1:12:26:0c:14:
38:22:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:36 2025 by rpki-client