Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/cMpaW7cVC0wOITYTuoFWwIF5n44.roa
File: cMpaW7cVC0wOITYTuoFWwIF5n44.roa (raw, json)
Hash identifier: 4diQ6JOCI3p/sKjl0F+QVRHdBT8AYRe0IlWz174rlII=
Subject key identifier: 70:CA:5A:5B:B7:15:0B:4C:0E:21:36:13:BA:81:56:C0:81:79:9F:8E
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 019427B54418FC16C8650383A0EEEE9A23F6
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/cMpaW7cVC0wOITYTuoFWwIF5n44.roa
Signing time: Thu 02 Jan 2025 15:49:38 +0000
ROA not before: Thu 02 Jan 2025 15:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 185.248.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:44:18:fc:16:c8:65:03:83:a0:ee:ee:9a:23:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Jan 2 15:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ca5a5bb7150b4c0e213613ba8156c081799f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:c6:48:94:67:69:24:82:b2:33:06:8e:06:
4f:a3:ed:76:86:d4:45:82:75:b5:53:27:bd:84:a2:
33:d0:78:f4:4b:85:95:ca:3e:d4:5d:84:d0:6a:67:
5d:e5:0e:43:4d:de:bf:af:33:6b:d1:dd:76:2e:f2:
39:0a:c3:66:96:db:24:97:f6:fa:2d:11:eb:78:96:
0e:02:fe:9d:17:11:13:9e:e0:91:17:cc:ea:ef:c3:
25:22:74:5b:87:a9:22:69:70:35:0e:04:43:aa:45:
07:e8:7d:bf:01:a6:bb:cf:d8:24:76:39:26:01:56:
ba:98:0e:22:5d:dc:17:3e:a1:38:e9:16:04:07:45:
33:9b:a4:c6:a7:7b:22:2e:35:43:63:8a:4c:22:1d:
f5:a4:54:6b:74:7a:b2:19:bb:6c:69:80:25:f8:8d:
6b:23:71:5f:58:d2:7e:5e:a0:2a:50:47:a5:b1:56:
be:31:b0:7e:1a:53:6f:6e:ce:ac:71:90:9e:32:3a:
08:bf:07:6d:d3:c6:21:9b:c5:ea:33:37:dc:df:0f:
de:ab:b5:99:7f:5d:68:de:16:66:9e:6e:45:8b:05:
31:0f:a2:6c:87:e8:81:1d:cf:76:b5:b6:37:51:84:
76:38:af:02:53:bc:af:42:b2:95:80:1c:4c:97:ff:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CA:5A:5B:B7:15:0B:4C:0E:21:36:13:BA:81:56:C0:81:79:9F:8E
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/cMpaW7cVC0wOITYTuoFWwIF5n44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.0.0/23
Signature Algorithm: sha256WithRSAEncryption
47:4e:65:ba:99:f3:d5:97:cc:9b:7b:4f:86:9a:52:f9:13:b0:
76:e0:29:0d:7d:3e:35:66:7a:4c:68:38:e5:15:7a:b2:ff:23:
6e:85:d8:f2:40:83:2b:c6:f9:02:bc:bb:6d:ef:6b:93:2b:c2:
40:7d:2a:c0:0e:d1:dc:ff:b3:de:ca:88:7a:2e:3e:be:41:ce:
1e:40:a9:fe:26:8d:b4:31:79:ff:86:9d:98:77:ff:94:ef:4c:
ec:ce:8e:a1:2f:eb:54:50:e5:b4:64:33:d1:09:6e:cb:a3:8a:
34:37:80:fc:d5:00:aa:7a:1d:55:18:36:de:83:50:d0:fa:43:
24:6c:9a:c5:87:f2:36:e9:05:d5:55:4b:70:ee:7c:fe:07:ec:
58:f4:21:b2:6c:86:b6:21:b3:44:9a:0e:a2:94:99:b1:f0:f9:
d2:69:97:f0:b7:75:dd:e9:2e:56:9a:d7:ad:ef:64:af:b4:77:
05:73:52:cd:04:62:d2:78:1e:6a:ac:e2:51:7d:a1:03:f9:46:
e0:8e:6b:b5:b6:fb:de:6a:8a:57:3c:49:ad:01:0e:37:dd:11:
41:f9:06:f4:de:37:fb:e4:60:00:56:4f:2f:5b:c8:de:f9:b5:
0d:da:75:d3:4f:d3:40:c0:91:8b:f4:0e:d2:35:e0:ad:64:c3:
ff:ba:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:37 2025 by rpki-client