Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/mTsaI7F072ExgRo19Ofl8bkzPdc.roa
File: mTsaI7F072ExgRo19Ofl8bkzPdc.roa (raw, json)
Hash identifier: 22npmZLXe+4KWZT1/0yDqzlmlc8i6UHTlexS3GMrlU4=
Subject key identifier: 99:3B:1A:23:B1:74:EF:61:31:81:1A:35:F4:E7:E5:F1:B9:33:3D:D7
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0191326104B0F461A2193D88FDA325FA2272
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/mTsaI7F072ExgRo19Ofl8bkzPdc.roa
Signing time: Thu 08 Aug 2024 14:25:04 +0000
ROA not before: Thu 08 Aug 2024 14:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 46.8.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:61:04:b0:f4:61:a2:19:3d:88:fd:a3:25:fa:22:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 8 14:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=993b1a23b174ef6131811a35f4e7e5f1b9333dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:61:b5:a2:62:14:a4:57:5b:9b:db:b0:c5:
d1:8d:1b:18:f6:06:8f:36:14:b3:7f:17:33:50:83:
9d:bc:aa:82:bf:35:2a:41:46:90:08:10:66:20:b4:
64:ae:43:2b:47:f9:75:2a:0c:b7:77:7f:83:8d:1b:
9b:3e:1d:0c:d2:3f:40:48:8c:41:0c:0c:72:22:a6:
5a:f0:d2:6c:b6:b3:27:95:67:64:ea:0a:ec:c8:d4:
c6:17:dd:da:4c:3f:b0:7f:0b:da:2f:b4:c4:af:55:
0a:de:9a:ec:34:ae:c6:40:a8:d3:b6:89:9e:93:01:
af:c6:e1:b6:ef:dc:31:dd:ec:0b:1d:35:98:02:4a:
00:19:48:30:33:41:5c:d8:3b:9d:63:fd:58:bb:07:
23:e2:d3:80:5e:67:bf:b7:e4:64:46:95:0c:ec:f6:
d7:ef:e4:a8:58:4d:57:6d:bc:6a:80:27:7e:a3:e6:
bb:08:fc:56:12:94:cc:8d:7d:96:f1:b5:22:36:83:
b5:9b:b2:af:d5:19:71:de:fd:c4:aa:8b:58:32:70:
26:a9:ff:d1:be:d9:6a:81:b3:4f:ee:6b:92:92:13:
d6:7d:ac:e0:8f:5e:f4:19:f9:6d:61:36:d7:d0:ee:
b6:c5:0f:26:1f:ac:00:a9:33:b5:9b:88:0d:80:b0:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3B:1A:23:B1:74:EF:61:31:81:1A:35:F4:E7:E5:F1:B9:33:3D:D7
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/mTsaI7F072ExgRo19Ofl8bkzPdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
50:62:a2:4a:3f:25:6a:93:ef:f9:24:6d:2a:4f:51:be:fe:64:
2d:02:35:3a:72:c4:08:fd:64:eb:0e:7a:2f:53:a2:c8:b4:5c:
af:e2:0e:3c:e1:5f:b0:26:55:99:78:99:49:9e:fc:e7:56:ad:
4f:38:f7:b5:5c:f3:35:cd:d7:78:e8:3a:f9:f7:3f:4d:fc:9c:
d8:4f:c3:76:f1:cd:d9:a4:0a:09:f1:48:e8:14:6c:1a:47:81:
f8:c9:c3:8b:9c:3e:23:ba:b8:5c:e9:f0:e7:eb:55:06:62:8f:
d6:b3:9b:c3:07:5f:32:32:6e:7a:32:58:8e:dd:2d:88:6b:87:
b1:0f:74:40:8e:c5:3c:ba:8d:e1:a6:a4:55:4d:fc:73:14:5e:
76:fa:ea:4a:dd:f2:5f:db:67:ba:79:59:8e:c7:ea:f8:32:26:
92:bc:6e:46:c7:38:90:2b:a7:e9:b1:de:f6:b7:39:aa:83:80:
06:d1:0f:89:f5:84:7e:dc:7e:18:d6:75:0a:e6:2e:66:c3:a0:
6d:1d:03:a9:c1:fc:0d:53:a8:cb:cc:9b:9a:86:43:66:d4:e2:
17:48:6e:d4:39:ec:82:11:be:8c:5b:34:f7:7a:24:36:33:e8:
a1:0d:75:44:75:b5:3c:e1:ce:21:53:87:a6:e5:c7:88:85:61:
b0:fd:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:37 2025 by rpki-client