Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/MwEJqReLtYJIDzQC3nxs7sP0tvA.roa
File: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (raw, json)
Hash identifier: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=
Subject key identifier: 33:01:09:A9:17:8B:B5:82:48:0F:34:02:DE:7C:6C:EE:C3:F4:B6:F0
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019421B1BC6955237AA16E6CF356EB7FE1B3
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/MwEJqReLtYJIDzQC3nxs7sP0tvA.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 193.37.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bc:69:55:23:7a:a1:6e:6c:f3:56:eb:7f:e1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=330109a9178bb582480f3402de7c6ceec3f4b6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:cf:d8:55:5b:2b:72:a2:7c:74:3d:b0:da:
02:04:f5:9a:d3:76:04:d7:ca:f4:42:f3:d1:cd:2f:
c1:50:ad:24:ce:0e:94:d1:30:a4:b0:70:19:6d:26:
cc:c9:aa:38:3d:73:fb:41:0b:98:24:f1:05:23:69:
9f:1d:78:8e:7c:70:4f:f2:d8:bb:7b:bc:1b:11:af:
c6:51:0b:75:99:21:53:9b:12:fd:ea:33:0c:eb:7d:
5d:7d:07:93:01:f1:de:a4:9c:7d:70:fd:bc:e4:fd:
5e:91:0e:83:3b:55:5d:20:86:c1:b6:e0:ce:10:39:
19:04:0f:1b:84:63:84:3d:fd:92:92:54:8e:86:b8:
7a:7c:eb:84:f5:54:42:54:4e:52:de:51:c5:29:f3:
83:0b:72:a0:5a:15:e7:4d:aa:9d:d8:39:cd:d4:b7:
42:31:88:dd:30:5c:dd:7c:65:97:c5:70:fc:c2:31:
f7:b1:37:b4:ff:c1:ed:88:55:b3:e9:ae:3d:20:a4:
4a:b5:53:a8:eb:5b:3d:08:66:82:5a:a8:fb:b4:a7:
42:8c:85:31:ad:10:79:24:c4:0e:c1:23:5c:30:1f:
06:18:90:71:25:6b:20:72:fd:77:28:91:af:79:55:
68:ce:f8:df:06:bf:e8:43:78:80:87:5b:fa:3f:62:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:09:A9:17:8B:B5:82:48:0F:34:02:DE:7C:6C:EE:C3:F4:B6:F0
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/MwEJqReLtYJIDzQC3nxs7sP0tvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d2:27:84:b9:f2:ee:df:1f:0f:28:a9:e3:9e:87:ff:35:cc:
a4:36:83:cc:f6:2b:7e:f6:64:ec:e2:0e:62:25:64:9f:16:96:
a3:6c:97:49:9f:41:58:7a:08:58:44:dd:df:93:69:6a:9e:e3:
0b:b5:98:19:e6:fc:fd:3d:d1:1d:01:21:c1:5a:2f:48:e0:cd:
11:64:b8:1d:39:e1:44:a6:7a:f3:e8:04:9d:20:af:7a:4a:37:
00:ff:a3:c8:11:6a:f3:5c:1d:c3:b8:a8:7a:c5:9e:10:7f:f3:
56:9c:35:34:20:79:3a:18:e7:78:f9:41:d0:00:e7:f5:b7:69:
78:9c:e1:a9:ba:60:6a:d8:41:6d:d9:12:72:6a:a2:78:ea:ac:
29:2c:a7:80:f6:76:8c:d0:e7:c4:8c:80:f4:25:8c:15:13:80:
77:c3:88:fd:59:fe:38:b7:89:b3:84:27:ce:6a:6e:3a:04:94:
6d:a8:f3:8a:df:3b:25:70:cd:e7:7a:ff:a6:d8:64:a1:86:a8:
fb:45:7d:d4:71:1b:d4:88:3e:ce:f1:a5:b1:b6:4b:16:f0:49:
0e:50:5d:d2:11:d7:da:d0:59:da:93:1b:7c:e2:3c:b4:bf:52:
16:6a:bd:e7:ef:fb:8c:f6:7c:26:5f:21:e2:a6:29:d2:e4:30:
3d:89:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:23:32 2025 by rpki-client