Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa
File: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (raw, json)
Hash identifier: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=
Subject key identifier: 30:D4:91:03:DE:06:9F:00:96:21:C5:34:65:43:D2:81:F2:49:CD:80
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 019426D9CE4F2E20C60116A7F39DEA0CDF4B
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211081
IP address blocks: 185.193.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ce:4f:2e:20:c6:01:16:a7:f3:9d:ea:0c:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30d49103de069f009621c5346543d281f249cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:74:ce:2b:89:04:1e:31:d5:a1:df:24:2d:
84:31:50:50:ae:b2:3a:1a:79:52:33:06:ba:f0:78:
7d:c1:4d:4a:b5:e0:e8:92:39:28:1e:47:1b:4a:07:
39:7f:58:0b:b1:3b:4e:41:32:dd:e9:09:bb:ff:8e:
9a:a4:1a:b6:c2:6f:8a:c4:b4:72:a9:a3:73:3f:f5:
b2:cc:f0:9e:60:ec:71:9a:19:1b:9d:85:1f:aa:31:
b5:21:52:3e:60:f7:f5:e2:fd:2e:be:2e:96:10:e1:
a8:ba:26:04:b2:43:99:9e:b3:05:aa:c8:1d:72:cf:
a4:e2:95:5a:1e:8b:86:94:74:6e:04:81:70:3c:c1:
13:46:e7:b1:5c:90:d9:47:36:0d:15:d9:8b:ee:b9:
7f:ea:bb:9c:05:20:71:14:54:98:73:91:3c:ac:47:
ce:8c:c0:f2:c0:84:38:87:39:f3:2e:79:bc:87:af:
c0:bc:50:25:68:62:67:f2:7a:27:f4:8c:5c:84:dc:
89:e5:19:53:45:2e:a0:48:d3:36:98:c8:8e:c3:b3:
77:7d:d5:13:e0:e1:cd:eb:07:c3:2a:4c:a7:99:66:
c9:29:aa:80:0d:cf:91:64:e1:0b:c7:f4:dd:1b:2d:
45:3f:7d:fe:5c:a5:d9:67:32:7a:97:e4:56:d5:07:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:91:03:DE:06:9F:00:96:21:C5:34:65:43:D2:81:F2:49:CD:80
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2e:22:85:85:b2:5a:cf:19:2c:e1:2d:cc:40:ac:63:c3:9b:
3d:51:f7:e2:31:5e:90:a2:ef:cb:2b:80:cb:38:74:a4:ab:b3:
cc:49:06:db:07:38:02:0e:d1:2a:56:a6:7d:6c:4e:6f:57:c3:
a1:9c:2a:12:f0:43:f2:0d:15:ac:e9:37:fd:0f:f6:07:e2:49:
21:10:d6:1e:28:17:fc:e2:22:9e:6c:7e:07:2e:e7:8c:33:96:
d8:af:7a:a3:ef:d7:81:dc:e4:69:f6:06:c8:1b:6f:9e:bf:3e:
c2:e2:b8:c9:ff:3b:48:9e:51:dd:de:a9:47:3c:c5:f5:83:74:
d4:38:5d:a8:08:f3:ad:0b:52:0a:d1:f9:0c:fe:89:bd:06:0c:
ea:0c:e8:19:fb:d9:da:52:62:77:19:f3:a1:34:d2:4a:4a:1d:
0d:c2:22:33:fb:fd:9f:09:fc:13:2a:b7:71:79:6c:34:27:01:
5e:90:da:2b:7a:2c:66:c5:f7:8a:4c:3e:ab:20:d3:13:cc:b9:
57:4d:99:5f:8b:4d:0f:23:72:46:50:b5:86:ee:76:aa:b8:3f:
f2:f5:00:25:71:de:4c:e0:91:a3:7a:09:c0:3a:1b:79:5a:e5:
72:ab:f9:9f:4c:f0:58:d9:18:bd:e5:f8:14:bf:75:01:29:c8:
f1:a8:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:52 2025 by rpki-client