Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/mmQZQMc3pi55Js-9aVzfnXjlBGY.roa
File: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (raw, json)
Hash identifier: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=
Subject key identifier: 9A:64:19:40:C7:37:A6:2E:79:26:CF:BD:69:5C:DF:9D:78:E5:04:66
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 01942067BE436D92244B36A02C64CA9346C8
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/mmQZQMc3pi55Js-9aVzfnXjlBGY.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60458
IP address blocks: 193.3.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:be:43:6d:92:24:4b:36:a0:2c:64:ca:93:46:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a641940c737a62e7926cfbd695cdf9d78e50466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:89:85:16:a1:af:4d:54:ad:4b:ca:f5:14:
3c:20:ad:c5:27:e4:bd:9b:8d:59:60:b2:06:55:27:
c3:cc:8f:0c:5b:a0:2e:3e:3e:0d:be:6e:dd:e9:fb:
6f:99:f4:97:d1:33:f8:70:82:de:94:7b:fb:02:99:
41:ef:a6:1a:b4:58:81:34:a4:5b:95:dd:aa:07:38:
71:45:ab:55:68:92:ca:4a:03:11:2e:4c:71:b5:ae:
11:d6:07:5b:6f:45:a7:3c:cc:67:92:a5:d0:ce:5c:
75:bc:4f:e1:b2:33:17:09:31:f8:68:07:66:9f:00:
83:76:45:b7:8e:58:28:c8:dc:f0:8c:f8:6b:6b:f3:
0f:05:0c:2c:3f:b0:54:bf:8a:71:ab:73:66:d8:fb:
2b:8d:13:76:d8:be:17:4b:91:66:ab:4a:86:0e:94:
f4:8a:ff:92:83:fe:5f:6b:4b:2d:58:0d:96:52:4f:
8a:0a:b1:78:c1:c8:da:d9:67:a9:b1:83:6e:1e:4b:
bc:46:6e:47:7c:f3:47:cd:23:d0:7d:43:ee:f7:56:
44:34:70:3c:55:e1:a0:be:99:a7:81:64:a9:02:33:
1a:4b:a6:f8:fd:cc:8f:17:21:3d:f7:69:e1:6f:09:
5d:34:55:28:ee:b6:5c:d6:8e:aa:a3:de:0b:77:ff:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:19:40:C7:37:A6:2E:79:26:CF:BD:69:5C:DF:9D:78:E5:04:66
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/mmQZQMc3pi55Js-9aVzfnXjlBGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.232.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9f:2f:63:c6:25:04:15:41:46:87:51:96:cd:c9:28:bf:fe:
39:77:5b:86:4c:bf:ad:91:fb:52:65:bc:ce:ff:d3:95:42:2f:
dd:51:50:64:c4:20:46:53:d2:b1:53:7a:df:78:83:0c:6c:90:
25:55:c0:f0:94:c4:36:b5:82:80:38:d8:4d:61:48:ca:bb:bb:
bc:b1:0a:01:ae:f9:30:09:ef:c2:b4:36:42:0d:62:aa:22:75:
3a:f1:85:5b:1d:c2:5f:6c:ce:66:e5:85:21:e0:c7:fe:89:7e:
06:e7:f9:cd:fa:62:a1:ee:3a:25:e8:1f:e3:a8:af:63:b7:c9:
cd:6b:5c:f2:b4:9e:3f:54:c5:65:77:14:92:1b:87:9e:18:d3:
27:0f:e7:86:f4:68:5d:a1:fc:a5:c2:b4:9b:a3:a1:0d:80:5d:
e4:96:7b:16:8a:4e:39:30:10:10:ef:5f:24:52:58:22:5b:6c:
e7:b2:90:07:a4:08:55:20:72:e4:ae:34:da:fd:a5:d7:76:91:
5a:cc:d6:3f:78:ac:32:8d:42:a9:6a:f2:db:fd:b6:0a:fe:8e:
56:f3:5d:02:32:41:61:4d:82:aa:f8:49:b9:75:12:37:25:db:
c1:50:bb:85:74:fa:08:bc:9b:61:56:87:9d:2b:dc:86:5b:dc:
8d:a4:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:10 2025 by rpki-client