Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/MVRm2B27-mtawpjQijtz-fTQOKU.roa
File: MVRm2B27-mtawpjQijtz-fTQOKU.roa (raw, json)
Hash identifier: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=
Subject key identifier: 31:54:66:D8:1D:BB:FA:6B:5A:C2:98:D0:8A:3B:73:F9:F4:D0:38:A5
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 019425FC19804CBD5D48012230456C4ABC45
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/MVRm2B27-mtawpjQijtz-fTQOKU.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203360
IP address blocks: 193.56.80.0/24 maxlen: 24
193.56.81.0/24 maxlen: 24
193.56.82.0/24 maxlen: 24
193.56.83.0/24 maxlen: 24
193.56.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:19:80:4c:bd:5d:48:01:22:30:45:6c:4a:bc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=315466d81dbbfa6b5ac298d08a3b73f9f4d038a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:19:ed:82:5f:40:19:c1:ca:56:73:25:aa:
79:82:03:4b:c9:22:60:42:ea:85:1c:b5:b5:c2:01:
b4:1f:fa:0c:69:ec:b1:e6:83:b1:38:ca:c3:38:ae:
63:61:5b:89:f7:b0:71:32:f1:64:a7:ab:00:11:89:
44:ee:78:0f:80:46:98:b3:e3:f8:85:46:9c:c0:4d:
d2:64:68:72:94:b7:b3:ff:b3:8d:c4:0a:a2:38:a1:
9b:90:17:b1:d5:c6:2d:1c:47:87:01:7b:77:a6:85:
72:a2:bd:c4:a9:74:08:01:2e:c0:21:98:f6:72:80:
6b:d2:7b:4b:ff:4f:53:12:f3:e3:9d:34:58:92:57:
82:02:c9:c5:fc:0c:ee:f2:dc:cf:80:5d:42:d3:01:
1c:24:20:25:9b:55:41:96:55:f8:33:bf:95:e5:5f:
ce:6c:62:56:f5:31:33:04:15:2e:7d:7d:3d:26:1e:
fd:aa:1d:d7:b9:3a:96:cc:00:22:26:7f:fb:4c:bb:
ad:fe:2c:79:fd:11:b2:d2:ec:1d:df:2d:6a:75:4d:
2e:d2:09:03:19:aa:ce:08:bd:5a:27:49:1e:15:2c:
eb:37:b4:2b:d9:4e:9f:8e:89:5e:bd:5a:7f:30:91:
ec:0f:f4:93:a6:f8:da:0f:27:48:d9:eb:34:dc:e5:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:54:66:D8:1D:BB:FA:6B:5A:C2:98:D0:8A:3B:73:F9:F4:D0:38:A5
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/MVRm2B27-mtawpjQijtz-fTQOKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.80.0/22
193.56.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0c:2b:51:45:8d:8f:25:8f:e9:e0:05:26:73:0d:f7:04:31:
66:aa:50:cb:46:a5:e7:ba:5b:68:5b:16:dd:b9:1e:66:f1:52:
be:84:2a:ba:92:b6:ec:aa:fb:95:91:b8:1c:ce:a4:1b:ae:2e:
0f:1c:b7:77:30:d1:b0:b0:bd:75:4f:33:3e:b2:56:e8:4c:bf:
f1:d0:97:da:ce:c6:06:d6:69:fe:fd:d2:f6:25:2f:4c:5c:2b:
ea:72:0d:90:70:de:69:b8:9f:84:80:3f:e9:0f:4c:d5:a9:cb:
93:9f:7f:d9:46:6f:18:20:6d:d0:2e:5f:2c:a6:0b:b5:90:9c:
36:90:b5:9d:5c:9e:f9:e1:fd:c4:bb:e9:96:03:6d:ce:da:41:
cc:a8:44:75:a7:81:0c:c9:6f:98:6f:6f:70:bf:61:49:8e:31:
f7:fc:cd:6e:36:3e:2a:c4:11:0e:89:65:77:20:aa:94:1e:37:
38:fd:fe:d9:72:ac:81:54:bb:e3:b2:c4:55:ef:f0:c1:5f:20:
66:6f:18:e2:40:b5:22:75:9c:b0:c2:5c:c3:50:19:b0:cf:9a:
7d:76:64:4a:e3:dd:bc:94:35:71:87:56:58:09:de:bd:61:4a:
8f:ff:e3:e8:5a:3f:d3:b8:fc:ef:84:ac:ab:e9:27:ed:e7:fa:
54:68:1b:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/BmATL1dSAEiMEVsSrxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjU5Mzg2ZmNkZTU5NmY3NDU5MDc1ZWRlYTRkNzRjMTli
MDFjYTIwHhcNMjUwMTAyMDc0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTU0NjZkODFkYmJmYTZiNWFjMjk4ZDA4YTNiNzNmOWY0ZDAzOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1noZ7YJfQBnBylZzJap5ggNLySJg
QuqFHLW1wgG0H/oMaeyx5oOxOMrDOK5jYVuJ97BxMvFkp6sAEYlE7ngPgEaYs+P4
hUacwE3SZGhylLez/7ONxAqiOKGbkBex1cYtHEeHAXt3poVyor3EqXQIAS7AIZj2
coBr0ntL/09TEvPjnTRYkleCAsnF/Azu8tzPgF1C0wEcJCAlm1VBllX4M7+V5V/O
bGJW9TEzBBUufX09Jh79qh3XuTqWzAAiJn/7TLut/ix5/RGy0uwd3y1qdU0u0gkD
GarOCL1aJ0keFSzrN7Qr2U6fjolevVp/MJHsD/STpvjaDydI2es03OX1dQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDFUZtgdu/prWsKY0Io7c/n00DilMB8GA1UdIwQY
MBaAFIL1k4b83llvdFkHXt6k10wZsByiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAt
ZjlmZWRiZjYzMjcyLzEvTVZSbTJCMjctbXRhd3BqUWlqdHotZlRRT0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81YmMxMzQtNTYyNS00ZWIxLTlmNzAtZjlmZWRiZjYzMjcy
LzEvZ3ZXVGh2emVXVzkwV1FkZTNxVFhUQm13SEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwThQAwQA
wThXMA0GCSqGSIb3DQEBCwUAA4IBAQAaDCtRRY2PJY/p4AUmcw33BDFmqlDLRqXn
ultoWxbduR5m8VK+hCq6krbsqvuVkbgczqQbri4PHLd3MNGwsL11TzM+slboTL/x
0JfazsYG1mn+/dL2JS9MXCvqcg2QcN5puJ+EgD/pD0zVqcuTn3/ZRm8YIG3QLl8s
pgu1kJw2kLWdXJ754f3Eu+mWA23O2kHMqER1p4EMyW+Yb29wv2FJjjH3/M1uNj4q
xBEOiWV3IKqUHjc4/f7ZcqyBVLvjssRV7/DBXyBmbxjiQLUidZywwlzDUBmwz5p9
dmRK4928lDVxh1ZYCd69YUqP/+PoWj/TuPzvhKyr6Sft5/pUaBs1
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:08 2025 by rpki-client