Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/MehnUn8QQlt4jJVWXHJet8Xl-Ec.roa
File: MehnUn8QQlt4jJVWXHJet8Xl-Ec.roa (raw, json)
Hash identifier: 8EC847pBFpPj5yw0TCwh/bnYc5VOWtL7236chIzY3r4=
Subject key identifier: 31:E8:67:52:7F:10:42:5B:78:8C:95:56:5C:72:5E:B7:C5:E5:F8:47
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0195ADF4B2C2386D174597CACB32EB8EFBEA
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/MehnUn8QQlt4jJVWXHJet8Xl-Ec.roa
Signing time: Wed 19 Mar 2025 10:30:49 +0000
ROA not before: Wed 19 Mar 2025 10:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 92.53.160.0/20 maxlen: 24
92.53.160.0/21 maxlen: 24
92.53.168.0/21 maxlen: 24
92.53.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:f4:b2:c2:38:6d:17:45:97:ca:cb:32:eb:8e:fb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Mar 19 10:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e867527f10425b788c95565c725eb7c5e5f847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:3b:a3:ea:67:04:a5:03:0d:fc:b3:49:2b:
ef:d1:33:c3:c1:98:dd:0d:56:fa:75:41:6f:fe:71:
20:93:18:88:54:b0:80:75:96:c0:7c:ba:33:25:5e:
b4:05:d3:b2:c2:d5:cc:b6:06:d8:8c:e7:b5:f2:6b:
e0:be:ef:4d:7b:0f:27:de:d3:ba:53:94:25:5e:90:
f3:ff:2b:2c:a4:05:ff:b0:7f:ee:e0:a8:a7:1a:0b:
92:7e:8c:ba:88:4a:9e:5f:81:73:55:1b:12:16:86:
cd:42:83:f9:be:2d:09:fa:92:4f:48:1d:16:bc:a1:
f7:d0:8c:71:1d:af:f5:a0:57:e8:77:c0:8e:0f:44:
a3:d4:05:bf:21:5f:83:c2:9e:22:cc:51:8f:d7:53:
c6:3c:07:76:4e:1c:e7:b1:4d:78:a0:27:8f:d7:09:
a1:d1:22:57:98:63:06:f6:94:7a:de:9c:37:32:3d:
ee:74:b0:d1:a0:a1:2f:41:ee:a5:4d:74:ec:0f:c5:
57:1d:eb:6d:15:bd:98:21:3a:7e:ba:d0:d9:17:56:
33:d8:23:e3:65:a7:e8:95:2d:cb:74:c7:00:93:a7:
5a:22:8a:cc:a5:8e:42:87:9d:d3:73:80:8b:2c:1a:
d1:e4:32:e0:3f:e6:f2:8f:26:57:b3:a6:f5:77:d4:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E8:67:52:7F:10:42:5B:78:8C:95:56:5C:72:5E:B7:C5:E5:F8:47
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/MehnUn8QQlt4jJVWXHJet8Xl-Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.160.0/20
92.53.184.0/22
Signature Algorithm: sha256WithRSAEncryption
20:d5:9e:c4:70:ec:ca:91:66:2b:ca:97:bc:d6:a8:d7:3c:60:
1e:c4:15:4d:f1:05:0d:a0:a8:91:2b:53:80:03:06:cf:29:11:
25:68:c3:39:36:85:9d:f5:5a:94:35:a9:85:2b:f0:d9:2b:a2:
eb:55:20:17:8b:48:65:1d:05:25:dc:11:05:5d:fd:47:51:92:
39:44:32:23:00:2c:8b:b4:f8:bf:73:27:54:4f:9f:7b:9a:cf:
9a:31:66:ec:fd:b2:62:ef:e8:7a:a0:2f:11:c8:a2:8d:7e:ba:
63:7f:33:bb:6e:17:67:a7:26:72:03:46:34:28:2e:3a:d2:77:
34:1f:b7:77:f0:ca:3b:09:36:60:03:ee:70:f4:f0:2f:94:74:
45:c6:03:d9:9c:71:88:3e:e7:83:bf:25:b5:5b:f2:62:5e:a9:
7a:3b:7c:9b:4a:0e:2a:1f:e7:32:2c:5b:30:9a:9d:c5:1e:45:
f1:e8:ea:e3:1b:31:f2:32:3a:11:21:6c:95:80:f2:96:9d:56:
5c:ed:f4:77:4b:86:c2:69:3a:e2:85:c8:71:b7:fe:34:4e:d7:
ab:78:35:44:77:ad:63:f2:0f:7a:f8:df:ef:f5:33:86:08:8c:
f0:ef:fc:71:88:08:f3:2a:68:6a:dc:a0:22:cf:83:02:82:58:
bb:af:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:11:41 2025 by rpki-client