Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/MSGRLRCiBhnKifWWzBoPVP9BYOE.roa
File: MSGRLRCiBhnKifWWzBoPVP9BYOE.roa (raw, json)
Hash identifier: nR+cJoNPWrIFffyBp0y8hYuTUREkaU/zRuo5hbsXTNY=
Subject key identifier: 31:21:91:2D:10:A2:06:19:CA:89:F5:96:CC:1A:0F:54:FF:41:60:E1
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C1A5EC0CAE1872A1FD904E4DA55C
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/MSGRLRCiBhnKifWWzBoPVP9BYOE.roa
Signing time: Wed 01 Jan 2025 19:48:40 +0000
ROA not before: Wed 01 Jan 2025 19:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 193.148.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c1:a5:ec:0c:ae:18:72:a1:fd:90:4e:4d:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3121912d10a20619ca89f596cc1a0f54ff4160e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:e1:4b:28:6f:9e:e7:32:e3:e2:f5:b9:6d:
2a:34:b1:7d:57:28:61:e2:65:e6:f6:60:cb:bb:a2:
d4:2e:45:c7:20:46:f5:ba:9c:fa:0d:59:15:fa:e6:
81:62:29:3a:7a:69:d8:46:6b:8d:7c:e3:7c:ee:d6:
f8:4e:7a:fa:fd:9d:3b:6d:47:3d:a0:76:13:f3:c7:
9e:82:1d:55:ab:63:0b:a5:49:f8:9b:64:c8:5e:6f:
5e:8b:c4:ae:91:70:04:57:b7:74:38:48:00:b5:dd:
7a:33:a1:ba:ac:05:60:b2:c1:a2:d3:98:c4:b7:2b:
65:d5:c2:fb:57:f0:40:dc:2f:9e:71:9e:09:91:27:
5a:6f:2e:84:b7:c6:e2:f6:e5:07:d0:df:79:3f:2e:
d6:9d:a2:92:f8:e0:ec:3d:92:a1:bb:69:42:e3:e1:
35:45:e0:a3:84:b3:02:03:d5:2d:c5:ea:15:9c:2d:
af:e6:5e:b8:a3:34:9f:d1:1f:83:97:e1:33:d6:82:
ef:19:7d:de:ae:aa:86:07:21:93:f7:25:24:e6:80:
f1:5a:a6:23:7b:d5:e5:f3:91:49:bb:4a:1a:4e:f7:
7d:84:90:91:c4:4c:76:41:f5:34:7e:79:e5:ea:52:
66:6f:f0:17:a0:dc:03:93:a6:85:cb:9d:9f:77:ec:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:91:2D:10:A2:06:19:CA:89:F5:96:CC:1A:0F:54:FF:41:60:E1
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/MSGRLRCiBhnKifWWzBoPVP9BYOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.61.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8f:52:2a:59:7b:e2:6e:e4:79:8d:f9:08:0e:c2:52:c6:24:
6e:86:01:c7:1c:3e:b6:7a:d0:58:f5:f5:16:9a:90:d5:f7:42:
d5:fb:b6:95:26:71:cb:b5:7b:cb:79:af:c6:6b:49:41:d3:3d:
2c:80:cf:9a:f7:90:1d:b2:53:b4:ff:17:8f:cd:6e:14:f0:98:
f2:fe:cb:a9:86:81:bc:9f:cd:66:69:c3:b3:58:7a:18:d3:f4:
45:45:4b:a6:ec:ed:93:23:55:7a:e2:a2:ae:00:47:6e:5c:33:
5e:59:4b:cc:cc:c5:44:00:e6:1b:56:71:da:ff:d5:5b:a7:6c:
3b:fd:75:a1:79:9c:f9:0c:79:75:d9:fd:a9:35:f0:ad:88:8c:
33:21:7f:c5:ed:ba:fe:bb:5e:fc:86:d6:28:ec:20:94:73:e4:
e4:43:6d:95:a8:7c:fd:c2:40:47:db:42:26:7d:1d:d8:fc:3c:
e7:89:ce:5d:0e:c8:5d:cd:4b:90:7f:f1:0b:7c:4a:ec:51:f0:
99:4f:84:6f:53:d2:37:aa:3c:1d:7a:f1:aa:f6:be:c8:c4:5b:
01:6b:21:b8:6d:1a:34:14:7f:cd:1e:2c:f3:11:2b:13:0b:8a:
2c:b4:9f:80:c2:40:da:f1:72:6e:69:42:80:9e:69:05:0f:4e:
bb:2b:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:42 2025 by rpki-client