Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mkCGHGRCJPKp94piOGCAOa71suY.roa
File: mkCGHGRCJPKp94piOGCAOa71suY.roa (raw, json)
Hash identifier: sC1p4QcoKUmzdnu3Y3v9u6geddrOJW0Pdc3l93WEysc=
Subject key identifier: 9A:40:86:1C:64:42:24:F2:A9:F7:8A:62:38:60:80:39:AE:F5:B2:E6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01958053F32ADD6A80025FDC0EA892B005E2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mkCGHGRCJPKp94piOGCAOa71suY.roa
Signing time: Mon 10 Mar 2025 13:52:20 +0000
ROA not before: Mon 10 Mar 2025 13:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 193.5.65.0/24 maxlen: 24
2a0f:3940::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:53:f3:2a:dd:6a:80:02:5f:dc:0e:a8:92:b0:05:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 10 13:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a40861c644224f2a9f78a6238608039aef5b2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:6e:e8:97:18:14:4f:24:e7:10:41:a9:71:
7d:16:24:df:23:8c:2b:ba:e0:93:a6:a3:2d:0a:11:
d0:f5:46:1b:4e:ea:d9:9d:26:23:a3:6e:0d:65:15:
b7:f5:c4:3e:4c:c8:ec:37:21:b4:03:c0:c6:9b:6e:
ea:55:d1:98:2e:0f:41:b2:8d:ad:96:43:11:3b:36:
b8:c7:ab:33:aa:a5:9f:59:b0:1f:b2:82:be:81:d5:
9b:d6:a6:5e:02:64:ee:19:4f:e8:bf:fe:11:4d:90:
72:03:e5:ef:2a:99:25:49:16:96:ef:8e:e2:a6:4d:
fd:06:15:6f:71:2e:eb:10:c0:37:bb:40:e7:bb:2f:
7e:9f:21:37:ab:7d:1b:a2:80:ed:32:ee:e2:57:f5:
28:a4:49:2a:c8:bc:c4:08:be:2c:6f:2a:e7:f8:b8:
47:02:d4:ab:27:55:50:43:6e:b6:68:74:26:36:72:
87:19:75:14:e1:13:8c:43:a3:09:a4:e9:ed:f6:95:
38:78:1a:cc:d7:b5:35:ae:8e:e2:2c:3c:93:c7:25:
de:f7:4d:47:86:ec:86:9c:b7:be:a2:06:a0:93:ad:
88:71:7d:f2:74:4e:e2:cc:73:34:b4:76:86:71:d0:
23:9d:67:25:6c:fe:2a:28:3f:86:f3:5b:93:ad:52:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:86:1C:64:42:24:F2:A9:F7:8A:62:38:60:80:39:AE:F5:B2:E6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mkCGHGRCJPKp94piOGCAOa71suY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.65.0/24
IPv6:
2a0f:3940::/29
2a0f:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:6a:15:53:8e:1a:1c:64:21:29:e9:ba:c9:8c:8d:15:33:e0:
90:f4:07:9d:bd:bd:77:f3:bc:31:b8:20:7b:c9:c8:9a:5e:b5:
33:98:6e:e1:ac:fd:c6:e2:78:4b:c3:99:4e:aa:50:03:e6:c0:
94:f2:cd:d1:39:fd:c1:d0:2e:e6:ae:17:ea:14:b7:01:a3:b7:
3b:0a:2f:f3:c7:32:6c:02:b8:7e:23:f8:21:97:05:22:d0:6e:
43:53:2a:c0:cf:93:24:bc:f8:d1:0b:24:a2:ff:00:75:24:ca:
b3:46:52:f8:bf:6d:6c:f4:76:9b:dc:86:17:65:83:e8:6c:be:
a4:8e:10:9c:7f:ae:28:9b:e7:c5:52:5c:65:3f:db:cf:97:08:
96:21:ae:1e:e9:2f:43:a0:64:92:97:c4:5f:d8:42:5b:9a:60:
d7:f4:13:a6:88:fe:eb:05:54:74:0d:5d:1b:bf:3f:56:b7:e8:
89:d5:85:3a:e4:67:4d:56:9b:55:ae:26:4e:85:92:6f:42:12:
a0:4b:b2:ca:35:ab:a4:48:64:49:e6:ed:c1:ec:20:6c:03:55:
1b:1b:11:67:86:17:52:8b:d5:36:7c:3a:a4:47:3a:f4:b6:ec:
ce:a8:59:53:f3:73:ee:78:74:82:4b:c3:e1:c2:e7:c8:a7:73:
78:6a:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:55 2025 by rpki-client