Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/mxHqegiIzk-5yKnAa0W9InQ8xh8.roa
File: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (raw, json)
Hash identifier: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=
Subject key identifier: 9B:11:EA:7A:08:88:CE:4F:B9:C8:A9:C0:6B:45:BD:22:74:3C:C6:1F
Certificate issuer: /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial: 019424B37241001B003207F2645E1DBE4295
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/mxHqegiIzk-5yKnAa0W9InQ8xh8.roa
Signing time: Thu 02 Jan 2025 01:48:47 +0000
ROA not before: Thu 02 Jan 2025 01:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197843
IP address blocks: 195.216.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:72:41:00:1b:00:32:07:f2:64:5e:1d:be:42:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b11ea7a0888ce4fb9c8a9c06b45bd22743cc61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:86:42:ba:55:b7:a9:f4:8c:58:20:ad:b5:
e3:8c:a0:5c:eb:82:a4:ce:7a:e7:b2:fa:6b:a3:d2:
3f:da:d4:54:60:2f:cc:2d:ab:27:50:ed:f7:50:18:
9d:51:58:1d:74:23:ce:c9:63:00:f8:6c:e7:d6:5d:
13:da:30:ee:54:b1:16:a4:9b:e4:b2:a7:3a:14:db:
a2:11:0d:b9:e6:ec:7d:e6:13:92:8a:f6:6b:36:da:
6c:53:bf:2f:f0:8c:e8:0f:88:4b:a6:f2:2d:0e:cc:
67:cd:a9:f1:9a:6a:69:2e:8d:a2:22:9b:38:91:db:
dc:cd:07:7f:ec:66:cd:63:07:a6:89:36:6f:4f:e3:
d8:e3:a6:af:85:a9:6f:39:ba:87:40:c3:fb:d9:ef:
ed:eb:a0:85:24:b4:e6:af:01:43:35:7b:f1:85:9d:
80:7f:06:b1:01:c0:65:d2:b6:5b:05:01:a3:38:46:
c1:29:0b:e3:d5:e9:96:eb:96:86:33:a1:5b:3a:b0:
f7:38:ce:61:47:d5:fc:9d:ef:89:bf:da:59:16:d2:
b9:1b:50:19:91:10:65:02:dd:3f:c4:dd:f9:11:00:
eb:eb:e7:b2:f2:fc:ba:c6:e5:6a:97:ba:7d:4d:64:
74:14:53:36:86:c5:ea:5d:10:c0:bc:91:97:6d:e5:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:EA:7A:08:88:CE:4F:B9:C8:A9:C0:6B:45:BD:22:74:3C:C6:1F
X509v3 Authority Key Identifier:
keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/mxHqegiIzk-5yKnAa0W9InQ8xh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7b:17:4f:74:b1:e7:64:75:3c:ea:6d:fa:60:40:64:90:fe:
09:06:14:5b:ba:b7:e0:b5:ef:df:6c:9f:ba:47:0e:2e:91:f0:
89:8e:82:fe:af:af:01:db:40:94:2f:dd:bb:a8:fe:3e:ee:9f:
39:37:15:cf:26:69:10:89:f0:45:95:35:eb:72:06:f7:28:30:
fd:b0:d7:43:32:c9:f5:0d:6a:7d:e1:4d:cd:15:ed:35:c6:d0:
a9:b4:ed:2b:91:23:0f:e4:59:0b:f5:35:92:02:e4:ce:0f:3d:
87:d0:9a:45:a4:eb:69:db:7a:be:4d:db:d3:72:dc:05:1c:e9:
a0:54:36:5e:04:ca:77:d7:58:19:c5:73:5a:97:9f:fa:79:96:
d6:ef:4c:bd:46:12:4d:39:42:09:95:9a:51:83:2b:d3:d4:a9:
82:51:f7:37:f0:9e:9d:3e:c1:ca:82:7f:60:a1:43:78:3b:93:
b6:85:11:83:99:1a:fb:ea:83:6b:64:c5:79:05:2d:94:e7:3f:
a5:c0:4d:e9:01:20:c3:dd:9d:74:2f:40:9a:59:3e:3c:12:f8:
40:a3:9d:d6:93:99:89:ca:f8:c7:6b:fd:f3:b0:90:ce:8f:26:
ac:e7:e8:86:5f:69:d6:ba:6d:88:49:ae:02:16:c8:bf:5a:1a:
d9:43:68:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:37 2025 by rpki-client