Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/mP8GRv_PEh-gTNQakjVb0KSi0yk.roa
File: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (raw, json)
Hash identifier: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=
Subject key identifier: 98:FF:06:46:FF:CF:12:1F:A0:4C:D4:1A:92:35:5B:D0:A4:A2:D3:29
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01942444990E180DA307D2C808D27962FA14
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/mP8GRv_PEh-gTNQakjVb0KSi0yk.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55002
IP address blocks: 193.138.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:99:0e:18:0d:a3:07:d2:c8:08:d2:79:62:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ff0646ffcf121fa04cd41a92355bd0a4a2d329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:1e:17:64:03:82:db:3e:da:60:6a:73:f8:
c3:ff:88:7c:50:3d:0d:8b:65:8c:cf:22:42:58:5a:
f9:6f:96:a0:65:ef:ef:ab:94:f9:e6:2c:9c:9b:53:
7a:21:42:85:ce:e6:02:84:ec:58:e8:18:70:b6:e3:
a1:e9:c0:39:64:60:27:68:7b:2e:d0:3e:18:af:eb:
cb:20:59:a8:ff:b1:4f:2b:fc:ae:5d:ee:ee:32:d4:
1f:1e:5d:db:83:e6:36:52:ba:d7:eb:93:d9:9e:ba:
cb:46:84:29:75:e9:63:eb:f6:96:cc:d9:82:6c:33:
ac:b8:2c:41:0a:8a:b1:bf:7a:4d:b9:e1:b8:e0:98:
c3:2e:bf:fa:b5:64:5f:37:45:81:38:bf:bb:f1:5e:
ca:ee:c8:f1:65:02:24:2a:6b:04:bb:2a:33:d9:3c:
8d:a7:49:b9:20:b0:33:58:35:f1:f4:42:25:bd:e2:
c8:ea:cb:de:c7:29:6a:b3:09:da:62:f8:80:52:e1:
e2:ae:ba:0f:46:c8:1b:fe:3e:2f:b7:b5:78:81:df:
f0:de:f6:39:83:90:8e:7e:c6:3e:57:1d:54:ee:12:
f8:fe:b8:41:ed:27:31:71:e2:00:9b:9a:4a:5b:0e:
85:81:bb:9a:a9:6e:11:8b:97:81:2f:e2:f5:e1:86:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FF:06:46:FF:CF:12:1F:A0:4C:D4:1A:92:35:5B:D0:A4:A2:D3:29
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/mP8GRv_PEh-gTNQakjVb0KSi0yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.103.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bc:a5:70:e1:c6:66:0d:73:66:bf:f2:73:7a:b1:09:b8:11:
5c:1d:41:31:a4:76:f6:05:8d:cb:05:89:a8:eb:9a:ad:6b:88:
38:06:90:b3:1b:67:f1:1d:1e:d5:78:f6:96:d4:a7:e6:9c:53:
7a:d9:1a:60:52:b0:62:c7:7b:f0:20:1d:52:c3:62:c5:44:b9:
2f:4e:2f:f0:54:5a:31:d7:17:5b:b1:ef:19:6f:35:54:e6:a8:
bb:28:1d:cb:c6:cb:57:9e:5c:c6:50:48:63:f0:c9:76:f3:16:
e8:c6:e5:68:02:48:a8:f1:89:ae:be:02:b1:43:b2:e8:35:4d:
14:b0:86:b8:9b:7b:09:af:49:03:a3:f8:8d:3e:0c:e0:cd:9f:
69:7f:4f:e2:1a:50:e0:50:de:a9:90:5b:6f:77:4d:d3:68:a6:
91:7e:e2:25:c5:d6:86:d5:2a:f0:ac:ae:16:1b:d3:c5:71:05:
ca:7c:0e:35:fb:d2:96:35:ab:f8:08:16:e8:d3:28:4c:48:ca:
32:ad:8c:30:3b:13:1f:c3:0a:26:f1:ff:f7:b7:8c:57:65:17:
dd:74:23:63:b0:cb:fb:c5:66:c0:25:18:75:6e:5f:a5:1e:db:
cc:8d:41:97:d9:c7:6a:67:57:2c:51:14:c7:6c:78:89:27:06:
76:67:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:50 2025 by rpki-client