Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa
File: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (raw, json)
Hash identifier: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=
Subject key identifier: 33:6A:21:FC:A9:ED:11:BC:D2:77:9C:7D:34:C6:52:AB:F0:8B:66:74
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 019473BBF9DC744C55602C82F5EFB0D13D98
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa
Signing time: Fri 17 Jan 2025 10:08:06 +0000
ROA not before: Fri 17 Jan 2025 10:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 194.104.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:bb:f9:dc:74:4c:55:60:2c:82:f5:ef:b0:d1:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Jan 17 10:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336a21fca9ed11bcd2779c7d34c652abf08b6674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:0e:63:04:e9:c7:b9:33:5d:14:5a:84:be:
69:d6:8a:16:55:4f:73:49:6d:9b:1f:b4:bb:6d:e9:
42:1a:ac:42:6a:d6:db:f8:62:4b:c6:0c:57:35:ba:
71:3d:96:76:58:e8:af:e0:54:88:04:41:fc:76:5d:
ea:83:f0:26:d0:ec:dc:9d:8a:3a:03:d1:96:9f:b5:
37:a6:e3:d6:27:a2:eb:b2:7f:68:23:ac:bb:50:ee:
24:44:49:23:27:d5:65:07:1b:be:64:88:c2:7e:66:
e8:f4:c5:4f:2a:51:77:31:e2:e9:db:2d:1a:bb:56:
45:e0:4d:5f:42:25:07:d5:07:ca:a0:df:3d:e1:dc:
7e:f0:41:9c:95:c6:57:c9:61:3b:de:4a:e9:90:6f:
f0:4c:84:44:4e:26:b9:8b:50:8e:e4:e1:0a:25:67:
94:1f:7f:65:31:69:e3:2a:c0:5e:fd:3d:c8:b6:4b:
fc:58:5f:39:a6:14:84:87:ed:24:8d:33:9d:d6:07:
63:3f:32:5a:aa:0f:66:ba:31:d4:3b:2a:ea:cd:f8:
91:95:5b:7f:35:7c:3f:81:39:25:54:46:2d:51:78:
41:90:c0:e9:35:aa:dc:cd:99:2b:e5:6b:e5:ec:c8:
35:fa:3b:04:53:ac:b9:4c:30:cb:15:31:26:38:67:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6A:21:FC:A9:ED:11:BC:D2:77:9C:7D:34:C6:52:AB:F0:8B:66:74
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.240.0/20
Signature Algorithm: sha256WithRSAEncryption
25:3e:3e:6d:97:77:b3:93:31:91:cf:ed:61:53:dd:42:88:6c:
fb:98:79:ba:86:31:38:3f:44:7d:f4:4f:90:f6:f0:5f:dd:7d:
53:da:54:77:92:63:0e:59:71:e3:6b:0c:fa:9e:3e:f3:b4:59:
99:c4:9a:2e:67:7f:7d:4a:2f:7e:9a:88:f7:e8:44:3c:8e:6f:
5b:1a:30:c5:b4:5e:b3:81:aa:a9:7e:a9:13:fb:24:48:44:07:
fa:a1:97:8f:d1:27:b7:72:d0:72:87:0c:80:00:ef:8b:c4:ae:
f9:67:64:69:a1:3d:f0:1d:89:f7:c1:ea:2e:c9:86:73:68:fd:
f1:89:47:6d:78:61:61:0b:43:44:3a:60:a3:10:18:d2:03:9a:
e5:1f:fc:6d:92:7f:d3:48:76:55:80:4d:1b:c1:57:2c:2f:87:
f6:68:c0:90:7e:85:f3:c3:99:4d:27:14:b6:5c:ec:f2:e6:24:
36:9b:ea:a9:99:c2:ff:4d:fe:c8:26:9e:3d:4a:f7:95:2a:49:
aa:37:04:65:b4:77:db:c7:82:e0:c2:d2:51:fe:c3:9c:ed:1b:
5e:7b:26:55:d8:f9:16:85:3f:94:42:bf:d3:d1:a2:80:34:1a:
66:00:6c:5e:17:93:61:18:00:63:4e:44:52:03:2e:50:40:4f:
f1:5d:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:31 2025 by rpki-client