Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/mREdYlWiX60O7U1aN4qX_3Vb5e0.roa
File: mREdYlWiX60O7U1aN4qX_3Vb5e0.roa (raw, json)
Hash identifier: LuLPC2dbvX3gDdZTw095qiVLI81EjTEnT/lt2SeGu28=
Subject key identifier: 99:11:1D:62:55:A2:5F:AD:0E:ED:4D:5A:37:8A:97:FF:75:5B:E5:ED
Certificate issuer: /CN=0cbed492ef54bd93402f23117e914721b695f312
Certificate serial: 016469
Authority key identifier: 0C:BE:D4:92:EF:54:BD:93:40:2F:23:11:7E:91:47:21:B6:95:F3:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL7Uku9UvZNALyMRfpFHIbaV8xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/mREdYlWiX60O7U1aN4qX_3Vb5e0.roa
Signing time: Sun 17 Apr 2022 12:48:51 +0000
ROA not before: Sun 17 Apr 2022 12:48:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56630
IP address blocks: 194.59.155.0/24 maxlen: 24
194.59.46.0/24 maxlen: 24
194.59.59.0/24 maxlen: 24
194.59.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91241 (0x16469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbed492ef54bd93402f23117e914721b695f312
Validity
Not Before: Apr 17 12:48:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99111d6255a25fad0eed4d5a378a97ff755be5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:23:95:58:44:8e:16:4d:0e:b3:6c:25:52:
ea:57:e3:34:07:60:cb:d2:2c:f0:4c:d5:85:43:4f:
85:ba:aa:58:1e:63:74:47:69:70:6e:23:9f:69:1f:
31:21:9d:52:9e:c1:57:db:14:1f:8f:0f:85:86:89:
39:37:f6:29:66:3f:99:da:d9:2b:88:e3:02:1c:00:
12:da:2c:77:9c:17:0b:78:ce:5c:ae:46:62:cd:48:
15:e1:f8:0d:22:aa:cb:00:6a:f6:de:f5:17:e1:2f:
84:e2:ee:30:d5:51:3e:ae:1f:fe:0c:28:b6:4d:4f:
35:2a:f6:21:f4:9f:43:39:1b:32:99:fc:97:11:c8:
7b:29:8a:d3:4b:68:12:cd:38:65:33:da:f8:1e:41:
6d:25:4d:dd:a8:b0:f4:5c:3c:a6:df:1f:8e:dd:68:
1a:81:fd:4c:30:14:24:dc:95:91:c9:9d:4e:e4:66:
bd:5a:c0:1c:26:9d:96:87:78:fc:cd:75:03:4f:b3:
93:4b:04:cf:96:b4:ff:d5:cf:35:9a:6e:71:de:73:
aa:59:08:f2:14:1b:39:c3:1e:2f:2d:db:9f:a7:ca:
d3:78:53:e1:9b:c5:fe:c9:91:dd:53:5f:67:86:fa:
0f:77:a2:71:db:65:72:bb:37:a9:c4:66:32:77:6a:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:11:1D:62:55:A2:5F:AD:0E:ED:4D:5A:37:8A:97:FF:75:5B:E5:ED
X509v3 Authority Key Identifier:
keyid:0C:BE:D4:92:EF:54:BD:93:40:2F:23:11:7E:91:47:21:B6:95:F3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL7Uku9UvZNALyMRfpFHIbaV8xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/mREdYlWiX60O7U1aN4qX_3Vb5e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e75bad-6519-4e72-8eae-e6dc452f0194/1/DL7Uku9UvZNALyMRfpFHIbaV8xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.46.0/24
194.59.59.0/24
194.59.142.0/24
194.59.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:04:90:2b:a7:27:5f:a7:6a:c6:e4:5f:a0:c7:b8:b2:44:84:
79:82:c5:9e:e7:08:a1:24:09:1a:ce:49:78:19:28:d0:af:79:
ef:c0:7f:53:13:21:63:e2:b1:40:57:39:dc:86:3e:fb:40:d6:
db:6d:2b:43:51:98:d1:6e:81:93:fc:26:d7:3c:5b:f9:95:8c:
ed:fa:93:52:c6:9e:ac:31:eb:2c:8e:ea:40:41:93:0b:64:e4:
c1:a0:b3:2a:2b:05:07:fb:68:7c:78:2b:5a:dd:3e:d2:1c:d7:
8b:78:df:e8:15:be:64:66:6d:55:28:ed:6d:38:b2:8c:70:d5:
65:59:81:c9:11:1d:28:48:c1:29:1f:2e:20:e5:4d:4e:f4:ba:
a5:6d:61:e0:a2:dc:4a:7a:af:a8:65:19:6e:94:48:29:02:6a:
89:81:b1:e7:d3:56:87:ca:78:60:ec:de:3c:77:97:0c:96:4e:
fc:42:5c:0e:49:28:4a:c0:0e:43:ce:eb:23:ed:fc:92:43:a8:
09:e8:bb:5d:46:7b:06:04:d7:0c:52:9d:bf:d6:7a:c9:30:03:
58:cb:b8:aa:8f:d8:7e:8b:9d:bf:d5:e0:cb:e8:21:11:b0:9d:
a6:f9:c0:af:38:c1:c3:d3:4a:ba:2f:9b:1f:9b:9d:6a:9f:06:
98:35:3c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:03:58 2025 by rpki-client