Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MWhH2UZ0PyS2Ap9SGts4QVTHO0c.roa
File: MWhH2UZ0PyS2Ap9SGts4QVTHO0c.roa (raw, json)
Hash identifier: LMnaHSNZj9hWyIOaFwfzFa8u0eqE+kCUuJsY2LBKF0A=
Subject key identifier: 31:68:47:D9:46:74:3F:24:B6:02:9F:52:1A:DB:38:41:54:C7:3B:47
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194075EC66CB5C7B298C2884DD4F09B0B7E
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MWhH2UZ0PyS2Ap9SGts4QVTHO0c.roa
Signing time: Fri 27 Dec 2024 09:07:18 +0000
ROA not before: Fri 27 Dec 2024 09:07:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 80.93.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:5e:c6:6c:b5:c7:b2:98:c2:88:4d:d4:f0:9b:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Dec 27 09:07:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=316847d946743f24b6029f521adb384154c73b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:3b:8a:e1:bd:7c:76:f9:a8:ee:ca:f4:b1:
29:0e:69:16:bd:a2:b4:10:e8:f8:51:7a:7c:e0:a4:
0f:83:60:db:ee:a6:d3:4f:08:ef:00:a9:6b:d7:77:
73:c5:9f:bd:26:a2:73:07:0e:72:4c:a7:f1:1d:ad:
2b:f7:5d:4e:a4:85:6c:73:c3:90:e4:ce:44:d5:ac:
33:dc:b5:9d:3b:e2:5e:63:de:b3:84:90:e7:1f:86:
9b:1e:38:f2:2e:aa:55:40:bd:71:39:2b:7b:9b:ce:
b3:23:ea:a5:f0:e2:42:86:28:9d:c3:ac:30:8e:e8:
e6:63:d7:41:71:a1:44:24:a7:2a:9b:ab:cd:bd:e8:
ef:e7:cb:4d:ff:28:e9:ba:66:6c:04:01:3c:ef:95:
86:69:a2:e5:cc:b6:63:e2:29:01:d4:81:6c:d5:4c:
dd:da:a1:be:a4:23:1e:f1:f4:0b:ec:59:17:48:ef:
85:17:ac:56:de:68:f3:16:b1:89:cc:04:4c:eb:c1:
45:ca:cc:50:f7:98:88:4f:7a:24:10:d5:4e:eb:56:
fc:4f:2e:76:ac:fb:b3:58:43:b9:96:cc:c7:42:48:
ef:a1:c7:77:1d:7c:f5:83:e3:a7:5e:b8:7a:e1:db:
fe:2f:01:66:c0:09:02:b5:7a:6d:7e:78:9f:29:61:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:47:D9:46:74:3F:24:B6:02:9F:52:1A:DB:38:41:54:C7:3B:47
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/MWhH2UZ0PyS2Ap9SGts4QVTHO0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.202.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a7:97:65:60:d7:31:ab:ca:e0:48:78:d1:d6:48:e7:69:a9:
62:cd:d7:da:5d:dd:c7:6d:14:51:6c:db:93:32:d7:5d:32:45:
c4:66:5e:2b:52:bb:01:6a:36:84:2c:3b:68:ee:b4:20:90:11:
7b:d4:3c:fa:6f:0b:e0:0c:a9:6e:0c:82:5a:a0:73:99:1e:f5:
38:ba:86:e0:b4:23:18:b6:58:eb:e4:8a:42:07:9d:5e:80:4c:
d7:6a:0a:fc:cf:74:6e:7b:a3:4c:0b:df:de:be:a1:1a:25:9f:
a2:f0:9a:e5:f4:2e:67:3e:64:c9:cf:43:d6:3b:b3:94:c1:b5:
b8:8c:85:4c:9d:1f:3d:43:8b:5a:47:5e:b5:63:6f:47:2b:6c:
77:c7:9f:20:99:c7:8b:57:2d:c6:e5:62:11:b9:0f:a3:a1:e7:
c4:0a:3e:93:86:ee:78:58:38:fb:a6:db:28:27:dc:28:72:e7:
67:e5:2a:0f:9e:0b:4b:cc:45:f2:0c:d2:6f:44:12:e2:12:4d:
56:31:df:25:c7:3c:34:a6:62:40:4e:85:97:0f:06:fa:6f:26:
8c:44:52:e7:8d:82:62:8d:7f:b1:b1:93:db:8b:3b:1f:87:1b:
dd:e0:db:73:84:ad:78:bb:6c:27:f8:01:f4:26:9a:6e:b9:cf:
b9:f9:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:21 2025 by rpki-client