Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mpKpYmY8DEGhZcV6ltJDz93teq8.roa
File: mpKpYmY8DEGhZcV6ltJDz93teq8.roa (raw, json)
Hash identifier: 7UANVEML/0vRWe4hxTYzTFGxeQ0U+2SuSQ0y29OV6fo=
Subject key identifier: 9A:92:A9:62:66:3C:0C:41:A1:65:C5:7A:96:D2:43:CF:DD:ED:7A:AF
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 01942826332A14711F670F3A9381CA252FBB
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mpKpYmY8DEGhZcV6ltJDz93teq8.roa
Signing time: Thu 02 Jan 2025 17:52:59 +0000
ROA not before: Thu 02 Jan 2025 17:52:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49203
IP address blocks: 91.212.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:33:2a:14:71:1f:67:0f:3a:93:81:ca:25:2f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 2 17:52:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a92a962663c0c41a165c57a96d243cfdded7aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:64:e1:d4:3e:36:08:80:b9:04:91:25:0f:
73:e3:6e:8b:9b:33:3f:9e:84:f4:2d:e9:cb:8a:12:
0c:91:17:cd:72:21:f4:20:db:17:84:ee:16:ab:15:
42:68:b7:06:96:64:84:6a:b1:f6:91:b4:79:52:3c:
6c:54:29:46:87:28:2a:4f:57:a9:4c:6c:5b:f0:c2:
4b:f4:c5:33:65:e0:ea:ff:85:d8:c3:b2:8f:92:e1:
af:e4:ce:a3:29:64:d5:c8:37:ec:99:ab:90:89:9d:
7e:0c:75:d7:e7:94:57:08:33:e0:66:4d:62:47:a9:
ec:3f:d4:0c:35:8b:ad:aa:e8:f1:63:fc:d7:75:b8:
a6:2f:45:c9:8d:9f:44:46:bd:a6:a0:ea:63:5d:ec:
94:54:4b:85:60:bd:c2:db:90:1d:2b:52:a4:70:39:
b1:db:d4:5c:e1:9a:b6:bd:ab:fd:c0:0f:f7:e0:3e:
64:9e:e8:d5:26:72:bd:85:a9:2b:bc:b0:ae:e2:73:
ae:95:c0:08:62:4f:d2:80:57:77:3b:1e:ad:bc:53:
f9:b0:5e:73:2d:19:b3:37:35:a8:4e:6a:f8:d8:95:
1f:fa:db:16:9c:30:71:74:91:65:ad:13:f2:f3:fd:
d9:3f:49:6a:e2:04:03:c4:ea:78:b6:1e:26:b7:2d:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:92:A9:62:66:3C:0C:41:A1:65:C5:7A:96:D2:43:CF:DD:ED:7A:AF
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/mpKpYmY8DEGhZcV6ltJDz93teq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:30:79:7a:5a:52:0b:a8:2c:cf:f5:cd:61:3e:c0:7a:3e:f3:
72:ba:ea:dc:b7:7a:38:5a:32:96:af:b9:50:12:29:b5:93:80:
2a:45:07:6c:93:38:dc:0a:25:a2:1c:0a:a2:08:8e:f7:7d:7e:
1f:cf:a4:20:43:db:d1:53:1d:9c:8f:a5:fa:1f:7d:ed:d9:2a:
91:11:d5:d8:aa:cd:13:a5:28:d6:ea:5f:11:7f:85:4b:16:29:
32:63:99:7c:41:d0:b2:b6:8a:65:f4:1e:6b:91:ef:70:f7:20:
ed:b7:b6:8d:76:6a:96:c0:e9:7c:c6:4f:80:79:fa:57:9b:1f:
ae:e9:96:92:32:4e:c4:78:bc:bc:5f:34:17:15:4d:08:fe:f2:
04:17:a6:01:01:fe:30:16:13:18:5b:ff:40:20:d1:1b:a2:40:
ba:1e:16:14:5c:ed:e5:d6:fd:f6:0f:c9:86:7d:92:f6:3d:6c:
e9:15:1c:8f:93:eb:ae:f7:e4:16:97:50:a6:d8:a6:cc:dd:5f:
69:b4:b2:c1:4c:22:c1:eb:fb:9d:f2:64:9b:5b:17:d7:d3:df:
15:a0:7a:7c:63:30:8b:44:15:fe:ae:ed:85:1c:34:fd:4e:e2:
38:5c:d0:c3:15:53:d4:28:63:d2:f2:09:0c:8a:d2:03:03:63:
26:b4:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:35:50 2025 by rpki-client