Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/MWQs7smLM41JWlrIEwmzhqUHVf8.roa
File: MWQs7smLM41JWlrIEwmzhqUHVf8.roa (raw, json)
Hash identifier: OX5LMdPBdAQfYd3SzSOK+sDVxi0rfkwg65wGbyodCfs=
Subject key identifier: 31:64:2C:EE:C9:8B:33:8D:49:5A:5A:C8:13:09:B3:86:A5:07:55:FF
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 01946520202D2A11D073B536E876260497FF
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/MWQs7smLM41JWlrIEwmzhqUHVf8.roa
Signing time: Tue 14 Jan 2025 14:03:11 +0000
ROA not before: Tue 14 Jan 2025 14:03:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 194.33.109.0/24 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:20:20:2d:2a:11:d0:73:b5:36:e8:76:26:04:97:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Jan 14 14:03:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31642ceec98b338d495a5ac81309b386a50755ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:46:f1:98:c8:c8:19:65:f3:40:ef:d8:6e:
d2:da:b4:7b:8d:7b:d0:b4:38:c8:23:a8:c3:13:71:
2f:a8:98:7b:39:02:49:49:1c:84:35:79:e5:c2:2f:
50:d0:c8:26:f8:51:74:68:4c:2c:01:0f:78:59:d2:
eb:47:86:d7:ed:d2:1e:55:d2:3d:9f:1f:16:76:62:
03:66:2b:08:b7:5f:2d:a4:09:30:c0:d6:d9:6b:3a:
05:69:27:92:1a:07:94:02:d6:21:e7:78:6a:60:41:
e3:64:79:99:35:1a:9c:52:ba:5f:12:b8:a7:18:ce:
d8:da:57:e3:9d:0d:e3:48:8e:36:07:ef:fe:aa:ce:
4f:0b:ac:d2:a8:72:58:26:e1:b1:f4:f8:c2:32:b6:
0a:a0:88:54:cc:80:e7:98:da:fc:6c:2e:42:87:4b:
0a:3c:29:0b:cb:4f:5c:ff:f6:21:15:4e:7b:93:38:
18:78:99:12:21:db:e5:8e:99:fc:3c:02:b5:eb:59:
fe:2d:99:69:46:7c:a3:f2:2f:4a:c0:eb:c1:77:1d:
8a:4e:bf:06:d9:73:4b:2c:bc:14:7a:05:dd:da:8b:
d2:49:a5:a4:c4:67:8d:c1:46:42:b7:ba:54:7f:51:
fa:9f:ef:2b:77:e7:2a:0e:59:0c:4e:4a:a7:76:07:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:64:2C:EE:C9:8B:33:8D:49:5A:5A:C8:13:09:B3:86:A5:07:55:FF
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/MWQs7smLM41JWlrIEwmzhqUHVf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:11:5f:02:32:07:0d:08:00:b2:14:c9:ec:97:66:02:92:5d:
94:f7:b1:f0:2f:ae:c6:dd:5e:46:12:3c:df:98:8f:5e:3a:91:
9c:6b:87:01:25:e0:0f:3a:39:4c:2e:78:43:46:f8:69:9a:15:
19:ec:d0:17:6e:dd:c1:8f:b6:d8:b9:84:97:ce:6f:05:17:9d:
2f:c5:04:3b:66:5e:a1:1b:0b:21:2a:00:d9:b6:52:0a:00:3b:
2f:ed:8c:af:72:f3:74:c0:33:92:11:1b:a8:40:e6:ac:3d:f3:
e5:16:7c:a1:21:94:01:e7:ca:02:3a:42:18:b8:15:1d:e7:c9:
01:01:44:62:43:b6:b0:0d:bd:c0:86:91:35:3c:8d:f5:aa:12:
d5:59:59:1e:00:58:7d:b4:89:b5:fa:71:27:ae:41:95:5a:98:
c2:cf:1b:b8:1f:2c:99:62:6b:20:9f:b9:f3:f4:e8:6d:58:56:
11:16:da:8d:d4:f0:16:06:3b:30:63:8f:62:ee:71:97:82:6e:
67:ee:cf:9c:ff:dc:52:43:ea:f5:1b:a2:f5:3a:4d:6f:54:89:
c9:00:bd:a5:49:73:22:bf:0b:27:3c:d6:37:d2:7f:f4:d9:f3:
97:de:b3:7b:16:4b:a6:93:e0:b3:8c:a6:7b:c7:0c:2d:fe:12:
cf:b2:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:40 2025 by rpki-client