Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MrAsA4ECEvI2XM3Arot8vjU2C4Q.roa
File: MrAsA4ECEvI2XM3Arot8vjU2C4Q.roa (raw, json)
Hash identifier: PUxjMRwO63qAjq2SHriyLmmiWGmR1CZyQpisJ0VJNKo=
Subject key identifier: 32:B0:2C:03:81:02:12:F2:36:5C:CD:C0:AE:8B:7C:BE:35:36:0B:84
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0194C875BBA31C292E054FB7702DCF753890
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MrAsA4ECEvI2XM3Arot8vjU2C4Q.roa
Signing time: Sun 02 Feb 2025 20:59:06 +0000
ROA not before: Sun 02 Feb 2025 20:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 171.33.240.0/24 maxlen: 24
195.8.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c8:75:bb:a3:1c:29:2e:05:4f:b7:70:2d:cf:75:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Feb 2 20:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32b02c03810212f2365ccdc0ae8b7cbe35360b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:00:01:e0:7a:08:ff:a4:5a:5e:bd:1d:e0:b4:
c6:65:ba:9b:e6:9c:a4:35:67:46:61:d5:7d:e7:fa:
ac:34:26:df:04:58:1a:21:43:6e:ec:3d:1e:17:38:
71:a2:99:6e:6f:35:d4:7d:12:ba:39:86:96:3f:c8:
3a:9b:86:9c:b7:de:f1:33:f2:ab:f9:69:d5:c5:7f:
ae:46:5d:42:5a:bd:bd:60:ab:fd:05:37:a3:d2:52:
36:1a:e7:b3:77:35:c8:63:cf:12:71:57:0c:e3:5c:
18:4e:ae:2a:cd:b6:68:b0:39:98:06:88:ab:6f:e2:
1b:f6:99:81:71:2f:50:e4:ba:81:d3:49:21:b0:2f:
68:83:52:2c:e6:97:3e:de:13:69:91:97:b6:bc:6e:
41:5a:3b:3d:04:23:c4:45:b6:b9:8c:49:2f:0f:c1:
53:e5:89:f8:18:75:60:13:1a:c0:29:37:3f:a9:26:
73:5d:bc:44:e3:ab:5b:c9:a2:6d:10:3f:54:b2:3a:
6a:60:a4:31:9f:09:f2:96:f8:0a:a5:54:4e:07:e5:
95:b8:89:52:fa:2d:01:cc:6e:bf:e5:5e:f8:3d:ed:
d4:94:c9:eb:60:c2:c7:6a:89:f2:8b:d6:14:70:a9:
14:1b:64:43:ba:ce:4c:f6:3c:8e:35:80:3a:64:5f:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:2C:03:81:02:12:F2:36:5C:CD:C0:AE:8B:7C:BE:35:36:0B:84
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/MrAsA4ECEvI2XM3Arot8vjU2C4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
97:80:89:0e:c7:b9:06:90:25:3e:f0:61:9d:84:ec:55:ba:5c:
ea:e3:49:ab:26:c6:7c:50:17:10:33:d2:69:de:84:2f:f6:9e:
b1:df:27:cf:52:95:ee:32:b5:3e:e8:14:e6:e6:20:6c:fd:39:
36:d7:a0:9f:b2:44:97:eb:55:42:c7:dc:ad:4d:fd:60:ec:db:
0a:ed:d8:ba:70:49:69:ae:83:6f:08:78:a7:a8:99:19:ca:e1:
72:49:76:96:3b:88:f0:29:f6:45:1a:b4:dd:74:a7:87:e6:da:
83:89:7e:c2:3d:62:c7:03:ac:43:a8:7a:d7:11:69:e5:7a:81:
cd:23:cd:ea:7a:76:ab:e7:78:3e:3f:c9:e8:31:7d:c9:59:b9:
65:91:7b:c5:61:ed:7e:77:1f:ae:94:37:0e:a2:ea:14:e9:92:
3f:97:16:6c:48:73:aa:4a:b6:c2:54:41:83:44:0b:6e:f1:d4:
61:bb:d2:c8:6d:2f:7b:c7:ad:9d:a7:35:9e:4d:dc:cb:02:6d:
e0:34:ff:e4:e2:f0:aa:25:4b:b4:42:93:56:6e:0b:fe:89:f3:
2b:10:bb:1c:1d:81:8d:ae:65:a0:b7:84:24:bc:60:46:90:57:
07:83:15:21:30:4d:f9:ba:ce:0e:5e:c7:bd:ee:d6:6b:ba:5e:
8a:ce:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:30:02 2025 by rpki-client