Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/mvJMjksPXcGIdKTDRF2kDQDiVbI.roa
File: mvJMjksPXcGIdKTDRF2kDQDiVbI.roa (raw, json)
Hash identifier: rIreCMaKFLfgFbfNydrlK+QjlnS/+DC0DLW6O5v2S1w=
Subject key identifier: 9A:F2:4C:8E:4B:0F:5D:C1:88:74:A4:C3:44:5D:A4:0D:00:E2:55:B2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F8A20863E3477BEAA89EAA754CAC2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/mvJMjksPXcGIdKTDRF2kDQDiVbI.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41957
IP address blocks: 213.109.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8a:20:86:3e:34:77:be:aa:89:ea:a7:54:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9af24c8e4b0f5dc18874a4c3445da40d00e255b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:2c:a7:00:95:48:b3:ce:24:d6:a0:2e:99:
bd:23:4f:7f:64:00:5d:97:e9:27:36:77:e1:50:4b:
21:99:61:c0:61:81:7a:d3:04:05:a7:28:d3:89:4a:
1d:6e:f7:99:87:4d:40:37:6d:aa:75:e8:e3:71:46:
1e:bf:4e:cb:6e:9a:90:5a:9e:79:2f:f0:7d:3d:65:
9e:3b:7d:34:f8:0a:34:d3:1f:7f:83:08:2b:ca:84:
de:8f:f9:3f:3f:97:96:9c:1d:ad:bb:07:7b:d8:b9:
1e:e8:1a:94:11:bf:94:97:77:5e:49:67:e7:7f:2e:
2e:71:d6:43:6e:b8:b4:2c:03:d5:34:f8:bc:0e:cf:
b1:2b:c6:6c:e3:1c:71:54:af:49:ce:92:ba:ed:f0:
d6:fb:b3:42:ec:54:cb:99:49:42:98:d3:0a:14:de:
55:94:38:6e:25:f9:5d:2a:b5:cd:cd:66:f8:a8:ab:
b9:c9:0b:fb:98:5c:72:5a:d6:57:3c:72:45:13:51:
d1:bd:f0:4d:fa:44:f2:67:38:fa:ca:0a:5e:22:a7:
6f:cd:c3:ef:99:3b:7d:97:89:18:97:2d:08:5e:83:
35:b8:e1:b3:d8:8f:65:35:1d:a1:9f:8a:fc:35:4e:
78:92:99:8a:9b:73:df:2d:bc:98:2c:a7:e3:50:eb:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:4C:8E:4B:0F:5D:C1:88:74:A4:C3:44:5D:A4:0D:00:E2:55:B2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/mvJMjksPXcGIdKTDRF2kDQDiVbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:38:1c:18:44:c0:c4:46:29:72:7b:1d:0b:41:7d:2e:79:94:
01:a6:50:55:15:65:81:ac:d5:3e:f3:2b:38:6e:71:19:54:06:
66:5b:e9:6d:83:eb:87:ed:ee:ad:71:35:ac:f2:cd:38:4d:ea:
27:64:ba:40:f9:82:ac:e2:da:59:fe:4a:9c:5e:ef:a9:37:5f:
9f:f0:d2:19:8c:a8:9e:d4:4e:23:d8:ca:3e:da:57:82:14:1f:
91:a2:57:b6:23:ab:11:4a:4a:2c:73:97:fe:43:9c:b0:a3:0a:
95:ea:63:28:cf:34:2b:c3:4c:e0:35:03:30:ae:6a:3b:5d:10:
9f:a6:d4:ad:31:05:61:83:43:5e:1f:5e:3e:b0:dc:b5:f6:ad:
bb:8d:37:0b:5e:4f:a5:73:80:0b:27:dd:42:8d:99:ac:59:64:
90:03:2a:13:aa:19:9a:43:4d:77:18:7b:f2:ee:58:40:2e:76:
4a:76:9c:e5:0c:a4:bf:78:b6:e2:e0:01:ef:96:66:e9:60:67:
0a:9a:d9:b0:c0:4b:82:59:d0:e4:cb:93:b3:2b:be:47:27:4d:
fa:96:4e:08:9d:fe:00:71:cf:18:67:59:56:db:8c:61:44:4e:
f9:7c:a2:df:b0:4a:8a:4b:3e:03:81:29:a2:a3:2b:5b:ec:f3:
e7:96:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:31 2025 by rpki-client