Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mDcmtSJV4B_Z2EJ9xrQW58oB3Jo.roa
File: mDcmtSJV4B_Z2EJ9xrQW58oB3Jo.roa (raw, json)
Hash identifier: KFQcT6bj5uEo3Ac5Jvsr9hD+UkTHEi+4P5wPv0fQG+8=
Subject key identifier: 98:37:26:B5:22:55:E0:1F:D9:D8:42:7D:C6:B4:16:E7:CA:01:DC:9A
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01860A3B6FFE61859DA6E0974783E8F1F52C
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mDcmtSJV4B_Z2EJ9xrQW58oB3Jo.roa
Signing time: Tue 31 Jan 2023 23:48:32 +0000
ROA not before: Tue 31 Jan 2023 23:48:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 193.38.248.0/24 maxlen: 24
194.110.172.0/23 maxlen: 24
192.144.32.0/24 maxlen: 24
192.144.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:3b:6f:fe:61:85:9d:a6:e0:97:47:83:e8:f1:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 31 23:48:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=983726b52255e01fd9d8427dc6b416e7ca01dc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:73:b4:52:64:39:e8:a2:d7:03:6d:6e:58:
57:94:1d:c1:46:ea:54:57:79:9d:5f:b5:9e:f5:7e:
ac:3d:ad:c1:5a:2f:18:10:74:57:ef:33:28:a1:9e:
7d:35:b8:e5:f3:6c:38:34:11:60:70:0a:b7:c0:f8:
ff:e9:29:a8:71:ad:a2:8f:b3:0c:f3:59:ad:74:6f:
c4:43:b8:ea:3b:94:3c:6c:f5:bd:83:02:6e:fb:fe:
ce:67:df:a2:4b:da:ce:b6:8a:f2:43:28:12:5a:28:
70:da:73:06:8d:6d:c9:21:cb:0e:ed:fd:b2:6c:fd:
de:fe:2d:a1:3a:59:36:0e:3f:46:87:61:fc:f1:87:
17:b4:f4:1a:cf:0e:bc:78:0f:03:d5:bb:29:c6:9e:
77:57:92:b9:ac:a9:54:5e:39:34:64:33:a8:40:b3:
8c:5d:df:63:5e:fc:d0:6a:28:47:7e:fa:c0:cc:9d:
22:e0:d7:ac:0f:b4:e6:2e:8e:eb:11:7c:02:87:c0:
06:70:0f:4a:73:7d:bf:76:bf:b1:7c:60:94:6c:d6:
95:97:c2:9f:30:ed:70:b4:09:36:ee:e3:d1:fb:91:
2b:c2:ee:1c:d9:f6:29:34:27:b9:d1:e3:1d:30:87:
bd:0e:67:8a:86:f6:32:01:87:11:3d:39:98:be:c7:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:37:26:B5:22:55:E0:1F:D9:D8:42:7D:C6:B4:16:E7:CA:01:DC:9A
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mDcmtSJV4B_Z2EJ9xrQW58oB3Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.32.0/24
192.144.34.0/24
193.38.248.0/24
194.110.172.0/23
Signature Algorithm: sha256WithRSAEncryption
40:2a:9f:c2:e0:fe:79:83:43:4c:46:d7:83:12:bc:e0:bd:96:
61:ed:a0:e9:3f:f3:e4:4e:a4:80:5a:00:be:2f:1f:50:8a:26:
02:de:94:e3:fa:4c:f0:5e:4c:0d:9a:9f:55:81:f4:ee:d9:51:
80:d5:40:a3:4f:2f:82:00:a1:52:90:c5:46:49:59:f5:48:f0:
f3:9a:f7:a3:f4:0d:71:9b:22:27:1c:7d:60:04:e1:a5:9e:bc:
d7:6b:9d:1b:b7:e5:c4:8f:82:c2:cf:eb:ba:eb:dc:d6:67:24:
84:b9:d2:3a:a6:24:4a:10:44:c2:88:24:41:8e:bf:c9:c7:4c:
09:f5:c3:19:60:2b:e7:46:ec:9e:16:42:00:95:9d:af:7f:6f:
e1:60:17:84:84:0f:8e:a6:7a:86:fc:d8:bd:71:40:2e:1f:5d:
ee:6e:9f:b1:35:2a:c0:30:b2:f2:d1:41:27:89:90:dd:80:38:
eb:86:e0:9b:47:1b:57:b1:07:83:cb:de:2f:7b:e8:f8:4e:3e:
77:8d:e2:e6:e3:a8:d6:00:7b:19:ef:c3:96:3c:2c:f8:32:90:
65:a1:e2:cf:8d:d2:4a:fc:dc:2b:78:56:9c:94:5f:67:3c:22:
d7:d3:72:c6:48:56:12:e1:a0:75:a5:72:89:6d:90:6d:f7:6c:
db:12:d1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:53 2025 by rpki-client