Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mdcyhb3iUvvb4dXQGzE1QxY8m5E.roa
File: mdcyhb3iUvvb4dXQGzE1QxY8m5E.roa (raw, json)
Hash identifier: sXnmFK2oHDT/lEgnNv3DVwEI0FPLF+JfeZtQybNB3cQ=
Subject key identifier: 99:D7:32:85:BD:E2:52:FB:DB:E1:D5:D0:1B:31:35:43:16:3C:9B:91
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018C34969C33E7D27EE9F45CBF3C3AF90C38
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mdcyhb3iUvvb4dXQGzE1QxY8m5E.roa
Signing time: Mon 04 Dec 2023 11:28:54 +0000
ROA not before: Mon 04 Dec 2023 11:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 194.110.173.0/24 maxlen: 24
2a09:ff00:102::/48 maxlen: 48
2a09:ff00:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:96:9c:33:e7:d2:7e:e9:f4:5c:bf:3c:3a:f9:0c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Dec 4 11:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99d73285bde252fbdbe1d5d01b313543163c9b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:ff:60:52:84:11:3c:33:18:74:d5:35:f3:
bc:13:9c:4e:f5:b1:94:9b:6e:80:df:99:f9:c8:65:
dd:5e:49:c7:bf:53:43:0f:fd:75:99:1a:b4:0b:25:
2d:7e:0b:3b:9a:4d:62:d2:88:19:9f:5d:73:d8:11:
79:aa:b4:1c:de:e1:79:63:7c:c0:a6:20:69:c9:23:
4f:36:71:2c:dd:13:d1:20:53:3f:1a:70:62:c0:37:
f8:c4:1d:77:fa:80:b6:a7:e1:28:d3:21:e7:65:df:
78:22:92:70:a2:e0:dc:a1:3c:0c:05:1f:a0:45:57:
31:f4:e8:58:b4:00:b0:3d:5f:8a:12:71:4f:20:f2:
17:1b:20:2a:04:23:6c:4c:75:70:43:8d:8b:71:17:
41:42:28:c2:61:86:b5:d4:97:3d:31:1d:c1:17:fc:
35:51:8b:45:31:8c:f0:34:73:5d:0f:d3:05:08:3c:
db:32:6f:1f:7d:2e:31:4d:49:be:49:26:59:37:85:
a8:30:7d:5b:03:b3:69:5d:f1:46:3c:1b:8c:97:d7:
13:1a:25:21:e7:1f:77:4c:2c:38:0c:c3:9f:10:e3:
81:71:c0:d6:4e:e8:b3:ae:c4:f7:52:6a:6a:d4:22:
1b:19:d6:19:88:6a:7c:cb:0d:d0:df:04:6d:c2:ee:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:32:85:BD:E2:52:FB:DB:E1:D5:D0:1B:31:35:43:16:3C:9B:91
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/mdcyhb3iUvvb4dXQGzE1QxY8m5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.173.0/24
IPv6:
2a09:ff00:101::-2a09:ff00:102:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:b4:23:03:0d:b8:90:ab:e6:eb:24:71:f9:23:6f:8d:3a:b7:
67:86:c9:9b:05:5b:e5:41:d7:c4:54:31:fe:bf:3d:c8:ec:b0:
7a:b1:63:cc:a8:80:4e:7d:fd:09:c6:d9:de:da:98:b3:2f:12:
16:b9:f7:ba:90:35:a4:f9:a2:a2:7f:24:f2:0e:33:4f:65:cd:
84:1e:21:11:28:a9:a9:04:c8:d1:6d:6e:a8:15:ad:bd:a2:15:
cd:12:2c:43:f9:0a:48:7f:f1:e1:21:d2:40:3e:e9:fe:f1:13:
1a:57:d1:c3:5a:b8:ba:81:fb:f4:5e:12:f7:e1:a5:99:82:3c:
d3:af:59:58:53:ba:13:00:89:43:b8:c7:c6:7a:d3:28:ce:dd:
a7:b0:24:d9:de:d0:83:30:59:a0:51:bd:37:ce:d6:97:6f:4d:
be:ff:ea:65:e3:82:b5:3f:6f:92:51:2a:ef:38:14:67:fa:a6:
7b:14:3f:c6:69:26:10:a8:54:d4:41:8f:ac:54:1f:f4:b7:9a:
8f:a8:ab:a7:cb:e8:7d:ab:27:db:79:e1:21:59:45:15:5d:db:
ef:cd:66:64:ef:a6:d2:cc:84:94:25:f4:9c:36:a7:3a:ab:da:
34:cc:b7:3d:5a:2a:f6:83:5b:5f:18:4f:98:64:93:de:b3:d1:
9c:bf:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:16 2025 by rpki-client