Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/MZC0ct0Xstv22HLBnvUeWGBv83E.roa
File: MZC0ct0Xstv22HLBnvUeWGBv83E.roa (raw, json)
Hash identifier: htp3HHZJT8KbtGdttjdWwv8CIeJ5zxP/H9XYr6UcMA8=
Subject key identifier: 31:90:B4:72:DD:17:B2:DB:F6:D8:72:C1:9E:F5:1E:58:60:6F:F3:71
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0194A8701A0D5B41A67ADEC7329BF99E4D9E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/MZC0ct0Xstv22HLBnvUeWGBv83E.roa
Signing time: Mon 27 Jan 2025 15:45:06 +0000
ROA not before: Mon 27 Jan 2025 15:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 195.114.196.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:70:1a:0d:5b:41:a6:7a:de:c7:32:9b:f9:9e:4d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 27 15:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3190b472dd17b2dbf6d872c19ef51e58606ff371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:1b:b7:a1:06:c2:4e:80:da:f6:ce:5f:bd:
0a:54:82:80:ed:4e:a2:9e:3c:2a:40:02:ac:a1:65:
c8:94:7c:46:89:4b:91:97:5a:dc:a4:12:ff:8b:ef:
68:5a:fc:86:8c:70:ca:ed:b6:e9:94:c8:4c:97:19:
fa:f6:7d:1f:e6:d0:2f:47:5c:66:c2:b1:69:a4:0d:
97:2c:e5:c0:84:25:dc:5e:ed:13:64:1b:50:4b:9a:
2c:ed:71:56:b8:00:d7:8d:8b:d7:d5:c4:84:e4:3c:
a9:e3:da:0b:b6:21:c3:07:a6:18:6a:b8:1a:17:c1:
69:b0:f5:c0:9e:f1:1b:2d:8a:09:78:6d:25:d4:00:
13:9a:5f:8d:2f:4a:ea:d0:2a:93:ea:c2:05:d1:b4:
79:63:29:d1:e9:8a:50:c9:f8:7e:79:73:93:88:ef:
10:dd:cd:f1:33:2a:57:ee:61:56:0d:11:9c:77:fc:
3d:52:50:dc:7f:fa:83:68:50:40:3d:aa:1e:c6:21:
90:85:5d:00:4b:5b:ea:75:b9:a2:05:67:b2:e7:88:
c2:b6:61:40:8d:7a:cb:2c:65:98:65:cd:83:63:b7:
28:63:77:02:5d:7f:52:c5:ca:06:8f:d7:2c:b1:05:
75:84:bd:30:f8:17:a5:8d:ee:f5:24:2c:70:3c:2f:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:90:B4:72:DD:17:B2:DB:F6:D8:72:C1:9E:F5:1E:58:60:6F:F3:71
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/MZC0ct0Xstv22HLBnvUeWGBv83E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.196.0/24
195.114.202.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a5:9a:fc:b1:b8:85:c5:10:8a:ab:6c:25:9d:db:b0:56:66:
ba:e1:ca:2e:4d:88:91:23:37:04:94:c4:41:82:92:b3:c4:65:
1c:5b:ad:42:e3:69:1b:d9:48:fa:3a:f7:2e:e6:1f:e6:b9:4f:
9c:26:7c:fc:58:bf:a7:5a:b9:65:19:4e:e9:07:5f:cd:41:b8:
a2:40:1a:8f:86:a5:66:4b:bc:d0:3a:7d:8f:99:91:33:41:31:
f7:15:68:1c:30:1c:42:56:f2:3d:21:12:79:48:f9:f6:84:4c:
c0:09:81:10:4b:f5:e4:ba:f1:ac:92:0f:01:64:de:02:a4:74:
96:53:b5:28:94:c4:df:e8:ff:7c:97:d3:a3:77:e0:9a:03:30:
5e:83:99:fa:38:cc:79:c4:ea:aa:5c:14:98:91:8f:3f:d4:b0:
01:e0:80:fa:d4:2c:d8:2b:9d:bf:ff:b2:dc:d4:a7:43:4a:38:
69:aa:96:d7:65:73:e3:6e:25:35:df:43:85:7a:33:0c:6f:86:
25:a2:69:31:1a:c0:4c:ff:23:c2:3c:f9:a6:f5:56:57:9d:af:
7f:ce:08:7d:91:a1:4c:0b:fc:6a:0f:42:0c:d0:f4:e3:bf:43:
e2:24:70:cd:6c:ce:d1:bb:6d:48:b0:3f:34:b4:f9:ab:8a:65:
1e:a7:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:31 2025 by rpki-client