Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/mduHn1Ba-swk6VOib9ml9GoEMsc.roa
File: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (raw, json)
Hash identifier: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=
Subject key identifier: 99:DB:87:9F:50:5A:FA:CC:24:E9:53:A2:6F:D9:A5:F4:6A:04:32:C7
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 0194228DAC9C4EA2AA4A6933199C9A3ADCE2
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/mduHn1Ba-swk6VOib9ml9GoEMsc.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202494
IP address blocks: 193.148.40.0/22 maxlen: 24
193.148.40.0/24 maxlen: 24
193.148.41.0/24 maxlen: 24
193.148.42.0/24 maxlen: 24
193.148.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ac:9c:4e:a2:aa:4a:69:33:19:9c:9a:3a:dc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99db879f505afacc24e953a26fd9a5f46a0432c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:94:53:51:79:bf:83:ca:bf:0c:6d:1e:e0:a9:
8e:cc:e2:f8:93:4b:60:11:ee:a6:3a:dd:77:6f:f6:
4d:a1:b0:ad:cf:9c:50:39:e5:80:a5:8c:8c:45:dd:
7e:af:c4:b1:83:97:54:d0:f6:b5:71:0f:8a:d0:16:
76:30:3e:22:54:41:51:df:ae:72:64:a2:65:65:9b:
a7:23:6f:58:9a:9b:8f:c5:e3:44:c1:bb:b9:01:64:
65:30:2f:05:ac:03:a7:cf:45:78:e6:d7:08:9e:0c:
96:e6:a0:be:0c:dd:72:1b:89:63:0f:8b:61:df:b4:
7f:4e:10:3c:0e:82:a0:28:0c:2a:65:03:02:f2:c9:
b9:a5:ab:9e:55:13:7f:7a:5c:90:a0:aa:d9:f1:97:
d8:b8:c7:23:ad:47:f9:42:f5:50:35:c9:0d:82:61:
50:aa:03:a1:3d:2a:14:87:9f:db:09:86:2b:3d:1d:
8d:d0:3b:7e:32:3a:d0:77:af:4d:4f:1f:2a:fe:b2:
65:1a:3e:83:a5:59:81:0c:77:b7:18:3f:35:8d:c8:
46:7a:6b:36:97:ba:ca:40:bf:78:ae:be:75:7e:18:
62:a6:cf:41:87:9a:73:3b:b2:d8:e3:04:f2:81:6f:
ca:d2:62:7a:d9:a5:94:46:51:f1:bf:ad:b9:f0:39:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:87:9F:50:5A:FA:CC:24:E9:53:A2:6F:D9:A5:F4:6A:04:32:C7
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/mduHn1Ba-swk6VOib9ml9GoEMsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:fe:27:42:da:7a:04:59:31:dc:c9:b9:47:79:d5:eb:af:0d:
bf:4d:bc:5f:94:c5:4a:5d:eb:d2:48:90:27:25:10:f2:ea:90:
3d:dd:0d:43:c1:d0:bc:9d:48:b8:b5:00:14:1d:f2:9b:5a:86:
04:0f:2c:eb:e4:31:16:e2:dc:0a:d8:30:50:77:3d:d8:0a:8c:
1d:e2:1a:3a:2c:16:4f:09:2f:c3:a0:5a:be:21:45:16:1e:5c:
01:62:01:93:2d:9f:7c:e2:46:6e:73:fd:c1:7c:d2:d8:c7:03:
0b:68:49:4e:b4:e2:82:c9:19:ae:6f:53:81:9e:3c:43:49:29:
c8:49:01:cb:95:55:61:76:42:2e:9e:49:04:00:4c:2b:d2:37:
b0:a3:73:6f:40:1f:64:29:da:b2:a1:69:d0:02:37:7e:9c:0e:
35:6a:e7:e7:ab:d0:73:11:ed:76:f6:b3:91:e6:bd:1d:ff:16:
89:ac:4f:6d:6c:c6:35:a5:2b:98:d0:24:7c:bf:22:1e:f0:cf:
4e:07:e3:33:1c:19:00:8a:4d:f9:a7:06:98:64:80:1a:e6:40:
de:cd:0d:d6:09:28:93:c1:09:cf:b1:fc:60:65:5d:84:84:30:
07:6d:8d:a1:4b:9f:e3:0e:46:20:61:77:6e:e6:33:a1:da:a7:
f1:de:0f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:20 2025 by rpki-client