Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/MIkrqCUN5ASIRvCYM81jXHAnMvY.roa
File: MIkrqCUN5ASIRvCYM81jXHAnMvY.roa (raw, json)
Hash identifier: sBSzyzH7skb1LkKfa67tAj7kgotvixPK14lvDU3jN5w=
Subject key identifier: 30:89:2B:A8:25:0D:E4:04:88:46:F0:98:33:CD:63:5C:70:27:32:F6
Certificate issuer: /CN=637108e0d19992fdc0bfb6e27137304fd543436d
Certificate serial: 019424B2A1C4A5E66EBCDE4AC31DDF1D9D8C
Authority key identifier: 63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/MIkrqCUN5ASIRvCYM81jXHAnMvY.roa
Signing time: Thu 02 Jan 2025 01:47:54 +0000
ROA not before: Thu 02 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28959
IP address blocks: 195.238.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a1:c4:a5:e6:6e:bc:de:4a:c3:1d:df:1d:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637108e0d19992fdc0bfb6e27137304fd543436d
Validity
Not Before: Jan 2 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30892ba8250de4048846f09833cd635c702732f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:d4:5e:1f:6b:86:57:35:70:b2:11:d0:e6:
77:12:6f:5b:79:10:91:05:63:f0:6e:3a:f6:1a:6f:
e3:d1:4a:c4:33:48:3d:62:20:db:f7:09:b6:22:d6:
c9:19:9e:e0:e5:73:29:d2:87:c3:87:39:70:6e:35:
fb:42:6d:8e:72:a6:54:20:6a:8b:1c:db:e0:99:92:
b8:8f:0e:3c:b5:19:54:c8:43:f7:73:86:9c:af:49:
a5:8a:7b:11:74:5d:1d:e8:e3:82:5e:43:3f:3a:2c:
8f:02:e8:c7:88:45:bf:ad:97:8c:87:00:4d:0b:6b:
33:4a:e0:2e:e2:f9:a7:c7:65:1e:8b:47:ae:5c:f0:
5e:73:41:f4:8d:02:29:0e:c6:b4:50:e5:42:e1:32:
ff:db:43:8f:18:f4:c1:1a:0e:24:f7:31:3c:d1:6e:
c7:56:98:e1:35:fc:24:68:c3:99:a4:92:cc:51:89:
c1:c1:be:e7:85:f8:48:69:17:72:4f:9c:39:d5:39:
5d:64:49:d4:7b:42:0b:c0:95:8f:9c:1a:85:51:c1:
00:05:e8:ca:77:ea:ab:2b:a7:65:b8:26:eb:b2:c0:
88:eb:5a:10:fb:2b:60:34:91:67:a7:30:b3:bd:fd:
23:87:29:df:20:4a:c8:96:67:03:8f:97:a6:a5:64:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:89:2B:A8:25:0D:E4:04:88:46:F0:98:33:CD:63:5C:70:27:32:F6
X509v3 Authority Key Identifier:
keyid:63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/MIkrqCUN5ASIRvCYM81jXHAnMvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.253.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ea:74:cb:a4:43:2a:d8:f8:ce:e7:84:05:fc:34:b7:82:f5:
a5:93:87:f2:d0:a1:6b:b6:33:33:b2:18:07:93:c8:21:29:9a:
3e:93:aa:ed:b1:3a:a5:c6:9d:5d:80:c3:17:b1:96:ac:64:4a:
9d:41:d7:fc:c8:e2:c7:96:58:7b:d2:fb:e9:b2:7a:b1:87:25:
9e:7e:fb:4d:75:93:86:17:94:43:64:9b:b9:32:e8:ee:9a:77:
e7:29:45:b8:f4:69:b2:f4:84:d3:b4:33:ad:66:01:52:ec:2e:
8a:75:b1:a3:d3:43:33:29:3b:03:8a:a7:f5:25:81:11:c2:03:
e7:a9:f5:aa:0e:74:b1:e7:bf:0c:e8:f5:d7:7b:27:d1:88:55:
52:3d:d4:9b:88:f2:79:d3:f1:ad:31:a6:67:be:54:15:95:81:
2b:b1:ee:8b:ef:c7:4a:db:cf:f6:f3:02:44:a4:8c:d3:37:1b:
c2:2c:66:29:d3:21:50:83:07:ea:f0:ea:6d:2b:79:20:73:91:
a5:a0:e8:00:db:fa:b7:c6:e4:d1:04:29:3b:fa:39:65:ec:c1:
c6:aa:76:6e:0b:b4:53:38:41:9a:c4:a9:43:2a:24:4c:f8:28:
93:da:cd:a1:4b:ae:36:9a:48:a6:70:91:51:05:01:4f:04:7f:
13:ba:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:44 2025 by rpki-client