Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m1yIfFEzEieaHMGtDMLCmfIz_M8.roa
File: m1yIfFEzEieaHMGtDMLCmfIz_M8.roa (raw, json)
Hash identifier: AZIjLBuar6vvhcaTXt+GDlHpn/l44ayPHRziQNuvdT0=
Subject key identifier: 9B:5C:88:7C:51:33:12:27:9A:1C:C1:AD:0C:C2:C2:99:F2:33:FC:CF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F35B4742A293BCB591D72F9BE14C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m1yIfFEzEieaHMGtDMLCmfIz_M8.roa
Signing time: Thu 02 Jan 2025 17:51:37 +0000
ROA not before: Thu 02 Jan 2025 17:51:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 193.124.44.0/24 maxlen: 24
195.133.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f3:5b:47:42:a2:93:bc:b5:91:d7:2f:9b:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5c887c513312279a1cc1ad0cc2c299f233fccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:74:77:c5:83:19:cd:13:a8:74:06:c6:e5:
19:1c:93:07:52:0e:7e:21:f6:b3:7c:ba:a4:b6:62:
d7:ea:2d:40:05:e9:b7:84:53:8e:01:31:59:26:3f:
7c:3e:18:b3:0d:88:f7:55:c6:9e:fa:3d:85:71:73:
81:48:a5:7b:d9:29:0e:6b:0d:73:8f:c9:9b:a4:b8:
72:17:12:eb:08:f3:b1:af:b0:ca:a1:d0:12:06:94:
27:3a:08:a8:dc:d8:45:0b:0a:a7:90:4f:aa:dd:7f:
21:13:74:4e:4c:58:44:44:a0:14:6e:46:ab:bd:14:
21:11:33:e5:a7:1f:07:26:6c:d6:be:ac:a3:b7:84:
4f:25:6b:f1:dc:d7:84:ef:4c:c7:aa:3b:a3:ba:c1:
38:24:de:5e:fd:5a:05:f6:94:40:d5:3e:ff:5c:be:
4f:2c:1a:a5:88:95:48:84:a9:9e:65:c3:b7:ad:0b:
6f:13:7a:2f:81:69:5b:14:45:bb:ee:3e:9a:e1:63:
e6:28:a1:bb:f7:8d:a1:e1:9d:45:32:48:15:55:5a:
e3:b0:3d:19:ad:d4:dd:cd:32:5b:f8:aa:d6:fd:47:
61:8a:4b:d1:3d:0e:79:5a:7c:33:bb:eb:1a:22:b9:
14:04:4f:c7:18:7a:f3:f3:43:73:76:f5:97:a1:09:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:88:7C:51:33:12:27:9A:1C:C1:AD:0C:C2:C2:99:F2:33:FC:CF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m1yIfFEzEieaHMGtDMLCmfIz_M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
195.133.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e8:24:c5:05:10:66:45:ad:86:ee:56:f8:b2:3e:ef:25:ca:
bf:d6:78:7f:0f:42:bc:e1:80:fa:5d:79:d3:54:f1:de:ed:50:
9d:4d:b9:43:8a:2c:10:53:7e:45:43:28:f8:a8:8f:94:d7:ed:
c1:80:d6:b9:c5:e3:34:b3:81:d9:d2:c7:3a:de:3c:f2:b6:92:
52:e2:76:0b:f2:ce:40:a1:55:0d:69:f6:78:1f:c4:33:5a:b5:
78:64:96:1e:ff:a3:3a:36:5a:e5:76:32:ed:30:d6:29:fb:a9:
aa:4c:9a:7e:d3:69:ed:f2:ca:a1:54:14:b9:92:c7:a8:53:0e:
00:11:45:21:ca:e4:cb:73:8f:ab:d9:6d:ea:af:aa:97:15:5a:
8f:b2:ce:a4:9d:09:23:69:41:b3:c1:b6:80:5e:bc:41:b0:33:
cb:3a:c0:0b:b1:4b:04:78:e9:ac:c3:da:d9:58:39:c0:cf:2e:
07:1f:23:f0:d9:5f:ae:b8:59:24:db:fa:6c:fb:10:a7:53:97:
20:16:ea:b5:dc:21:f8:91:5d:8d:cf:d6:e6:a1:68:f9:9f:40:
44:8c:c2:22:db:a4:0c:75:fe:ff:ef:3b:87:7b:53:83:b8:86:
e9:e1:46:0c:a2:52:38:ee:f8:d8:11:c5:58:ac:39:87:a5:17:
46:66:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:38 2025 by rpki-client