Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/MT573pEq_RyXUUcfGIbwT1pD_Hs.roa
File: MT573pEq_RyXUUcfGIbwT1pD_Hs.roa (raw, json)
Hash identifier: NuUZy/HbToN9OY8Rgu/IY49OOt82oEzND1AOE6oFvMc=
Subject key identifier: 31:3E:7B:DE:91:2A:FD:1C:97:51:47:1F:18:86:F0:4F:5A:43:FC:7B
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019421B1B5BF7C634812FF160C78F93A8EE6
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/MT573pEq_RyXUUcfGIbwT1pD_Hs.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205384
IP address blocks: 188.241.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b5:bf:7c:63:48:12:ff:16:0c:78:f9:3a:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313e7bde912afd1c9751471f1886f04f5a43fc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:86:23:61:b7:5b:65:72:74:4c:ac:b2:78:
02:9a:ac:65:92:25:8f:ae:ca:f0:cd:5c:71:87:da:
0e:40:74:02:0a:a5:e2:0e:9c:53:07:2a:1b:62:ff:
a3:36:4b:48:a0:6b:95:07:b9:49:27:59:58:6f:0b:
a1:01:0b:54:a9:c9:dd:5d:78:c4:24:ef:99:9a:cf:
f4:31:09:96:fb:25:8b:09:f2:89:cc:23:c2:32:fa:
11:92:17:6c:9f:10:17:30:ec:c1:27:45:0e:bc:6f:
be:5c:25:60:2c:c0:c0:68:dc:c1:49:53:91:65:e5:
11:b4:58:36:ae:54:e0:a1:de:2d:51:f9:dd:1d:bc:
ef:5a:77:81:c5:62:06:91:0d:8b:28:35:e4:c8:e7:
da:ca:a2:1f:19:f8:ba:a7:60:cf:a3:7d:06:31:84:
91:fe:38:38:c6:1f:32:6d:6b:7f:48:28:70:9c:dc:
ee:ef:4e:2e:97:17:56:e7:47:93:11:df:b0:0b:27:
9e:d6:67:8e:37:37:73:59:70:3a:66:d8:22:27:36:
b2:d3:dd:26:bb:5e:7a:58:f5:81:34:51:bb:78:76:
3e:c6:01:cb:fb:a2:68:30:91:33:91:30:c8:7f:04:
30:a3:3c:71:9b:2c:36:68:66:0d:71:52:9c:2f:f0:
58:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:7B:DE:91:2A:FD:1C:97:51:47:1F:18:86:F0:4F:5A:43:FC:7B
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/MT573pEq_RyXUUcfGIbwT1pD_Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.24.0/24
Signature Algorithm: sha256WithRSAEncryption
75:64:1e:2d:36:62:a3:f2:4b:9f:36:df:dd:db:ad:8b:a4:7a:
78:91:8f:1f:94:5c:23:39:42:81:3c:51:0b:37:75:5b:78:28:
a1:9e:4e:d6:07:b8:6c:61:b2:2f:5f:ef:ed:d5:08:c6:62:06:
f6:68:0c:92:4c:34:70:e1:57:f1:96:40:55:a6:52:9d:d8:2f:
af:cb:c1:6d:b4:5c:1b:22:8c:7d:c9:53:b8:a6:3c:cf:5d:23:
ae:18:75:81:76:5b:c4:f3:4c:d3:6b:95:3a:bd:25:35:e0:43:
8a:c7:56:b9:49:ca:a2:fa:af:89:83:7e:16:a5:e5:dc:ed:8c:
45:be:7e:19:f2:66:67:32:55:06:75:d7:1d:bd:1e:82:d4:1c:
eb:84:08:6d:a2:e7:50:ba:de:73:05:19:46:a1:f0:7f:f2:1b:
c8:82:d2:fc:86:10:6f:1b:11:e7:b5:58:24:ee:8a:94:85:00:
8d:c5:6a:42:72:74:e6:0b:88:b8:2f:7c:3c:aa:29:ad:c2:9d:
4a:e1:ae:71:7d:df:3d:4f:e8:74:2c:c5:92:bd:dc:c1:05:56:
45:4a:9a:4d:b7:d8:4d:d8:10:c2:e9:15:07:e9:05:d7:3f:60:
3b:e5:08:f3:6b:98:93:7d:da:07:83:a6:7e:06:bb:af:02:cd:
47:2a:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:06 2025 by rpki-client