Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/mv7rc-hqsI2Lagrq0YUIl8s0aOc.roa
File: mv7rc-hqsI2Lagrq0YUIl8s0aOc.roa (raw, json)
Hash identifier: UebGe6t5Su1GKezXT74P6nFKUm0pG4M/DYy4n3k7Ug8=
Subject key identifier: 9A:FE:EB:73:E8:6A:B0:8D:8B:6A:0A:EA:D1:85:08:97:CB:34:68:E7
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01942445582D3C931A52F4073A8E422EB8A3
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/mv7rc-hqsI2Lagrq0YUIl8s0aOc.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47185
IP address blocks: 31.145.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:58:2d:3c:93:1a:52:f4:07:3a:8e:42:2e:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9afeeb73e86ab08d8b6a0aead1850897cb3468e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:54:d2:7f:37:d9:e0:ed:fb:82:bd:b9:82:
3a:ce:3d:5b:cf:b9:04:be:80:ed:7e:09:5c:fd:64:
0b:94:28:dd:84:cb:a1:54:6c:f9:f8:14:be:bb:64:
bf:62:44:5f:72:52:7c:d1:95:0a:27:28:d7:2b:60:
af:8c:bb:56:3b:3f:4f:61:33:1b:88:08:2e:15:99:
55:db:db:a4:98:9d:65:10:e6:fd:03:f7:9e:28:be:
13:26:31:fb:4e:7a:a4:a4:e1:4b:4c:7f:b4:e5:76:
41:bd:32:e4:20:19:28:26:0a:2b:be:dd:92:cc:ac:
d7:61:99:45:99:d3:4c:36:5f:91:92:69:40:a5:90:
7d:12:ff:c0:9d:f5:1b:ce:f9:76:75:bc:cb:75:89:
d0:50:27:a2:82:98:dc:bc:9e:0f:6e:a3:36:be:e3:
45:50:e1:61:4a:c6:7c:14:79:90:5e:5a:d9:57:d6:
2d:b0:df:1f:77:5a:ce:6c:fe:e4:42:2a:ae:7e:23:
de:5a:cb:f5:e2:85:0e:aa:a2:12:13:7a:5a:7a:15:
54:2b:cc:82:d9:91:6c:9c:2e:e8:eb:66:85:e1:13:
38:11:29:31:e1:d1:2b:95:ce:21:f4:80:82:ec:70:
52:00:af:4e:86:df:e1:e7:90:1e:d7:33:f7:ce:1a:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FE:EB:73:E8:6A:B0:8D:8B:6A:0A:EA:D1:85:08:97:CB:34:68:E7
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/mv7rc-hqsI2Lagrq0YUIl8s0aOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:89:fa:77:3f:a3:93:44:98:32:67:da:0f:47:e8:7a:96:0f:
06:d6:32:0e:0c:7a:2c:02:02:51:28:31:46:81:f8:00:10:07:
22:eb:0c:a8:5a:ed:40:97:10:07:62:1b:04:37:ba:cf:75:64:
a6:4d:b6:c0:81:76:e6:ce:70:92:b5:27:8d:fa:e7:e2:c8:fd:
43:80:87:d9:78:5c:ab:d0:05:bc:8b:dd:33:3b:91:76:3f:10:
df:ca:e5:8f:9b:68:f8:ec:73:35:cf:7c:fb:cb:d9:06:d3:39:
30:6a:85:ff:af:6e:cc:fa:fe:5e:15:8f:0d:05:7d:0c:e5:aa:
08:df:54:60:27:6a:94:28:4e:89:60:24:81:de:eb:26:3a:fb:
e6:bf:01:e2:92:a7:43:7f:ec:22:1a:7e:55:3a:f1:f5:31:c5:
6b:66:c5:06:7b:12:d4:d3:18:a8:88:73:e1:fc:aa:e9:e0:52:
bf:85:1f:03:16:ae:46:d8:b3:42:2f:b6:df:b2:c6:ef:59:50:
4a:f6:40:6b:25:7c:bd:09:62:4d:9e:74:fe:f6:a4:4a:e0:51:
06:47:83:16:48:a0:63:71:62:0f:eb:5e:96:38:a3:9c:01:d7:
b4:16:29:47:73:35:b7:2a:1c:82:73:0c:2e:be:be:32:68:8f:
6c:57:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:14 2025 by rpki-client