Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/MwzfvZntetFg-_eX5DgAKUVWZK0.roa
File: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (raw, json)
Hash identifier: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=
Subject key identifier: 33:0C:DF:BD:99:ED:7A:D1:60:FB:F7:97:E4:38:00:29:45:56:64:AD
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 019424456964E2A69742D81E490EE3FA8ABA
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/MwzfvZntetFg-_eX5DgAKUVWZK0.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39719
IP address blocks: 193.36.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:69:64:e2:a6:97:42:d8:1e:49:0e:e3:fa:8a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=330cdfbd99ed7ad160fbf797e4380029455664ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:c2:a2:ec:d7:32:55:6d:8f:be:b8:78:27:
98:f0:29:b3:90:a2:6e:d1:00:32:5b:c6:48:1e:5c:
73:dd:f4:20:b7:b9:4f:95:79:a5:70:c8:71:0e:dd:
64:ba:eb:ca:a9:9d:04:94:5f:d9:67:a1:13:6e:1b:
7b:f3:ee:87:a6:b3:29:9d:c5:7f:f1:ef:68:6f:aa:
a3:4a:f8:73:da:d7:0b:f8:a5:71:9c:c0:bc:76:93:
90:69:6c:c6:05:65:52:c1:9b:ff:bd:ed:62:bc:87:
e2:a8:8f:46:47:a8:4c:89:2b:42:be:2d:81:57:e0:
bb:e8:9e:f8:3d:88:eb:df:f5:f4:52:07:96:b9:ca:
c3:18:d4:ea:6e:44:dc:d1:f2:87:13:d7:77:d2:cc:
92:18:ef:e8:11:34:98:df:3a:9f:43:1f:cb:f7:d0:
ce:ed:0c:0e:ac:b5:7f:be:bf:8a:ac:b8:c7:d1:a2:
f9:1d:0c:fa:fe:b0:b6:33:bc:e5:ff:15:b4:ee:25:
7f:ad:e5:c1:ba:71:10:2d:d6:48:30:aa:cb:87:d1:
74:7e:a9:67:59:86:b9:64:6a:bf:3c:78:16:00:f0:
ec:e5:65:7d:e9:4a:12:8d:5c:f0:80:ad:e4:69:e3:
84:b0:87:eb:15:af:4f:89:ee:b2:ac:a9:bf:0c:34:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:DF:BD:99:ED:7A:D1:60:FB:F7:97:E4:38:00:29:45:56:64:AD
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/MwzfvZntetFg-_eX5DgAKUVWZK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.110.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:0e:57:bc:6c:05:99:1f:d4:e3:b1:03:2b:d6:91:a8:6a:45:
4b:a0:55:91:c7:d2:a9:95:fa:81:f4:2a:3c:e5:ad:0a:4f:48:
1a:14:c0:6e:f3:be:82:d3:70:b8:4d:91:78:c2:66:bf:3d:3f:
4a:54:a7:cc:a8:82:d9:b7:8c:50:10:a2:52:de:7f:cc:74:d9:
65:70:bb:17:00:e0:61:86:a5:18:79:24:25:99:9d:3f:5e:0c:
e7:89:45:5a:ec:5c:3e:68:b9:24:63:f5:4d:01:0b:b7:89:0b:
5e:86:9d:7d:b9:e7:fc:b3:2f:e8:bb:0f:7a:6d:12:e6:a9:d2:
0d:3e:da:8d:ee:b3:e8:6f:e5:93:72:4d:9d:5a:af:55:32:e2:
0e:ec:6e:2e:25:ec:f5:4c:be:16:f7:cc:5f:e8:89:66:84:91:
55:7f:9a:ed:48:29:02:15:8d:49:7b:7f:18:be:bb:ab:11:74:
47:52:31:1b:73:69:6f:f5:24:95:f5:55:9c:36:01:53:f1:35:
73:38:4e:05:34:0c:c8:20:08:59:23:87:17:68:5a:48:b9:3a:
7b:fa:36:a9:1d:49:56:04:a2:77:b3:2a:18:11:18:0a:72:0c:
65:86:e0:8f:5b:1c:08:40:cc:08:2f:65:aa:3b:60:c0:5e:12:
27:8d:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:38 2025 by rpki-client