Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/mErkWeU3I8mGIE7o-s9X2fk5o5s.roa
File: mErkWeU3I8mGIE7o-s9X2fk5o5s.roa (raw, json)
Hash identifier: VUpCAKhA9EiJ9ug9Oc5wXy4xs0jXv9yffBf1VGddEjc=
Subject key identifier: 98:4A:E4:59:E5:37:23:C9:86:20:4E:E8:FA:CF:57:D9:F9:39:A3:9B
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BD2826DE16FEF60789A0022EC0F8
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/mErkWeU3I8mGIE7o-s9X2fk5o5s.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201617
IP address blocks: 148.81.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bd:28:26:de:16:fe:f6:07:89:a0:02:2e:c0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=984ae459e53723c986204ee8facf57d9f939a39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:92:7f:08:f9:4d:cb:36:a7:3e:c4:79:6d:
ef:8d:8c:67:4f:9f:e7:d4:66:f9:fb:3f:bf:ed:a2:
3f:d9:8d:a1:e1:47:3d:4b:10:a2:80:83:fb:43:40:
fd:72:79:6f:e3:93:97:70:8a:35:48:35:10:ed:59:
84:93:a5:56:24:4d:e1:c9:35:ab:10:93:00:71:a4:
d7:f8:4a:b0:ed:75:63:f5:21:47:54:2e:8c:26:f5:
8b:20:50:64:15:c8:ed:ae:cf:09:a5:7e:0d:f8:4d:
a0:31:d1:aa:8b:2b:1b:58:49:c4:d4:e0:cd:c5:8b:
6b:68:62:8d:67:33:ec:5d:5b:76:85:e9:ca:7b:8c:
20:be:ce:a3:0d:b6:14:3d:0c:95:67:db:88:d4:f3:
83:5c:69:8c:14:9a:fb:d7:0e:f8:28:86:21:a5:81:
c4:60:74:e1:c9:6e:af:b0:a9:16:c1:bc:ad:dc:fd:
7d:16:e3:43:64:f0:0c:f2:3a:28:43:ec:c9:f4:5e:
82:24:cc:00:17:77:ba:00:76:87:0a:5e:38:c1:16:
8c:36:b1:f2:5c:31:fb:bb:b2:d2:a2:27:c4:59:14:
b7:ca:6e:1a:dc:5f:59:04:d6:34:c0:80:fe:be:90:
5d:70:ca:c0:f1:21:f4:b7:98:3b:b2:61:c6:b8:a5:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4A:E4:59:E5:37:23:C9:86:20:4E:E8:FA:CF:57:D9:F9:39:A3:9B
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/mErkWeU3I8mGIE7o-s9X2fk5o5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.230.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a3:9d:58:6b:62:d5:97:92:de:ec:04:06:45:14:dc:dc:a8:
6f:88:b1:e4:18:fa:f7:b5:78:d2:14:ec:43:63:8d:e1:1d:90:
c6:f1:dd:6f:31:89:84:2e:fa:4d:aa:f7:87:44:3a:0f:79:7d:
2a:b1:43:c5:18:f0:63:7a:ac:c2:7a:7c:d2:b0:d9:ea:e1:7f:
98:e3:b6:df:ed:07:28:ce:fc:f4:bb:8f:3f:e6:16:68:1f:36:
be:6b:a0:b2:a8:7a:97:e1:25:94:85:ad:90:81:7f:8a:76:88:
02:9e:86:b5:59:0b:76:d0:31:00:a2:d6:67:17:89:aa:f2:11:
e1:51:53:bd:c8:0d:54:f8:78:8d:72:4e:80:6d:31:60:4e:9b:
32:e6:e0:a5:79:56:04:01:6c:d9:29:50:37:0a:ee:29:67:b7:
f3:e9:4c:6b:b9:d7:6d:4d:7b:9f:01:80:97:44:cf:18:6b:48:
48:da:5d:15:89:81:af:00:59:2a:bf:ae:1a:7c:8e:f7:39:0a:
a3:f0:15:2f:5e:49:eb:89:f2:8c:44:e3:d0:22:b3:5a:f4:f3:
86:be:bd:a7:7b:f9:2d:fa:96:65:d4:69:15:4c:3a:32:83:94:
e4:fd:29:7a:1f:b9:cf:0b:2d:c6:fb:d9:fc:d6:27:7a:94:3a:
11:dd:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:07 2025 by rpki-client