Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/cMKq-JLpriWlMzpSBU3o-kUT1kg.roa
File: cMKq-JLpriWlMzpSBU3o-kUT1kg.roa (raw, json)
Hash identifier: I7cUNz/JbiqOhEpR7u1ijrS7XgHWRNZvsBcsvvfUeeM=
Subject key identifier: 70:C2:AA:F8:92:E9:AE:25:A5:33:3A:52:05:4D:E8:FA:45:13:D6:48
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019423D6F7EBB24A7A0637D5F6CFF89DD542
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/cMKq-JLpriWlMzpSBU3o-kUT1kg.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13903
IP address blocks: 193.29.148.0/23 maxlen: 23
193.29.149.0/24 maxlen: 24
193.29.158.0/23 maxlen: 23
193.29.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f7:eb:b2:4a:7a:06:37:d5:f6:cf:f8:9d:d5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70c2aaf892e9ae25a5333a52054de8fa4513d648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:92:14:4b:ea:77:ba:98:c2:4a:b2:12:bf:
cb:72:2d:24:7c:b6:da:71:12:c1:f8:f8:d1:2b:62:
bc:94:a7:28:ba:02:90:1c:5a:34:ee:e1:87:95:ac:
8f:2b:ed:ee:0b:7d:4d:6b:aa:1c:f8:00:75:55:ba:
a2:f3:e2:5f:1c:8f:d3:d2:12:5a:d9:27:49:5c:74:
90:f4:9e:75:92:78:33:97:a5:46:88:9c:f0:57:be:
46:1d:39:f1:73:7c:6f:96:ef:f6:05:78:0a:65:08:
77:31:0a:0f:19:76:0a:f5:d7:62:09:71:7b:87:0b:
a8:d2:8d:14:2a:a0:db:78:0a:45:c4:b6:86:c7:61:
48:b6:a1:00:7b:a1:60:5f:11:8e:92:d2:99:12:d8:
95:6f:d6:0d:80:51:f2:ff:06:57:73:95:45:ea:72:
0a:51:fe:43:4e:19:ea:85:a1:44:cd:e6:c1:3a:e8:
85:6f:4f:36:6a:e8:93:90:ad:5f:81:0d:02:0f:bc:
5f:e1:1b:be:73:ac:14:53:5f:7e:34:c9:03:c7:ad:
d1:ef:3f:3e:3a:3d:8a:59:cb:4b:69:ec:e7:fa:88:
7f:57:ce:d0:fb:af:dc:de:32:e4:6e:3a:25:59:9f:
f8:84:ce:44:c9:93:3d:89:4e:73:5e:af:29:d3:9e:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C2:AA:F8:92:E9:AE:25:A5:33:3A:52:05:4D:E8:FA:45:13:D6:48
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/cMKq-JLpriWlMzpSBU3o-kUT1kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.148.0/23
193.29.158.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:b4:39:d9:63:25:0d:15:42:71:6c:d5:0a:20:51:20:c2:93:
53:94:e4:b7:b4:cc:35:96:2f:5f:97:95:8c:f0:e4:64:47:ae:
86:18:5e:81:59:25:2f:b6:e2:af:3b:d8:2d:11:91:cc:4a:5c:
7f:16:a4:a4:1f:eb:98:c3:b5:0a:0f:14:5d:cf:5e:b9:40:14:
03:2b:3b:26:b6:c2:b8:07:4b:4d:68:a0:e0:7c:46:47:52:4b:
3f:3c:0c:1a:99:5a:0a:f8:8e:53:d6:cb:da:4d:68:ee:bf:2f:
20:a8:78:71:af:d6:a1:de:74:ba:19:03:9e:ee:5a:e4:4b:03:
2e:4e:20:80:55:81:60:c1:8b:6b:ae:aa:f9:53:ae:b5:a6:e9:
83:63:46:15:ed:10:8e:a4:2a:13:13:72:3c:53:14:01:4d:c6:
b9:32:03:98:f8:09:45:51:a2:03:fd:07:55:72:c8:bb:d4:12:
41:13:5c:4c:7c:d3:7f:20:9b:bc:e7:bc:32:18:86:77:63:b4:
af:c0:3c:0f:98:7f:62:0e:d9:b9:4e:33:b8:97:5c:ad:96:48:
ff:d7:74:16:84:4b:39:c9:6d:ef:4e:8d:ae:39:bb:90:d9:58:
e1:ba:ac:0f:cd:8e:fe:72:e9:14:b1:4f:83:75:1e:68:06:c9:
8c:f0:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:50:08 2025 by rpki-client