Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/MpZzldQi5IW1vH72zsN86ALdCYo.roa
File: MpZzldQi5IW1vH72zsN86ALdCYo.roa (raw, json)
Hash identifier: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=
Subject key identifier: 32:96:73:95:D4:22:E4:85:B5:BC:7E:F6:CE:C3:7C:E8:02:DD:09:8A
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019424B380D9EA4A7D53ED666962D3700EDD
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/MpZzldQi5IW1vH72zsN86ALdCYo.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197851
IP address blocks: 185.136.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:80:d9:ea:4a:7d:53:ed:66:69:62:d3:70:0e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32967395d422e485b5bc7ef6cec37ce802dd098a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:fb:ef:1a:d2:ce:1e:ae:eb:13:aa:32:22:
d1:60:9f:42:71:7c:a7:77:17:3e:3c:ed:74:09:97:
75:ef:5c:e7:19:c2:4d:aa:f7:38:be:98:1d:6f:d2:
20:de:67:b6:13:d8:42:bd:b2:5c:3d:fe:19:2e:a4:
d0:90:c6:7b:5a:d9:7a:89:42:a2:36:39:f6:b1:35:
0c:3b:32:d3:d9:a7:ce:50:84:45:9c:86:0c:3b:af:
d7:ce:c8:36:9e:0b:ad:6e:98:64:fd:ac:94:c0:2c:
83:18:c6:6c:2a:42:85:89:3b:ae:70:f5:e2:c8:9c:
a6:c0:b2:28:4b:00:2c:96:c6:4b:4b:c1:a3:9e:8c:
6a:5f:00:3c:22:71:15:f8:6a:6c:b8:26:da:30:ba:
50:25:57:76:c5:c5:8b:fc:fc:9c:c2:ce:b5:22:5d:
61:d7:e3:18:ea:3b:99:e4:2e:09:3c:8b:39:6a:f9:
9b:4b:13:38:86:57:cd:00:ee:b6:c7:60:c8:bb:e9:
54:4e:ce:b2:51:38:0b:47:78:6e:bb:e1:6e:dd:64:
17:e8:b3:24:db:d4:a0:ac:be:9c:fb:1b:5f:6b:b0:
3f:fc:eb:40:23:94:e2:07:38:d4:2b:5a:72:b3:49:
ac:3d:82:6c:51:12:36:28:06:36:e4:d4:fe:b4:0e:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:73:95:D4:22:E4:85:B5:BC:7E:F6:CE:C3:7C:E8:02:DD:09:8A
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/MpZzldQi5IW1vH72zsN86ALdCYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.87.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fd:68:74:d7:32:8e:56:ff:59:d5:f3:62:1d:d7:9a:46:4a:
75:05:02:d9:54:c6:4f:cd:35:3d:24:83:f6:49:2d:1a:84:c0:
04:4f:84:4d:c0:2f:61:9e:f2:be:7b:f4:5c:cd:74:97:c0:91:
84:fd:89:42:f4:5b:16:9e:13:a4:b9:77:8f:1f:41:67:a6:5e:
0e:97:32:83:31:9b:2e:99:8e:33:d1:05:05:0a:ad:10:33:29:
0b:0a:35:89:65:6a:ed:33:34:a6:ae:17:e6:63:b7:f7:a3:88:
42:14:d0:45:cf:2e:07:a0:ab:ca:a0:21:ec:45:38:3c:6c:da:
b8:1a:77:cd:0f:61:95:33:27:f9:ce:aa:87:9d:dc:37:9d:6d:
17:94:8b:4c:3d:7e:86:e5:fb:d5:c3:de:be:83:cf:08:3b:3a:
0a:28:0a:bc:f1:10:33:d5:f4:18:9b:b0:fb:0b:ed:b4:0d:79:
77:74:18:d1:87:52:b5:50:66:e5:6b:c1:f3:03:06:36:1c:07:
74:c7:c9:a4:82:9c:6f:bc:51:d8:3e:93:62:63:10:d9:59:69:
c4:e3:7f:24:b1:c3:d8:8a:71:2e:d0:09:dd:7c:75:55:cc:6b:
de:8d:a7:80:00:bd:87:6f:ac:f5:9c:ba:c7:d5:f5:db:e3:80:
24:a4:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:39:55 2025 by rpki-client