Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/mv1MwE4getpiKJwrF8tobr9rXrs.roa
File: mv1MwE4getpiKJwrF8tobr9rXrs.roa (raw, json)
Hash identifier: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=
Subject key identifier: 9A:FD:4C:C0:4E:20:7A:DA:62:28:9C:2B:17:CB:68:6E:BF:6B:5E:BB
Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial: 019423D6B729D98724C3E3BB34D6C93F1B2B
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/mv1MwE4getpiKJwrF8tobr9rXrs.roa
Signing time: Wed 01 Jan 2025 21:47:41 +0000
ROA not before: Wed 01 Jan 2025 21:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201712
IP address blocks: 93.95.214.0/24 maxlen: 24
2a13:e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b7:29:d9:87:24:c3:e3:bb:34:d6:c9:3f:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Validity
Not Before: Jan 1 21:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9afd4cc04e207ada62289c2b17cb686ebf6b5ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:b2:21:a9:37:a3:f2:3e:fc:53:71:c9:d4:
cf:83:62:9a:26:b9:c2:2e:b2:23:a0:33:04:c7:66:
3b:eb:ba:01:d7:07:ef:7a:26:34:47:6b:f6:3c:20:
0d:c2:56:83:a1:ee:fc:14:a2:8d:f1:4c:33:05:d5:
b4:9e:dd:83:fa:48:87:bd:51:1e:60:8d:9e:6c:91:
c2:d4:06:18:a7:f4:20:d4:13:97:f6:11:fc:e7:16:
3e:b2:33:ad:9c:43:57:78:8e:b4:20:c2:10:96:02:
fc:3f:a1:2f:6d:9f:bd:7c:33:cd:03:05:80:9b:21:
fa:d5:e0:de:6d:d9:5f:bd:14:37:47:03:12:c3:7c:
ea:7c:d8:a1:b3:40:39:d9:97:c4:d6:6b:69:46:05:
26:70:8e:4e:36:66:cb:2e:33:ef:7a:15:e1:79:74:
80:3d:b5:da:04:24:7f:39:43:ae:b5:67:45:94:c2:
71:6f:11:07:70:2a:3a:b8:1b:5f:e6:60:f7:69:0e:
27:c5:3e:26:b5:00:e9:4e:0b:13:02:50:b3:3a:6a:
01:33:42:1d:32:0e:67:3f:ff:68:b5:12:5c:de:86:
98:2a:1b:26:5f:0a:c4:4f:34:f1:0e:94:30:34:66:
e9:7e:f7:fc:bf:0b:27:64:4b:de:29:49:fe:7b:54:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FD:4C:C0:4E:20:7A:DA:62:28:9C:2B:17:CB:68:6E:BF:6B:5E:BB
X509v3 Authority Key Identifier:
keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/mv1MwE4getpiKJwrF8tobr9rXrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.214.0/24
IPv6:
2a13:e00::/29
Signature Algorithm: sha256WithRSAEncryption
07:53:3f:75:d0:16:60:c2:dc:a3:18:e5:3c:8c:de:ee:22:4c:
16:a0:ef:a4:df:d9:25:d5:7d:ac:6b:76:ca:87:56:01:6a:60:
8f:8c:18:4c:b4:d0:fe:e3:86:08:69:60:20:4b:69:dd:3b:2e:
5d:d8:c2:1a:32:ab:ae:5e:fd:bb:c4:0e:3f:89:29:d5:7f:ff:
ea:7f:47:a8:2f:cf:dc:8f:40:9e:42:c4:b0:6b:c7:50:0e:48:
21:18:34:98:f5:c6:8f:38:5b:38:3c:47:35:23:d0:df:93:5a:
17:c5:a9:6c:5f:3b:00:ac:8f:04:3c:41:4f:83:f4:7f:97:b5:
5f:6d:43:62:02:c1:81:ed:2f:f4:99:1a:c6:49:f3:2b:6f:45:
61:fc:6c:f2:d7:b4:5c:0f:e4:0d:fe:14:0c:fc:1c:3c:53:f5:
be:57:ec:fc:2c:e3:15:0c:17:f9:99:a5:2c:ee:e1:00:2d:18:
30:1a:9c:41:44:b1:bc:07:54:79:f6:aa:3d:d2:71:71:de:59:
e0:bc:81:77:f8:ab:71:1f:42:d2:0c:f0:e1:cc:a3:b9:b0:39:
6a:e2:d5:17:11:62:56:d9:7d:3b:dd:e2:6d:b4:4e:8a:44:21:
93:67:5f:16:d7:4f:14:4c:09:bd:cc:a9:ca:d2:d9:72:b9:69:
8b:b7:08:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:06 2025 by rpki-client