Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/MWwIJyVW-xGM8HHmiPSGu90ysVM.roa
File: MWwIJyVW-xGM8HHmiPSGu90ysVM.roa (raw, json)
Hash identifier: 9euJkhmoCQb1LOfkGIPpqowd4pomSIjB0l7bFL7u4Yg=
Subject key identifier: 31:6C:08:27:25:56:FB:11:8C:F0:71:E6:88:F4:86:BB:DD:32:B1:53
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 0194228D446AC961193DB76E6C58DBF5B83A
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/MWwIJyVW-xGM8HHmiPSGu90ysVM.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50114
IP address blocks: 195.245.70.0/24 maxlen: 24
195.245.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:44:6a:c9:61:19:3d:b7:6e:6c:58:db:f5:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=316c08272556fb118cf071e688f486bbdd32b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:3a:cf:2e:0f:6c:2f:1a:2b:55:1b:dc:66:
74:9c:ef:be:c0:f8:a7:28:75:3b:b4:a5:4c:58:77:
1c:91:0c:60:3b:e9:92:1b:9b:64:81:95:6e:95:9c:
23:71:de:46:29:8e:6c:29:f3:b5:16:e9:87:c0:90:
95:6f:4c:7e:e7:01:6d:9b:f2:07:68:5a:76:8a:44:
cb:61:6d:a9:ac:98:f3:d0:4a:ee:7b:93:5a:6a:4d:
cd:d3:ae:c4:4e:c8:2c:a1:8a:76:cc:c3:5f:6b:03:
4e:a5:ea:1b:06:f2:53:f0:0a:70:f1:8c:4f:c9:dc:
71:ef:2a:6a:5e:b6:30:9c:37:83:87:cf:59:18:df:
fb:42:92:68:79:41:79:04:94:bd:fd:56:0f:1e:ba:
1d:0e:be:fe:c2:e6:34:d6:3c:4b:ac:06:87:33:ef:
08:66:16:16:f9:95:74:f3:32:58:65:18:2a:5b:68:
f9:4b:c6:6f:c5:8d:8e:67:1a:a2:89:4e:16:4a:8d:
41:bd:9e:dc:5f:6f:6a:54:8f:51:02:c8:e4:72:b7:
ab:09:92:1a:62:7d:6f:90:e5:90:0e:43:9e:2f:d8:
9a:58:56:0c:cd:89:fe:21:12:a2:49:08:72:7f:5f:
cf:93:8f:92:6d:7b:61:5c:fa:6c:45:56:a8:0d:92:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6C:08:27:25:56:FB:11:8C:F0:71:E6:88:F4:86:BB:DD:32:B1:53
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/MWwIJyVW-xGM8HHmiPSGu90ysVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.70.0/23
Signature Algorithm: sha256WithRSAEncryption
18:74:59:1a:a3:fb:f0:ef:78:0a:91:20:97:7b:5b:54:9b:17:
24:55:9c:c0:45:35:b4:5d:31:af:b9:26:cc:1c:f5:9e:3c:e6:
f1:99:54:ea:10:31:c4:41:bd:2b:b3:10:d1:4c:b8:7b:2f:c5:
b4:e2:b8:70:82:68:73:19:f9:4b:b4:a4:7e:fd:7e:05:b9:8a:
5a:1b:61:26:7a:e9:69:07:21:75:95:34:db:fc:44:31:c1:6a:
4f:f4:4d:d4:32:75:8f:31:a1:ad:1b:9a:5f:6e:d7:b3:4a:5b:
73:03:29:bb:2a:be:a2:dc:2b:8d:ae:99:92:ed:a0:7f:b0:16:
81:1d:b1:b9:c1:04:6a:6e:f3:1b:9f:e7:67:0a:a4:70:c8:8e:
fe:7a:dc:b5:41:46:b9:4e:03:de:73:69:9a:4e:e7:4a:28:70:
8e:03:32:e9:3d:68:43:bf:81:48:08:f2:35:7a:13:24:91:41:
16:7f:eb:57:4a:8f:06:42:97:cc:2b:a9:46:e4:8d:47:dd:45:
32:1e:27:d8:45:2d:22:1a:36:98:f0:dc:04:e2:61:4f:19:c0:
ee:4f:ea:35:4c:f6:b8:ac:b1:67:71:86:f0:ba:85:a5:1f:02:
2b:68:57:23:d6:34:a2:e4:30:55:61:50:95:be:15:f7:56:f4:
75:0a:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:33 2025 by rpki-client