Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/Mr0yh9Idod-bEGR9cL8Ist_Jj4A.roa
File: Mr0yh9Idod-bEGR9cL8Ist_Jj4A.roa (raw, json)
Hash identifier: 5Ujre3KMVIzM/Fx6KHgseWX+SO9fZ/nChf3q7rvn980=
Subject key identifier: 32:BD:32:87:D2:1D:A1:DF:9B:10:64:7D:70:BF:08:B2:DF:C9:8F:80
Certificate issuer: /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial: 01942825842166E967ECD7A5A6279C8AB964
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/Mr0yh9Idod-bEGR9cL8Ist_Jj4A.roa
Signing time: Thu 02 Jan 2025 17:52:14 +0000
ROA not before: Thu 02 Jan 2025 17:52:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35753
IP address blocks: 193.8.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:84:21:66:e9:67:ec:d7:a5:a6:27:9c:8a:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
Validity
Not Before: Jan 2 17:52:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32bd3287d21da1df9b10647d70bf08b2dfc98f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:2a:b9:65:4c:3a:4f:2f:23:89:b3:5c:08:
62:7b:08:fb:55:e0:b4:08:f4:68:96:b5:d7:eb:fd:
71:51:58:18:a1:5a:5a:93:0d:a1:30:95:bb:a5:cc:
92:13:de:14:48:33:ee:69:d4:39:27:96:ce:9d:a5:
c3:f4:54:13:26:51:c3:a3:30:09:6a:9a:db:df:cb:
eb:d2:c8:2a:ae:9b:ae:39:49:67:39:aa:d2:21:56:
c6:e8:01:39:e2:44:93:ed:ab:16:a8:ba:7c:b2:b3:
61:56:0c:62:c2:f4:27:bf:68:c2:0a:52:2e:89:64:
ab:6a:53:b4:a8:60:e8:ec:82:0e:42:8a:37:b7:8a:
6a:6e:90:37:7f:99:4a:76:24:d7:0c:6a:17:1b:1b:
56:55:d9:1e:d6:54:63:f5:28:0b:c5:1a:c5:65:be:
37:c7:74:d1:b0:49:b2:a4:3c:3a:46:cd:c4:34:02:
c2:8a:7f:23:87:14:8e:db:5d:f6:78:1c:97:8c:f4:
5e:3a:1b:d9:d9:01:5c:42:cb:41:32:9e:a7:6b:b8:
d8:79:60:a0:e6:70:55:24:27:10:f5:7b:c8:86:af:
ce:fa:fe:6e:48:2f:48:df:d5:79:00:e4:57:f8:cf:
a0:fc:f8:0a:d8:a7:97:72:be:2c:19:43:7c:4c:11:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:32:87:D2:1D:A1:DF:9B:10:64:7D:70:BF:08:B2:DF:C9:8F:80
X509v3 Authority Key Identifier:
keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/Mr0yh9Idod-bEGR9cL8Ist_Jj4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.250.0/24
Signature Algorithm: sha256WithRSAEncryption
40:de:d8:3d:d6:9d:d6:4c:4b:0d:8b:e4:d6:41:20:04:ab:da:
26:de:14:d4:9f:c5:e4:0b:6e:4b:37:25:b5:79:b4:6a:e5:05:
31:84:01:b2:05:0b:ec:ed:35:59:e3:c1:e2:58:47:5a:b6:b0:
d3:28:56:2e:8f:50:1d:16:96:61:e8:89:ed:43:ec:c3:2f:12:
46:97:3a:35:eb:c8:af:ef:4a:66:eb:1a:56:e5:d6:e0:f8:d0:
a4:c3:6a:6c:f2:9b:32:49:18:13:7d:9e:ce:4e:7d:73:a9:16:
1d:db:69:be:6e:9d:66:0b:aa:25:53:9d:03:94:fc:cb:70:0e:
04:0e:3e:04:14:1d:b2:a0:2d:03:f3:00:f4:e1:95:72:27:16:
40:18:ec:f7:8c:33:56:89:b8:d0:ef:cb:b1:69:25:4c:7f:47:
73:fe:6c:7a:12:d6:c5:dd:54:87:c9:75:cf:5b:f2:3e:5d:8f:
75:2f:ba:54:70:71:0b:f9:3d:fc:ba:a6:2e:d4:78:34:a0:a5:
67:d9:68:60:a6:b9:11:1b:b9:76:1e:25:3d:f7:28:31:95:67:
b6:db:ee:ee:55:9d:0a:7d:40:aa:30:db:cf:e0:c1:d5:49:7c:
b8:5a:30:68:45:b6:01:44:1e:12:d6:65:b3:5b:70:12:f7:34:
e6:91:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:35 2025 by rpki-client