Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/mRXbSMwMplFS-oxDDBYp3cRPJvY.roa
File: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (raw, json)
Hash identifier: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=
Subject key identifier: 99:15:DB:48:CC:0C:A6:51:52:FA:8C:43:0C:16:29:DD:C4:4F:26:F6
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 0194206833A4E22B941384A5C5480C0EA736
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/mRXbSMwMplFS-oxDDBYp3cRPJvY.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 5.104.26.0/23 maxlen: 23
5.104.28.0/23 maxlen: 23
5.104.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:a4:e2:2b:94:13:84:a5:c5:48:0c:0e:a7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9915db48cc0ca65152fa8c430c1629ddc44f26f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:c4:47:ea:89:7c:52:41:24:55:0d:22:4f:
ed:8c:2e:a7:5d:87:b9:78:1b:91:6d:95:37:9f:9d:
f6:bc:e7:aa:03:d7:9f:e8:de:0b:16:77:c5:91:fd:
bd:34:a7:10:b4:97:7a:28:75:77:07:e2:87:a2:f1:
4f:ec:3c:d5:83:90:5e:3c:5d:af:d2:30:5a:cd:74:
5d:2d:28:40:b0:ce:56:44:f0:29:15:f0:6c:89:75:
e9:15:5b:42:17:6f:1d:ee:d7:24:ed:22:31:b9:e8:
1b:2e:1a:42:16:37:c1:a1:46:7c:a8:36:1b:32:03:
41:3d:79:d3:64:77:59:d6:1b:61:d6:af:68:a6:29:
64:f8:bf:9b:42:42:b7:77:f5:48:f7:f0:d9:ab:c6:
f6:22:f3:d2:e8:10:28:c0:d1:7e:7a:5a:0a:9b:14:
e9:0f:5a:08:aa:bd:e4:74:a9:17:87:f9:2a:81:77:
6d:f4:9d:63:88:31:cc:04:2d:40:81:2d:e4:69:25:
68:53:6d:26:f2:74:76:1f:1c:41:c4:7a:5e:c9:ec:
74:7e:21:33:05:00:d2:ee:df:0f:65:26:9e:12:68:
c1:14:e2:47:94:45:bc:df:cb:d5:e9:df:18:97:a7:
1e:4d:00:68:fe:d0:fa:0c:50:4d:f3:31:4c:4b:95:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:DB:48:CC:0C:A6:51:52:FA:8C:43:0C:16:29:DD:C4:4F:26:F6
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/mRXbSMwMplFS-oxDDBYp3cRPJvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.26.0-5.104.30.255
Signature Algorithm: sha256WithRSAEncryption
bf:ca:af:2b:a5:9a:35:c4:5b:6d:b3:a8:18:5b:91:a1:8b:81:
bf:29:f1:e5:d0:0c:d3:1a:e8:ee:f2:b9:06:35:ab:82:bf:35:
8b:6b:a1:6f:78:58:17:8d:d2:46:c8:05:c4:88:b3:0f:fa:82:
2d:de:08:fc:48:5f:57:e1:e6:30:9e:9d:56:bd:73:5e:4b:96:
d7:e6:6e:bf:05:5b:1b:05:37:0c:5b:1b:cb:76:65:62:16:ce:
e8:eb:93:35:6c:3a:30:45:11:57:a3:0f:39:0c:7a:5f:7b:e7:
88:ba:ae:93:1c:b9:8e:8e:99:c5:cc:be:2c:1a:e9:82:a8:ed:
9a:e6:2a:c6:0d:d5:f5:5c:c0:a6:12:ce:dc:4c:ad:68:44:8e:
3d:e8:1b:50:7b:9f:9a:ef:c5:8e:2d:2d:ec:0a:e4:a0:53:c2:
5b:ae:1a:b0:0f:66:d2:fe:6b:49:f8:e0:fe:47:ad:c3:49:66:
4f:78:8f:05:38:d7:df:b1:18:8b:3b:25:f1:23:0f:1d:28:50:
51:d0:a8:aa:d7:82:c4:8b:46:c6:38:6d:89:3c:d8:9e:76:c3:
c0:64:d1:06:31:81:d1:ea:ff:57:37:e8:e2:76:dd:bb:27:f7:
b7:26:12:e8:82:da:ab:63:7b:10:9d:f9:e2:3d:6a:b8:7a:00:
13:38:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:29 2025 by rpki-client