Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa
File: MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa (raw, json)
Hash identifier: emZiRG679KNDGOj4cCA2StKFReSvhFA5nV/8wQXC5Cw=
Subject key identifier: 31:91:90:91:19:EB:07:0B:B7:12:20:D0:5E:8B:E2:D4:4B:4E:11:E4
Certificate issuer: /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial: 01941F8C0BF074C5B561956C90A8507663EB
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210051
IP address blocks: 195.245.84.0/24 maxlen: 24
2a09:a280::/29 maxlen: 29
2a0d:c5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:f0:74:c5:b5:61:95:6c:90:a8:50:76:63:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3191909119eb070bb71220d05e8be2d44b4e11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:4a:cc:ce:cd:e5:d5:f6:ac:ea:a1:6e:d2:
82:b1:a8:96:39:25:7b:6d:43:78:67:1b:de:08:c0:
25:1c:aa:c6:b9:8e:78:ed:c9:1b:1f:68:54:bc:a9:
f7:a1:76:4a:fa:f4:cc:71:84:4e:e6:70:4e:55:e9:
cb:b8:40:71:b3:f3:f7:93:02:ba:81:93:c8:34:b1:
1d:65:a1:ff:f8:34:07:d0:f6:9e:43:a6:6c:e0:f8:
26:d5:e5:f7:36:73:b6:a3:96:eb:3b:44:51:2c:c1:
e5:7a:10:60:ff:03:19:d6:2a:79:18:72:3c:ef:3d:
92:21:fc:9e:17:42:d9:13:9a:c0:be:3f:78:00:76:
21:d1:80:ff:86:e3:59:d8:33:a1:0e:3a:38:92:d3:
fe:d8:13:91:db:6e:39:67:98:91:4b:48:8e:a3:c9:
90:ae:bd:05:1b:1a:44:40:03:29:8e:2a:7d:20:bb:
4a:1f:3d:5a:b6:b9:51:bb:cb:b4:90:31:5d:be:52:
9a:b7:df:78:2b:64:33:b0:bd:0e:13:c1:44:c0:e9:
a8:98:1f:06:5f:01:e7:85:74:a5:9f:91:6b:fb:6c:
ce:aa:af:99:10:08:2a:b3:90:0c:5a:bd:04:26:7b:
96:bd:d2:6b:2d:df:fd:bd:a7:dc:a4:02:57:9b:62:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:90:91:19:EB:07:0B:B7:12:20:D0:5E:8B:E2:D4:4B:4E:11:E4
X509v3 Authority Key Identifier:
keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.84.0/24
IPv6:
2a09:a280::/29
2a0d:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
69:ab:6c:ad:e0:9d:f0:ff:d9:d8:87:3a:f6:59:06:8c:be:e6:
08:28:8b:59:43:91:88:c2:53:92:2d:dd:1d:43:d6:f5:7b:2e:
0f:e7:1f:4a:e5:5f:fd:ff:3a:41:42:09:a3:e3:d7:ce:21:ec:
d5:74:84:ed:72:64:52:44:f9:64:5f:7f:a6:c4:44:d3:48:6b:
96:f6:33:93:89:5b:60:6c:e1:2c:73:bd:7b:54:03:ab:f7:d0:
d8:3c:e5:1c:be:19:65:15:a0:1d:52:44:c2:68:fb:33:f3:66:
4a:5c:ad:22:bb:c6:84:19:8c:46:1e:f3:25:51:50:ce:6f:f1:
aa:d3:8b:4e:f6:4d:9b:31:69:02:d2:5c:89:d5:b3:04:7c:94:
c4:39:ed:31:b5:d8:d5:fd:03:22:45:ae:23:8a:4d:7e:b4:69:
36:23:6a:9d:77:33:a8:ec:5c:f1:67:cd:d2:0d:31:b8:62:88:
8e:9c:f7:35:7e:11:9e:62:d8:dc:04:be:e3:ee:3b:b9:6e:6f:
05:22:94:86:e4:14:cd:99:cb:b9:cb:6f:c3:ce:1e:8f:59:50:
7f:bc:82:1b:5b:3a:de:f4:74:e9:d0:14:be:39:df:43:13:f1:
f0:6b:5b:a2:0c:67:06:ad:52:ea:1a:a3:28:8b:32:b6:2f:01:
b9:ca:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:46:22 2025 by rpki-client