Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/mTHF4xRS849mOw36faqzyw4dbV0.roa
File: mTHF4xRS849mOw36faqzyw4dbV0.roa (raw, json)
Hash identifier: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=
Subject key identifier: 99:31:C5:E3:14:52:F3:8F:66:3B:0D:FA:7D:AA:B3:CB:0E:1D:6D:5D
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 01942748763612A879B831C6028E23084DE6
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/mTHF4xRS849mOw36faqzyw4dbV0.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47331
IP address blocks: 93.155.0.0/17 maxlen: 24
178.217.236.0/22 maxlen: 24
2a00:1d30::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:76:36:12:a8:79:b8:31:c6:02:8e:23:08:4d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9931c5e31452f38f663b0dfa7daab3cb0e1d6d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:db:08:11:b6:04:3e:bc:63:6c:37:04:ff:
c9:80:d2:04:5a:07:76:84:f5:4e:e8:4c:69:3c:b4:
d6:89:95:fa:34:01:e2:50:b6:b0:f6:3a:3a:b2:7d:
7f:89:b8:62:0a:ba:e0:b9:f7:b5:e5:36:4b:a7:4e:
61:45:66:5a:b5:cf:c2:d8:6b:8a:99:66:2a:5b:e2:
2b:66:c1:1f:ef:cf:3d:8d:20:f7:20:7b:10:b8:5f:
61:e4:bb:5a:53:74:2f:91:5d:19:1c:95:43:bc:c0:
c7:df:67:84:43:65:d1:04:6f:23:65:7a:e3:d0:9a:
39:cf:aa:c3:34:1c:ed:a7:ec:ed:b4:7d:3d:71:34:
5d:22:cb:f5:3d:67:b4:d1:51:89:7c:ce:97:c5:ef:
77:b9:be:47:f0:b6:17:70:48:4d:da:e2:a5:8a:d7:
2b:d7:b5:37:bd:98:f0:75:76:fe:f8:79:21:f8:b2:
cd:03:60:99:ab:41:3f:f3:0e:7f:04:6e:d1:c1:8b:
b9:d7:e5:f1:99:f3:ea:14:4a:01:6d:6e:5a:5e:9c:
e0:ef:85:13:f0:a1:89:7b:7d:34:e3:78:1f:fc:81:
69:aa:4d:aa:23:38:79:22:57:fe:d2:aa:f6:15:d5:
bd:5e:a6:c2:27:32:3c:c1:7e:69:b9:cc:39:ba:e5:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:C5:E3:14:52:F3:8F:66:3B:0D:FA:7D:AA:B3:CB:0E:1D:6D:5D
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/mTHF4xRS849mOw36faqzyw4dbV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.155.0.0/17
178.217.236.0/22
IPv6:
2a00:1d30::/29
Signature Algorithm: sha256WithRSAEncryption
45:f2:5d:29:29:ed:b4:d7:12:8c:dc:67:ae:9f:81:e9:11:79:
5d:87:20:6e:6d:66:7b:c5:7f:44:c5:86:c8:d6:ce:ba:41:8f:
d5:7d:62:cb:2f:ba:7e:62:f1:8e:53:80:67:70:72:42:f8:af:
12:11:9f:9a:94:27:e4:76:f6:f4:63:92:4d:3b:bc:07:39:f6:
fc:72:61:01:8c:10:01:7e:59:da:95:35:88:18:d0:42:9d:dc:
f8:86:af:14:70:bc:0e:cc:60:df:cc:c5:e4:77:a4:f5:20:3a:
4f:a7:8b:82:76:d1:b6:23:d4:c3:a9:4e:ba:1b:eb:6b:80:76:
2a:de:1a:c4:ad:b6:bd:57:ba:ad:bf:e1:a4:69:b9:80:d4:9d:
22:5a:e7:11:bb:a9:26:53:11:ca:b7:b0:eb:2f:71:d0:e2:d3:
2f:57:54:44:0a:1a:63:5d:2a:fe:d4:64:95:1c:c4:2b:96:08:
d3:f7:89:61:40:72:27:0a:51:37:6c:36:64:c4:1f:bf:08:ab:
7d:d4:5c:6c:d7:eb:e5:34:19:ee:a8:8d:ee:d8:72:d1:9b:6c:
ce:64:63:6f:77:9d:e6:8f:51:84:92:95:a1:f2:bb:6a:7f:49:
e4:50:53:fa:89:d2:2f:c3:e5:a4:3c:e8:80:04:92:84:ae:bb:
57:1d:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:24 2025 by rpki-client