Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa
File: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (raw, json)
Hash identifier: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=
Subject key identifier: 9A:2F:8F:76:88:B1:43:72:3F:DF:05:87:D6:2B:85:5D:CF:FB:B8:CD
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 01941FFA4BC2C386395335C64CB0A2CFA94D
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39405
IP address blocks: 185.40.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:c2:c3:86:39:53:35:c6:4c:b0:a2:cf:a9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a2f8f7688b143723fdf0587d62b855dcffbb8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:9a:dc:6b:e0:ca:28:8d:93:f0:88:96:40:
64:b3:e4:da:be:7f:0e:79:4b:b8:3b:e6:02:29:1f:
c9:aa:c4:94:96:68:62:e1:d4:b7:a4:d5:90:bd:fa:
b6:3a:48:b2:60:03:43:30:49:c7:8e:d8:58:03:b1:
b0:91:ae:c1:b9:01:65:55:8a:85:95:6c:0c:b5:ef:
30:2e:be:36:66:f2:f0:6d:c4:88:10:fd:61:ba:29:
9c:0c:4e:8a:a8:b0:41:a2:87:09:ee:37:74:c8:0a:
9f:0a:4f:ec:01:18:7d:dc:d4:8a:79:7b:13:8f:8e:
cc:6f:97:16:f3:63:9b:58:25:13:fa:a7:00:e1:68:
68:61:50:27:5f:06:4e:c7:9c:0a:59:bf:9f:3e:83:
26:6f:e4:e0:3d:1e:5f:52:98:ad:60:5b:41:66:84:
f8:53:d9:b2:f3:08:08:46:cd:e7:9c:0f:63:b0:9c:
e6:83:95:b3:fa:33:3b:b7:58:2f:c6:0a:51:ef:95:
ce:55:55:2d:bd:fc:20:c7:f8:39:51:dc:ac:26:48:
ed:e1:e9:b4:94:c2:ba:02:11:2e:27:6d:8c:41:b0:
6d:e8:5c:bb:ee:06:14:79:28:00:c0:a8:39:23:be:
cd:7c:50:68:5c:ca:36:30:26:dc:a2:30:55:e6:80:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2F:8F:76:88:B1:43:72:3F:DF:05:87:D6:2B:85:5D:CF:FB:B8:CD
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.100.0/23
Signature Algorithm: sha256WithRSAEncryption
94:bb:30:72:65:68:44:5b:aa:3b:a9:a4:65:67:9e:2c:89:2d:
37:ee:b3:2e:9f:0a:3c:7f:cc:f0:a7:3c:ff:9f:f6:36:ef:7a:
68:c6:ba:55:f1:29:33:e2:9c:9f:24:37:05:ea:2f:f5:84:7b:
70:05:a5:af:49:96:90:64:b0:4b:cd:45:43:98:f4:b7:5f:cd:
35:48:34:b8:e0:9c:19:a1:c4:bc:2d:1f:9e:af:51:b9:75:40:
76:de:82:6b:d7:7c:60:fb:3d:f0:f8:e9:58:8b:30:99:89:65:
ba:b6:bb:03:84:f2:1d:e7:73:d7:e5:05:18:a2:8f:6b:ae:4a:
c4:87:88:32:c4:3a:14:43:08:2d:c0:60:3d:2e:5c:8e:45:e7:
8e:ca:69:d8:cb:45:12:da:7b:25:60:79:5a:5a:cf:bf:11:83:
d9:b0:7c:11:1c:9e:2e:ea:54:07:82:dc:74:ce:8d:2b:26:bd:
63:a6:1e:71:20:1a:e1:da:7a:47:b7:41:52:44:6f:c4:35:d0:
f3:bf:e7:6a:0b:16:e2:01:2b:eb:e5:fe:c2:1d:7d:3c:4c:0f:
71:27:81:14:c8:15:52:ca:3d:0c:5a:48:eb:8d:6f:45:a0:69:
af:12:73:51:62:85:00:d9:4c:7e:bc:9b:51:40:46:1e:3b:90:
d7:90:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:58 2025 by rpki-client