Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa
File: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (raw, json)
Hash identifier: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=
Subject key identifier: 99:E4:39:48:13:27:A8:90:64:14:77:BE:24:E7:04:1A:10:AC:28:56
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019420D597769DC8C2740956E6202F762E8E
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8194
IP address blocks: 31.24.192.0/21 maxlen: 24
195.244.144.0/20 maxlen: 24
212.70.160.0/19 maxlen: 24
2a00:1780::/32 maxlen: 48
2a00:1780:dd00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:97:76:9d:c8:c2:74:09:56:e6:20:2f:76:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99e439481327a890641477be24e7041a10ac2856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:73:a5:b6:03:90:25:e5:3d:97:1a:40:1a:
ec:85:ad:71:92:76:37:63:08:bf:6c:a3:b4:8e:28:
97:b4:d3:50:51:cf:6d:8a:be:b8:c3:0f:62:84:48:
d8:8c:77:f2:f3:82:6b:f4:60:b2:a5:34:43:08:87:
73:28:eb:0e:04:39:8e:07:35:2b:0d:de:65:ca:4f:
e2:31:af:18:d5:ed:3b:f3:6f:cb:f3:9e:06:47:4c:
9a:57:21:04:06:35:ac:ef:a2:14:40:92:14:f1:e3:
c0:fb:8f:03:be:31:d4:96:de:b4:81:3a:5f:55:5e:
38:bc:6a:9b:21:e1:aa:0b:b8:08:59:e2:ee:0f:36:
56:05:b7:51:78:f9:e3:5c:a6:e3:ec:3c:d7:29:18:
b5:85:b1:db:12:53:a7:11:c3:cb:3d:ec:63:3d:91:
d2:01:84:fa:15:0f:39:90:1c:fe:39:0e:6f:34:43:
d8:f0:8a:a5:2a:a5:f5:37:87:5c:14:e8:02:ab:45:
51:27:fb:86:05:3d:89:83:ff:e8:a6:2c:c3:72:cd:
17:41:8f:9f:b5:01:ed:af:c7:95:44:96:97:ea:6c:
73:dd:42:d2:fe:34:0f:dd:1a:0a:6b:f5:48:06:fa:
9f:07:72:9c:f3:d5:01:9c:6e:8a:89:d6:b2:3e:1d:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:39:48:13:27:A8:90:64:14:77:BE:24:E7:04:1A:10:AC:28:56
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.192.0/21
195.244.144.0/20
212.70.160.0/19
IPv6:
2a00:1780::/32
Signature Algorithm: sha256WithRSAEncryption
20:25:c1:f7:da:df:ff:ff:7d:9d:07:60:c0:99:00:50:ee:e9:
ea:e0:47:6f:ba:53:9e:2f:a9:0d:10:6c:0a:4d:91:b9:89:dc:
7d:26:25:f2:14:ab:7e:a8:22:d0:e1:de:15:cc:8a:30:98:f3:
e3:cc:b4:e1:67:0e:a7:ed:39:9c:88:f7:a3:90:84:78:f1:c9:
a9:4b:f9:05:a4:aa:98:16:9c:cf:66:e6:be:c5:a4:0f:89:74:
c5:03:44:6c:4c:73:a3:58:dd:58:c7:9c:32:2e:9a:78:1f:f8:
9c:f6:04:42:a5:42:57:07:b0:3f:97:b6:86:94:3b:d0:f5:c3:
0f:8f:a4:4a:dc:ab:f0:36:1a:7a:38:fa:e4:b0:62:81:9b:e8:
7a:b0:61:b2:3b:73:20:bc:53:c5:bf:a2:9a:fb:66:88:3b:8e:
b5:db:3e:74:aa:d4:db:a0:3d:2a:e6:f9:dc:f4:d2:2a:6d:e4:
50:7e:e7:93:1e:81:2a:92:3d:3e:3b:3d:e8:89:48:97:77:54:
71:82:35:d2:d0:52:0e:42:10:85:53:13:8b:67:21:d7:99:de:
48:7f:1b:b1:4c:c0:d2:15:2a:8c:de:cd:0f:65:81:a1:25:9c:
81:1e:d6:f1:06:cf:f7:05:7c:1b:9e:73:96:85:13:22:c8:67:
e5:cd:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:23 2025 by rpki-client