Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa
File: MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa (raw, json)
Hash identifier: tbC0zEQlc9n1vwOMWAcwfJO+Pz8J+NOLSdpR6f+1vt4=
Subject key identifier: 31:55:90:1D:9E:E9:A1:06:52:35:AC:5C:5C:74:A4:13:57:0C:DD:A7
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019425222DE5E02E9BAD42A37FE6D90F36DB
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8374
IP address blocks: 31.6.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2d:e5:e0:2e:9b:ad:42:a3:7f:e6:d9:0f:36:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3155901d9ee9a1065235ac5c5c74a413570cdda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:06:f7:fd:9f:57:0a:76:77:24:58:a3:03:
b8:81:ae:44:65:ba:c1:0d:4a:48:1c:b4:0f:8b:65:
6b:cb:2e:91:bb:68:13:f7:70:e0:7c:8f:ff:b6:7a:
4e:02:71:2a:6b:0b:ec:ba:d1:4c:fa:65:16:30:2f:
50:60:76:54:3c:ce:6e:7b:e4:87:94:a6:f5:c0:27:
08:66:cf:f6:80:ad:f4:0e:5d:d2:7e:54:86:14:a5:
85:43:6a:7f:d8:2d:1a:35:6e:84:a6:9d:55:ea:b9:
22:27:83:0d:5d:e2:18:7d:bc:13:89:65:3a:2f:07:
1f:7f:52:83:5a:58:65:fe:54:64:3f:fa:34:b5:11:
3e:d9:50:47:49:71:4f:0e:49:72:e1:fb:8f:c0:ff:
1d:cb:ac:a4:74:f8:5b:72:5d:0f:fc:0b:83:49:cc:
17:30:36:47:ad:1e:c5:b2:93:c1:e5:56:88:10:b3:
2c:51:0d:ce:61:31:e2:d5:39:f4:fb:ff:a7:0a:33:
35:41:97:df:92:fe:ed:ed:d2:8e:90:7d:8d:85:98:
15:fe:ed:b6:48:7a:61:07:25:b6:7e:59:42:9b:b5:
8b:b4:34:2b:71:e3:7c:87:15:93:25:15:be:a4:85:
7b:4d:fc:d9:e6:76:94:b1:5c:1f:80:87:21:a9:81:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:55:90:1D:9E:E9:A1:06:52:35:AC:5C:5C:74:A4:13:57:0C:DD:A7
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.246.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d9:44:3a:5e:23:1e:88:c4:15:f3:38:7b:ec:75:e9:fb:4c:
3a:51:11:fa:29:79:40:0b:2d:d1:0a:17:96:05:df:e4:1e:eb:
cd:a2:cd:f8:f7:79:1d:cb:92:6a:6f:0f:b1:fb:92:c0:16:4e:
dc:25:1f:2d:be:cd:b8:4b:ba:c1:de:4f:0a:ef:21:f2:27:63:
6b:2f:a0:4c:31:98:05:53:a0:43:89:d9:5f:bb:94:d9:d4:d8:
10:06:54:47:0d:a6:3d:84:6f:64:b0:e7:a3:1f:dc:46:7d:05:
41:7e:ff:b3:a6:00:e0:8f:ef:1f:94:0c:45:50:47:32:62:2a:
be:41:de:37:b9:af:81:de:ac:a3:7c:02:08:b5:16:94:ff:9e:
a8:bf:13:5e:e4:c9:54:7c:1c:bb:48:67:d9:57:1b:15:96:b7:
be:75:16:99:19:4f:80:be:42:57:52:86:ec:c5:66:3a:d0:df:
9d:49:e6:23:79:87:77:8a:13:3d:4d:73:42:7b:80:18:b9:90:
8b:84:56:9b:a2:e4:bd:52:9d:8f:be:b9:7a:61:81:82:12:62:
2b:3b:d7:c4:fb:fd:f3:64:33:0f:ff:01:d2:74:d5:20:73:0d:
7b:b4:71:7a:ca:af:6d:db:72:ea:33:2c:3f:81:f2:00:df:b4:
2c:07:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:13 2025 by rpki-client