Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/MEvLBKznYJtmItKD78ssXi4mzoQ.roa
File: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (raw, json)
Hash identifier: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=
Subject key identifier: 30:4B:CB:04:AC:E7:60:9B:66:22:D2:83:EF:CB:2C:5E:2E:26:CE:84
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C1AE35295A658FD9960C24D443990
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/MEvLBKznYJtmItKD78ssXi4mzoQ.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201917
IP address blocks: 194.20.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1a:e3:52:95:a6:58:fd:99:60:c2:4d:44:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=304bcb04ace7609b6622d283efcb2c5e2e26ce84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:62:6d:09:f8:e2:aa:9c:38:ca:54:81:77:
c2:09:4f:98:8f:41:96:c2:7f:41:47:5c:f8:ea:dc:
01:3f:57:28:a4:ce:dd:4f:ec:40:0b:b4:f3:e5:4a:
d1:1a:98:98:50:34:33:70:46:55:9d:42:55:e5:bd:
9e:37:a5:91:ab:92:18:67:96:15:54:d5:7e:7e:7f:
4b:06:5c:de:77:1f:44:8e:e7:27:3f:b9:15:6e:f3:
41:aa:cd:2d:3e:e9:ce:2f:3c:3f:7e:8e:04:86:41:
63:b7:66:26:e6:d6:a6:76:f7:c0:94:3d:50:b2:15:
95:8a:58:ed:c4:4d:1b:8b:88:a0:38:e3:66:f9:9a:
fc:00:a7:ae:83:a8:bd:36:9a:09:c7:3b:1b:05:55:
3a:ac:11:37:c9:f7:15:04:7f:fc:44:78:08:c6:77:
c4:87:c2:dc:fe:70:8c:5e:b6:b1:91:2e:e1:8f:1a:
6c:88:07:4a:c6:a8:77:17:cb:a2:50:e5:74:3f:6b:
ad:e1:c4:f3:60:50:3b:f3:04:c9:1f:18:a2:b6:6a:
91:2d:98:dd:44:fc:6d:60:ec:32:2d:20:ed:54:e1:
de:24:75:44:bd:b0:c0:37:98:e3:33:a3:4d:8c:27:
6a:2b:59:00:39:da:c1:c9:4c:ce:10:e1:1b:b6:17:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:CB:04:AC:E7:60:9B:66:22:D2:83:EF:CB:2C:5E:2E:26:CE:84
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/MEvLBKznYJtmItKD78ssXi4mzoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.64.0/20
Signature Algorithm: sha256WithRSAEncryption
74:ec:21:18:ce:05:b8:49:a4:c0:ef:3a:26:f9:e5:ab:a9:0f:
60:88:cf:e3:22:9e:31:e3:c4:ff:dc:fb:d9:c5:50:aa:8d:94:
ee:54:50:3a:1d:f9:0c:fa:3f:64:83:b8:3f:42:b0:49:5d:21:
5c:ed:c1:af:67:8a:5f:a5:6c:e8:95:64:38:c6:96:0a:ec:8a:
7f:87:05:20:16:d1:bb:08:01:08:9c:80:b3:2b:e4:51:cf:8b:
8f:ab:e3:df:f1:72:6b:e6:73:75:7b:f8:51:9e:68:36:ba:b2:
23:07:46:e6:98:f7:45:1f:17:91:e7:ae:44:c4:05:8b:f1:96:
e0:21:8c:d0:93:b8:7b:e0:20:d0:3e:00:b6:1d:90:a1:3d:b2:
13:8b:88:1b:7c:b2:71:2c:57:a1:27:8d:ef:f2:86:28:88:2c:
a9:bd:de:d9:61:e1:c2:ea:09:01:c8:3d:1f:10:56:ff:7a:17:
ef:84:c8:3a:73:d1:6a:77:8d:aa:b6:93:c2:dd:3f:28:71:a7:
5b:f2:c3:b1:af:23:a4:ef:6c:63:cd:82:2c:38:aa:01:e8:eb:
2c:75:26:f7:59:8d:cf:19:31:3e:c6:6c:69:59:83:c5:a4:55:
42:db:3e:9e:db:6f:8b:02:22:d1:66:e2:96:aa:5b:60:20:3c:
14:31:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:38 2025 by rpki-client