Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/1MBxY-L-G-PezNdSAum2Qznjvvk.roa
File: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (raw, json)
Hash identifier: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=
Subject key identifier: D4:C0:71:63:E2:FE:1B:E3:DE:CC:D7:52:02:E9:B6:43:39:E3:BE:F9
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0194228D8D731700C5285CF94AF70F09E9BB
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/1MBxY-L-G-PezNdSAum2Qznjvvk.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39912
IP address blocks: 194.34.226.0/24 maxlen: 24
2a0d:f9c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8d:73:17:00:c5:28:5c:f9:4a:f7:0f:09:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c07163e2fe1be3deccd75202e9b64339e3bef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:3f:64:88:1e:dc:94:87:cf:fe:eb:e1:13:
e6:e3:7b:0c:87:b3:84:78:45:1b:b6:e6:07:fa:50:
2d:21:52:80:9d:55:f1:6a:d8:cc:bd:36:1a:27:0a:
f7:6d:5a:18:fa:e5:39:2a:0d:82:71:86:ac:ad:20:
ac:a7:db:5c:ea:b7:02:50:22:a2:50:e8:40:ca:97:
66:47:e3:43:3c:13:44:6f:59:b7:23:57:53:06:04:
81:a6:5b:65:75:6f:5c:e8:21:cd:61:fc:b6:f1:a0:
41:09:72:f3:c3:be:5d:65:a9:55:26:7d:ae:1b:78:
b5:41:e2:3b:54:92:32:44:2d:46:0c:75:e3:82:bd:
70:19:ef:2a:74:12:70:be:e1:59:34:75:2b:32:77:
35:80:8a:98:b7:0e:c1:d0:00:10:ad:ec:52:c5:56:
9a:6e:9f:35:d2:39:77:fc:7a:16:42:b6:72:fc:0e:
0a:3b:6f:3a:34:03:68:96:a9:96:ef:b3:f2:e2:76:
fa:c4:b8:7b:a6:96:34:5e:e8:54:2a:f9:d3:b9:b2:
59:44:66:72:90:5c:c5:cb:bd:01:b9:3d:bb:0f:5e:
31:52:63:21:8c:f2:e7:61:f0:ba:f4:94:72:75:72:
0b:63:b3:1c:e5:e7:b0:d8:a9:d9:66:43:a1:f8:8e:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:71:63:E2:FE:1B:E3:DE:CC:D7:52:02:E9:B6:43:39:E3:BE:F9
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/1MBxY-L-G-PezNdSAum2Qznjvvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.226.0/24
IPv6:
2a0d:f9c2::/32
Signature Algorithm: sha256WithRSAEncryption
af:c6:97:4b:d5:ac:09:21:ef:e3:12:14:97:a4:44:f0:02:8b:
55:c7:4b:f6:bc:60:72:4d:6c:6d:d6:c4:e8:43:dd:c6:51:f1:
a1:50:ef:76:ea:cd:df:33:fb:95:52:11:aa:20:37:3c:f3:b4:
29:f6:cf:0d:22:6f:8f:7b:e2:c0:a6:4e:07:6d:cb:c0:c0:d0:
4d:64:26:92:c3:76:87:1d:0f:d6:51:3e:5a:bb:c0:aa:eb:8a:
66:c5:fa:63:56:a6:29:51:c3:e2:92:e5:9c:97:7d:4f:94:fd:
fb:32:18:4d:d8:4a:24:18:53:a6:9a:c0:65:1d:06:0b:3b:08:
83:94:c7:ac:18:be:ce:3d:f9:e9:45:46:55:b5:5d:76:3e:28:
49:6c:08:b0:a8:a0:f8:d4:fb:55:40:15:f8:2f:cd:3f:f9:57:
65:8d:09:e6:15:3c:32:29:fa:43:b4:ac:dc:7a:91:4d:da:10:
b9:17:d7:d3:a2:8a:aa:11:fb:2f:5c:8f:09:61:3b:05:a2:0e:
51:ba:e5:c6:8b:ac:7e:46:02:a5:ec:4e:61:b0:a5:c9:19:3c:
f1:48:a1:47:ea:73:ba:0f:ca:59:38:97:42:96:3b:6e:91:a8:
f2:e0:39:59:1c:92:a4:bf:4b:1a:0b:5a:39:b5:fd:56:de:43:
73:ec:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:39 2025 by rpki-client