Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/mvqabtX_vOansql-seMJOhDdwZw.roa
File: mvqabtX_vOansql-seMJOhDdwZw.roa (raw, json)
Hash identifier: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=
Subject key identifier: 9A:FA:9A:6E:D5:FF:BC:E6:A7:B2:A9:7E:B1:E3:09:3A:10:DD:C1:9C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 01942444CD76080DD9F88A33D7A930F9633F
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/mvqabtX_vOansql-seMJOhDdwZw.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203348
IP address blocks: 193.201.166.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cd:76:08:0d:d9:f8:8a:33:d7:a9:30:f9:63:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9afa9a6ed5ffbce6a7b2a97eb1e3093a10ddc19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:51:89:e5:9f:ae:8c:60:fc:98:97:e7:2c:
24:5a:9d:76:e8:47:25:38:3d:a3:66:50:ef:0b:ca:
6a:25:e5:13:03:72:62:0a:96:94:e0:da:e9:05:f6:
b7:c5:d0:39:05:4b:53:63:5b:85:22:e6:a7:ef:00:
af:60:1b:51:34:02:50:17:11:d1:aa:6c:9c:0d:21:
d3:4b:d6:f1:36:90:e9:0e:ca:b4:c8:b1:55:98:34:
1f:10:26:52:2c:a6:b2:0f:be:f4:4c:3c:9e:5d:76:
b4:98:af:b9:4f:0a:73:77:97:ba:cd:c6:85:bc:b7:
9d:94:7e:98:ad:9d:02:e5:47:93:02:c0:99:7e:d1:
48:91:10:0c:a6:53:de:6b:ec:00:a9:42:c5:26:4f:
91:85:f0:ba:e2:d8:ed:c0:1c:5e:bb:19:95:77:ee:
9c:53:2f:9d:6e:b9:72:e6:9b:71:c2:77:0f:fb:0e:
c6:12:cd:8d:c5:df:54:0b:97:78:86:b9:2c:fc:cf:
79:b6:1a:3a:1e:87:65:e2:a0:1f:b4:79:88:4d:c8:
ec:57:c6:1b:74:f0:97:53:af:42:dd:12:de:9e:da:
5e:7b:d7:03:39:5c:b2:94:95:91:cc:91:34:a6:18:
e0:16:c3:69:e9:e2:57:78:cc:f6:ef:67:70:97:a3:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:9A:6E:D5:FF:BC:E6:A7:B2:A9:7E:B1:E3:09:3A:10:DD:C1:9C
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/mvqabtX_vOansql-seMJOhDdwZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:19:08:da:cb:90:73:cf:12:de:84:45:ce:9f:cf:e6:a4:64:
31:18:99:61:a3:5d:db:9d:ed:10:60:ae:58:99:0f:35:df:64:
00:2f:b3:39:f1:f1:c8:f8:60:b0:be:d2:c8:b2:75:11:99:cc:
70:81:03:f9:5d:ee:76:41:9a:82:79:7f:cf:99:80:2b:82:8b:
a8:ad:ac:df:45:9b:eb:b8:c7:d0:ee:0f:70:32:e0:ea:c0:d2:
a2:05:38:85:9e:7a:25:fd:a0:9b:46:60:02:a4:03:aa:ef:7f:
04:02:97:91:9c:db:af:08:24:e1:a4:d9:7f:63:6d:dd:eb:1f:
9f:6d:66:94:4f:3c:a6:c5:67:8f:21:e5:84:5f:28:77:d1:6e:
18:5a:c4:d5:1e:06:f9:49:27:b4:2b:54:d7:c6:35:27:45:0e:
d6:0a:f0:bf:ef:f9:5e:3b:1a:9f:51:d0:70:89:f3:01:a2:cf:
35:29:89:82:f9:56:75:f1:ad:fc:cc:4a:50:72:77:66:f5:6a:
36:08:04:32:aa:90:6f:3f:94:2b:e5:46:29:1e:65:32:2b:ef:
52:16:93:a8:ff:c9:25:84:4c:cf:dc:27:2a:a9:eb:6e:ad:35:
bc:77:4d:e8:d4:21:f3:88:e0:ee:2f:c8:84:87:90:d4:e4:71:
49:80:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:06 2025 by rpki-client