Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/MCU3b2xVwihTn4iMijHbh_JRyVI.roa
File: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (raw, json)
Hash identifier: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=
Subject key identifier: 30:25:37:6F:6C:55:C2:28:53:9F:88:8C:8A:31:DB:87:F2:51:C9:52
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019425223429C3745AAF37D5EC442AC8C670
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/MCU3b2xVwihTn4iMijHbh_JRyVI.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208984
IP address blocks: 5.102.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:34:29:c3:74:5a:af:37:d5:ec:44:2a:c8:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3025376f6c55c228539f888c8a31db87f251c952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:fd:0b:2b:dd:e0:0a:4f:80:48:43:62:4e:
43:0e:20:4e:4b:8d:8d:83:ed:55:84:8c:2d:7a:6e:
d8:f0:22:3f:c9:89:ec:27:64:e6:12:0c:f6:5f:c8:
e1:7a:86:87:86:74:26:be:3a:f5:0c:b6:3a:99:dc:
87:23:17:16:06:a4:21:17:19:96:86:b2:08:38:3f:
e8:12:de:c3:34:9c:cf:bb:d3:da:81:a2:36:39:9d:
75:a6:4d:9a:c3:a2:e4:2a:1e:dd:74:96:49:0e:17:
b7:f1:63:8f:bc:bd:ea:12:be:c1:32:d8:9f:c2:65:
9c:48:7f:3a:01:9c:d1:1d:9f:13:d1:db:bb:ac:da:
e9:aa:76:d6:1b:c1:ca:e9:5e:b3:5d:34:53:d3:68:
95:ce:a8:eb:71:6e:47:e7:45:c7:ae:e3:57:fa:47:
64:18:e2:fa:4b:c8:40:9d:66:bc:47:b8:48:6f:af:
72:01:ea:f4:31:10:1b:34:80:36:e6:43:99:99:f7:
cd:b6:3b:56:fe:b5:9d:91:0f:ce:ab:1a:a8:b0:48:
31:22:80:37:b0:50:53:7e:1d:e2:0a:81:4f:21:23:
84:77:c6:de:62:40:74:ec:53:50:2d:fe:cd:98:b3:
1c:a6:dd:64:d8:fb:00:8c:70:78:04:a8:70:0c:d1:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:37:6F:6C:55:C2:28:53:9F:88:8C:8A:31:DB:87:F2:51:C9:52
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/MCU3b2xVwihTn4iMijHbh_JRyVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.44.0/24
Signature Algorithm: sha256WithRSAEncryption
37:18:ed:5d:29:9a:c9:36:f4:6d:13:cb:cb:84:32:40:ef:8b:
02:a3:c5:e3:8b:27:1f:90:92:b8:de:60:d0:66:35:50:e7:a6:
ef:9b:37:e5:b7:88:cc:e6:2d:ac:60:21:9a:f0:b0:3b:2e:de:
45:d9:ce:0e:2f:82:7b:20:e9:29:b1:df:38:19:7f:bf:5d:d2:
a8:f7:1a:03:7d:6e:06:71:4d:de:ed:1f:c3:8b:a3:24:81:2d:
07:32:07:18:8b:ec:ce:87:f3:db:1a:31:e1:d8:16:1d:90:94:
37:63:69:81:c8:4c:9d:80:ec:e7:c3:9c:b0:b7:db:c8:69:a0:
7a:bc:44:8f:d4:55:10:41:0d:39:1d:39:bd:84:2a:6b:ac:47:
43:32:7d:ea:9f:9f:b8:e7:40:ec:b3:b2:88:e7:b4:16:c8:3b:
9a:ce:68:19:e2:f9:13:91:dc:e9:4c:c0:be:92:53:45:e8:e1:
30:86:12:d5:30:ca:2c:ff:6b:b4:f5:7d:ea:89:ed:b5:69:55:
5c:a3:08:e0:57:e2:25:d0:bc:1e:29:95:55:ee:09:b5:26:27:
2e:77:bc:c7:02:61:80:0f:35:04:d6:aa:36:ed:81:57:da:30:
88:d3:ae:19:c8:3d:14:1b:fa:a1:88:74:91:2a:73:80:ce:64:
bb:aa:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:37 2025 by rpki-client