Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa
File: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (raw, json)
Hash identifier: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=
Subject key identifier: 31:F3:24:09:4A:FB:1D:0E:8A:C6:AC:96:13:34:15:98:A4:9B:8A:7F
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 0194221F779F9ED0252A3C7B725D3A49B570
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29050
IP address blocks: 93.187.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:77:9f:9e:d0:25:2a:3c:7b:72:5d:3a:49:b5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31f324094afb1d0e8ac6ac9613341598a49b8a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:16:cc:7f:67:f0:c2:c1:d7:fc:6a:dc:f7:
0e:40:52:0f:fa:89:39:4b:90:24:7d:b1:4e:a2:25:
8b:ce:78:b2:40:74:91:d5:13:4c:40:b5:30:ce:c2:
2a:bc:ee:7c:76:43:86:ad:99:e4:25:f8:94:a0:e5:
32:4b:51:ae:23:9c:73:36:d4:6f:d3:68:9c:4d:39:
86:6e:4a:ab:86:ca:7b:a6:92:74:8a:dd:23:c0:a3:
76:92:48:dd:93:fc:a0:dd:e6:76:3b:41:35:78:d6:
d3:de:9e:95:7d:ef:32:ce:8f:13:1b:d5:c1:a9:aa:
20:df:a0:a1:9a:99:16:59:5e:66:9d:50:42:45:15:
7d:96:5f:d4:18:7b:b8:a0:6f:cc:05:55:14:60:c2:
1d:38:31:59:22:d0:57:62:60:de:b0:d7:ff:db:c7:
65:7c:0a:e1:ee:68:0b:6c:fe:9d:d9:54:df:e0:07:
18:0d:d8:64:71:e6:66:0b:e3:28:67:e7:09:94:49:
84:b6:d0:fb:2d:43:51:01:b8:57:d9:58:b6:3b:18:
01:d0:07:af:ba:9b:fa:26:86:cf:bd:c2:86:77:4c:
b1:b4:b9:d4:1b:8e:6c:97:95:e2:fd:c7:5a:9d:9c:
fe:68:6b:2d:58:68:7d:38:8f:6c:ff:4a:84:93:1d:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:24:09:4A:FB:1D:0E:8A:C6:AC:96:13:34:15:98:A4:9B:8A:7F
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.28.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ab:c6:6b:61:30:d4:55:56:a0:0b:fa:d5:4f:96:10:ce:bd:
5c:10:55:6f:a3:df:76:6c:ba:38:bf:cd:61:99:14:c3:8e:00:
4a:60:1d:bd:54:d2:c8:17:77:0c:c1:da:e5:33:30:88:55:98:
2f:8e:0a:9a:7e:fd:3f:b9:80:a7:f7:43:ee:0a:2e:a0:b9:23:
c8:0c:1a:4e:5c:77:24:d9:71:ad:13:3c:31:0d:0e:c0:4b:5a:
5c:5b:df:4c:18:24:ae:9b:a6:64:0e:9c:99:3c:c5:ba:7c:c6:
42:4f:b4:1d:ec:01:22:c2:e1:3c:fe:06:dd:3d:24:23:8f:cc:
07:49:d3:93:fa:f5:e3:14:5c:60:23:ec:38:f2:8f:c4:2f:30:
54:25:7d:cf:be:62:5f:e2:68:0b:9d:63:ba:00:75:07:ab:75:
bd:f9:5d:6a:29:e2:61:47:b6:d8:db:c8:3d:58:8a:08:3c:cd:
7c:30:47:b3:54:44:ec:0f:d7:38:4d:12:7a:7b:44:87:50:21:
1c:a0:a2:82:fc:1e:f8:39:9d:70:3c:7e:15:21:5f:d8:62:07:
42:49:dd:d0:a2:5e:de:eb:8d:bd:43:5e:e0:f3:3f:30:7a:d7:
b8:d2:f0:b4:76:da:15:00:b7:40:75:86:63:6e:c6:e0:ab:09:
fc:13:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:23 2025 by rpki-client