Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/M8fpAx6jpgG6MlSmE255nM2U54s.roa
File: M8fpAx6jpgG6MlSmE255nM2U54s.roa (raw, json)
Hash identifier: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=
Subject key identifier: 33:C7:E9:03:1E:A3:A6:01:BA:32:54:A6:13:6E:79:9C:CD:94:E7:8B
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019420D5992D9AB32A15955268079614281F
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/M8fpAx6jpgG6MlSmE255nM2U54s.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42814
IP address blocks: 193.8.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:99:2d:9a:b3:2a:15:95:52:68:07:96:14:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33c7e9031ea3a601ba3254a6136e799ccd94e78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:e5:10:0b:62:46:4a:0f:f9:4b:1a:a1:d8:
89:d4:9b:41:08:29:c5:5c:97:f0:82:5b:9d:41:60:
4e:d5:89:42:56:53:7b:6a:99:b0:21:b8:a2:5e:6c:
1c:d2:42:fc:84:e0:ae:d5:ec:4a:69:5e:fc:e4:3f:
3f:a8:eb:5c:0b:c6:f8:20:77:b0:9b:96:52:7d:ce:
e3:ac:c8:e0:cf:53:ca:3c:e0:d7:b3:60:8e:76:97:
e3:b3:1f:03:38:bf:cc:bf:e8:d4:19:d6:5b:ee:74:
de:0d:52:49:1f:64:8e:93:25:df:a7:15:d2:31:f0:
6d:02:65:3c:c2:83:0e:34:db:51:f2:11:15:c7:64:
57:fe:ae:40:1f:7d:26:be:51:87:5d:20:2e:8a:52:
d0:b3:a6:e2:3c:a9:12:88:34:67:a3:f7:0b:61:d0:
07:e4:83:81:5d:84:79:e0:1d:2a:0c:1e:e4:55:c9:
18:b6:a7:94:0b:aa:18:25:bf:3f:da:f1:9c:79:76:
20:18:21:a2:06:62:da:72:07:85:08:ae:0f:97:e7:
52:e2:e8:b5:81:09:4f:05:73:d2:c6:a8:bb:aa:dc:
e8:e9:cd:c5:3f:b0:04:1d:06:c9:7a:91:d3:93:2c:
f0:45:6a:38:ee:df:97:1b:a5:f6:8d:5d:fb:05:23:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:E9:03:1E:A3:A6:01:BA:32:54:A6:13:6E:79:9C:CD:94:E7:8B
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/M8fpAx6jpgG6MlSmE255nM2U54s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.248.0/24
Signature Algorithm: sha256WithRSAEncryption
50:be:33:4a:c2:89:9e:7e:94:2c:24:1d:cf:25:91:c6:84:00:
ed:90:de:7e:45:93:de:20:34:e0:a9:af:b8:bf:54:22:35:6e:
81:39:19:94:ee:51:97:8c:57:75:ac:0a:4b:53:60:b3:c5:27:
c2:26:26:dd:9b:28:fe:0c:7a:75:7d:6e:7a:36:2f:71:7e:b3:
2f:71:d5:f9:9f:a1:2c:f6:ad:38:4b:4f:1c:b8:9d:55:b4:5f:
fc:dd:ee:e4:06:87:26:d1:30:63:32:f4:51:a8:cc:2a:70:5d:
ac:41:e1:a5:5c:9e:d6:31:75:85:de:22:8e:14:71:fd:40:80:
5d:85:44:25:ab:90:f9:e1:f6:7a:92:ea:11:b8:a6:f7:d0:18:
40:e0:af:0b:28:cf:75:58:d0:05:47:ba:85:bd:66:cb:aa:1c:
20:11:8c:f2:80:47:27:fc:75:ba:81:89:e4:10:72:81:1c:27:
8f:5c:29:2f:60:05:ab:ea:23:a5:50:e0:b2:93:4a:75:2d:e7:
92:0d:f5:2d:1a:fc:ff:2b:a1:46:58:82:c6:05:bd:aa:7d:b9:
a4:c0:23:fc:01:bd:c4:4d:1e:90:d2:12:00:b1:b5:c5:35:6d:
8d:69:78:aa:fc:97:58:94:52:a0:92:d1:8a:75:48:7d:4b:c7:
6c:d8:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:05 2025 by rpki-client