Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa
File: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (raw, json)
Hash identifier: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=
Subject key identifier: 9B:0F:8D:7C:51:11:3C:3D:AA:69:85:60:12:35:1C:35:0D:33:70:FB
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 01942521EC1BDBCFEDEC2E30779A02C3A13F
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198006
IP address blocks: 185.82.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ec:1b:db:cf:ed:ec:2e:30:77:9a:02:c3:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b0f8d7c51113c3daa69856012351c350d3370fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:fb:b9:bd:6e:06:31:cd:6d:3f:99:2b:d5:
c6:56:d7:b7:3d:6e:75:fa:4f:73:19:34:67:b2:f4:
2b:85:8d:26:c3:75:36:b8:b8:fb:b0:5c:00:08:7b:
b4:76:3c:26:73:12:d7:4e:2e:cd:ae:67:a1:09:a2:
ee:49:03:44:4f:f7:99:ab:43:b8:2b:6e:fe:e1:1e:
4d:45:27:38:e3:57:db:75:f3:3a:4f:21:ce:57:0c:
93:12:6a:10:86:12:e2:9f:76:66:7c:f3:5b:dd:f7:
88:11:b8:04:bf:da:91:8f:9c:9e:5d:ab:d8:97:c7:
f5:16:a0:6b:95:77:fb:28:b0:3d:7e:5a:9a:ff:b6:
96:87:63:26:e5:32:ca:91:ee:08:1b:43:b2:bd:a8:
e6:40:5a:d3:3f:8b:a8:a7:f4:98:bc:21:90:5b:c4:
06:d6:89:07:92:8f:28:52:bf:8f:9b:39:6c:b6:7b:
83:ad:12:06:0a:d6:91:90:80:09:0f:24:57:a1:0b:
9a:bc:4e:c2:dd:8e:dd:28:8d:0f:e4:67:ce:c0:1d:
8b:7c:2e:7d:29:3a:7e:30:a8:f3:38:71:3e:ee:74:
ed:ff:53:34:1c:46:f4:3a:35:fa:6b:b6:39:7d:af:
d5:86:6d:ed:e7:b2:c2:4c:ad:cd:b3:53:4d:8f:47:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0F:8D:7C:51:11:3C:3D:AA:69:85:60:12:35:1C:35:0D:33:70:FB
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.154.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4f:3e:41:c4:1c:c1:23:20:5c:d2:be:c6:75:8f:9f:4d:ae:
45:fa:aa:ca:24:b4:bd:d8:fe:6c:71:82:7a:2d:a5:cf:e4:87:
38:88:2d:c2:62:b5:5b:ed:d5:a2:c3:f8:44:ef:69:9b:65:77:
78:a6:b2:2f:f6:46:ea:c5:9c:12:06:c1:62:5b:de:ea:d7:e4:
5a:63:8d:fb:78:27:24:e3:b8:e0:5f:e9:e9:78:36:58:72:bb:
47:f0:d1:aa:c0:89:7a:25:fd:70:ff:20:9d:a4:dc:fb:be:b1:
1e:88:d3:94:7a:d0:e0:79:ef:f8:e1:d2:e2:95:4d:dc:b9:d9:
fe:cb:d5:ad:e3:8d:b5:d8:71:a0:94:79:d1:1b:78:60:64:ea:
bd:98:46:68:56:13:e1:d2:dc:c0:81:c6:84:7e:11:90:90:9a:
7a:2c:47:c0:17:1b:db:74:7d:8f:3e:e9:a7:eb:83:13:fa:d8:
89:06:c6:7e:7b:2a:bd:71:13:19:aa:df:36:15:5d:1d:3c:78:
05:b8:98:ec:11:79:a5:d5:f4:60:0d:95:f7:d0:6e:a7:b6:f8:
21:c0:27:4f:d9:e4:7a:3a:6d:c4:6a:cb:88:92:ec:95:62:43:
7d:45:8a:ea:0a:f4:40:fc:42:76:7b:40:48:13:37:7e:a2:00:
ea:45:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:34:24 2025 by rpki-client