Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/MXRY_gWfemtb4d9S12bJTdSx1HE.roa
File: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (raw, json)
Hash identifier: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=
Subject key identifier: 31:74:58:FE:05:9F:7A:6B:5B:E1:DF:52:D7:66:C9:4D:D4:B1:D4:71
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 01942444CFF5625C71CB4849E25431865B61
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/MXRY_gWfemtb4d9S12bJTdSx1HE.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42783
IP address blocks: 194.0.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cf:f5:62:5c:71:cb:48:49:e2:54:31:86:5b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=317458fe059f7a6b5be1df52d766c94dd4b1d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:ae:b6:f4:d2:60:a8:56:a0:53:d8:e8:e8:
ed:0a:43:98:31:a2:1a:ad:e6:29:c8:b0:1a:97:dc:
2b:c5:70:e1:57:65:b4:e0:de:f2:c2:82:ca:79:2d:
a0:57:68:8a:3a:7e:a8:fa:4e:0d:ca:36:2b:d6:79:
ca:7e:30:81:dd:a8:73:c0:74:ba:f7:22:e4:c6:bd:
26:f8:24:3a:fe:76:eb:94:82:3a:2e:12:c6:67:30:
52:66:e9:d7:46:c7:80:3a:a7:62:da:98:34:8a:3e:
4e:ae:dc:f9:a6:52:23:b0:d4:67:37:a8:01:18:05:
20:d8:06:15:b8:79:0c:1e:a4:fe:0e:e3:d3:8a:36:
ad:05:8a:30:17:9c:98:5f:cb:8b:18:c3:07:f9:dd:
da:21:df:b7:c5:8a:91:ad:00:ff:0d:a5:ea:41:e9:
54:8a:d8:78:fe:1d:5e:80:b5:ae:5e:db:01:32:cd:
6d:84:d2:70:a2:9a:89:55:83:5f:7b:85:7a:98:7b:
da:18:1a:44:1b:91:0f:87:b6:91:ad:17:ee:1d:ce:
79:a7:58:c0:99:e1:2d:8c:f8:65:a9:78:88:1f:ae:
f4:21:1c:eb:8d:fe:2d:d5:b2:07:da:06:56:27:50:
76:bf:79:1e:a5:2d:62:f3:d5:1b:d4:6d:f1:3d:2a:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:58:FE:05:9F:7A:6B:5B:E1:DF:52:D7:66:C9:4D:D4:B1:D4:71
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/MXRY_gWfemtb4d9S12bJTdSx1HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d7:2f:c5:8c:7f:27:ee:e4:3b:62:45:02:ef:80:bb:09:a7:
8b:6e:68:76:c2:d3:8c:2b:82:70:84:67:f1:b1:2b:3b:e2:1c:
c7:a9:6b:01:ac:02:04:a6:3c:1c:65:62:c9:91:27:23:5d:6b:
db:4c:2f:dc:4a:68:ed:4b:c4:81:00:a8:fe:58:88:14:b7:3b:
9d:61:ea:17:00:ba:86:64:9e:6c:65:28:40:5a:b7:9b:69:e9:
37:8b:b4:ad:eb:f1:6d:cf:14:b5:d3:95:ef:bc:d3:96:61:a7:
6b:49:49:f5:42:d7:c7:17:64:23:6a:32:94:05:1e:d4:da:4f:
15:14:11:d5:7b:c5:df:19:8a:eb:32:7c:28:3c:d8:51:dd:bd:
71:64:53:3e:1e:ce:0a:a6:4e:63:5c:d2:13:08:ec:2a:26:9f:
b6:ca:cc:e9:3e:5f:3e:3c:91:18:9d:69:c4:ea:45:c9:1b:97:
59:b2:62:8a:ea:e9:e8:e5:eb:5d:c2:3c:e2:a0:a1:6d:73:0a:
fb:c2:0b:0d:86:99:63:cc:cc:62:4a:e3:71:6e:58:3d:64:5c:
25:68:db:00:03:02:6b:f1:20:b2:5e:ff:86:e2:1e:07:e7:97:
7d:7f:9b:98:9c:bb:23:dc:cc:ce:da:2a:d3:cb:ce:76:e2:75:
98:81:58:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRM/1Ylxxy0hJ4lQxhlthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMGFiMjg2ZGFlOGQ4Y2I1ZjZmYzRlZWMzZjMyMzgxNGM4
N2Y1YmUwHhcNMjUwMTAxMjM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTc0NThmZTA1OWY3YTZiNWJlMWRmNTJkNzY2Yzk0ZGQ0YjFkNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh6utvTSYKhWoFPY6OjtCkOYMaIa
reYpyLAal9wrxXDhV2W04N7ywoLKeS2gV2iKOn6o+k4NyjYr1nnKfjCB3ahzwHS6
9yLkxr0m+CQ6/nbrlII6LhLGZzBSZunXRseAOqdi2pg0ij5Ortz5plIjsNRnN6gB
GAUg2AYVuHkMHqT+DuPTijatBYowF5yYX8uLGMMH+d3aId+3xYqRrQD/DaXqQelU
ith4/h1egLWuXtsBMs1thNJwopqJVYNfe4V6mHvaGBpEG5EPh7aRrRfuHc55p1jA
meEtjPhlqXiIH670IRzrjf4t1bIH2gZWJ1B2v3kepS1i89Ub1G3xPSrRYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDF0WP4Fn3prW+HfUtdmyU3UsdRxMB8GA1UdIwQY
MBaAFHEKsoba6NjLX2/E7sPzI4FMh/W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2Yjkt
N2JmOTY4MzJlMWVhLzEvTVhSWV9nV2ZlbXRiNGQ5UzEyYkpUZFN4MUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2YjktN2JmOTY4MzJlMWVh
LzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgDmMA0G
CSqGSIb3DQEBCwUAA4IBAQBO1y/FjH8n7uQ7YkUC74C7CaeLbmh2wtOMK4JwhGfx
sSs74hzHqWsBrAIEpjwcZWLJkScjXWvbTC/cSmjtS8SBAKj+WIgUtzudYeoXALqG
ZJ5sZShAWrebaek3i7St6/FtzxS105XvvNOWYadrSUn1QtfHF2QjajKUBR7U2k8V
FBHVe8XfGYrrMnwoPNhR3b1xZFM+Hs4Kpk5jXNITCOwqJp+2yszpPl8+PJEYnWnE
6kXJG5dZsmKK6uno5etdwjzioKFtcwr7wgsNhpljzMxiSuNxblg9ZFwlaNsAAwJr
8SCyXv+G4h4H55d9f5uYnLsj3MzO2irTy8524nWYgVjG
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:43 2025 by rpki-client