Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/mjQr1y7CThAMWtspCv07qky-Fa8.roa
File: mjQr1y7CThAMWtspCv07qky-Fa8.roa (raw, json)
Hash identifier: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=
Subject key identifier: 9A:34:2B:D7:2E:C2:4E:10:0C:5A:DB:29:0A:FD:3B:AA:4C:BE:15:AF
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 019420684EB5F19C4710DCE5B4EA4E041FED
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/mjQr1y7CThAMWtspCv07qky-Fa8.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20703
IP address blocks: 193.104.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4e:b5:f1:9c:47:10:dc:e5:b4:ea:4e:04:1f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a342bd72ec24e100c5adb290afd3baa4cbe15af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:b0:e0:d8:90:db:b9:60:01:18:36:9b:12:
90:be:62:b0:08:0b:d8:5d:f3:e9:b0:21:d0:ca:7b:
b2:d3:bf:d3:3c:7a:18:73:3d:95:db:3a:f4:1d:d1:
e3:a1:ad:fe:49:94:dd:6e:72:22:f6:a8:b8:a5:d5:
5b:19:a2:24:02:43:98:80:89:b9:9f:09:99:54:ab:
01:57:25:54:99:b7:f1:28:54:a7:fe:cd:5e:19:78:
dd:00:13:bd:9d:f8:0b:c2:b9:8e:74:0f:c3:77:27:
35:e1:b7:91:44:79:e0:8c:7c:2c:31:be:32:55:7e:
26:d7:7b:4b:d7:7a:8c:af:62:83:b1:27:a0:ee:39:
11:1f:7a:e5:99:41:49:b7:4e:f8:92:b3:ac:c8:4d:
f5:17:96:b4:7e:56:89:5c:72:be:47:75:da:da:c5:
7d:69:d7:a6:ab:a8:87:a1:a9:a5:75:9d:80:0a:9b:
c8:0a:08:e2:24:44:37:77:ea:8e:92:40:c4:ab:98:
41:60:20:4b:16:ac:1d:75:d2:b6:61:9c:93:6d:ae:
43:6b:e2:92:b2:d1:9e:f8:43:d3:7b:9b:27:c4:dd:
21:19:9b:ea:10:b6:8c:b2:8f:35:11:5c:0e:8a:8e:
d8:15:2f:68:ac:38:70:de:cd:b0:8d:ce:06:76:03:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:2B:D7:2E:C2:4E:10:0C:5A:DB:29:0A:FD:3B:AA:4C:BE:15:AF
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/mjQr1y7CThAMWtspCv07qky-Fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.30.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9c:73:20:33:1e:9b:dc:66:be:3d:b0:98:fb:37:de:4d:61:
01:96:15:95:a8:83:54:7e:be:25:10:2b:59:f4:ca:5a:f6:5c:
01:66:46:7a:e6:67:91:a5:7e:fe:5c:c5:4c:8c:ca:19:84:92:
25:87:af:77:87:13:2c:70:3a:79:22:ea:b6:37:eb:59:06:aa:
4c:2f:50:84:63:cb:e7:f2:55:30:aa:22:83:dc:f5:ee:11:69:
1a:e9:11:48:ab:52:a5:93:57:63:0b:2a:8b:8b:b5:9b:02:40:
9b:04:5a:1d:50:20:00:11:fc:ee:8f:d7:68:1c:2e:81:af:12:
79:23:fc:ba:ab:ef:2a:24:bf:1e:d5:70:bd:82:9a:10:e9:74:
46:47:3e:f3:5a:0e:f3:17:4c:8c:d2:49:c8:ee:60:92:ce:1e:
11:33:5f:bb:dd:8c:a2:db:d5:7c:b8:68:c4:00:f5:9d:85:4f:
21:e2:a6:c5:c2:f7:4a:45:f2:ce:a2:47:40:f2:7d:53:55:97:
01:72:50:00:62:0c:e6:7a:25:e7:c7:6d:30:2e:2e:56:7b:db:
4b:e4:0e:d7:30:9d:e5:7a:4e:15:4c:24:b7:12:21:53:23:1b:
ed:f4:97:ee:dd:b0:c4:e6:a9:96:52:6e:7a:d9:e3:a2:4f:3f:
9b:c1:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:34 2025 by rpki-client