Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/mYlPJBjSVo-nMdiARP-4qGUEks0.roa
File: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (raw, json)
Hash identifier: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=
Subject key identifier: 99:89:4F:24:18:D2:56:8F:A7:31:D8:80:44:FF:B8:A8:65:04:92:CD
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 0195F6AEDCE5A25092386E9F86B9E5870642
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/mYlPJBjSVo-nMdiARP-4qGUEks0.roa
Signing time: Wed 02 Apr 2025 13:26:49 +0000
ROA not before: Wed 02 Apr 2025 13:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 31.130.242.0/24 maxlen: 24
31.130.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:ae:dc:e5:a2:50:92:38:6e:9f:86:b9:e5:87:06:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Apr 2 13:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99894f2418d2568fa731d88044ffb8a8650492cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:af:45:92:f9:79:3c:bf:3b:f1:54:61:b6:
4c:5e:0f:c9:3b:19:43:2d:28:98:1b:e7:73:7b:6f:
42:96:ec:f8:ac:fa:44:91:1f:cd:79:0c:de:ab:07:
a9:c4:2b:bc:68:50:37:53:b4:d4:5e:46:41:57:24:
44:8b:b2:5d:9b:ce:f4:58:60:0a:6f:4e:c1:8d:61:
02:64:c4:9c:73:8f:44:71:c0:47:12:44:4e:36:16:
44:3b:77:25:5f:f6:f6:7d:72:b4:9c:01:79:2f:f4:
05:60:b5:8a:95:d5:ca:c3:f6:9c:40:1d:06:56:8c:
06:2d:59:45:aa:b6:62:1c:36:ff:2f:e5:fc:9a:f0:
bd:09:93:06:1c:a0:28:cb:71:b7:67:5c:51:13:ca:
fb:6d:31:c0:f3:03:73:20:24:54:5c:15:57:e8:8b:
bb:d3:82:04:f7:3e:79:06:c7:93:6a:69:3d:d3:9e:
ff:14:f7:a7:c8:4d:99:c5:fd:14:18:b6:ed:b1:fc:
57:81:52:b5:c1:bf:8c:da:15:d9:1f:39:c7:57:7e:
a7:a9:05:22:26:f1:76:88:97:2f:cc:e3:c1:e4:af:
bd:28:c1:e6:12:48:91:d4:71:a9:10:5f:31:60:0e:
5d:ce:0c:4b:7a:6a:fa:ed:f4:46:dc:2a:79:65:24:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:4F:24:18:D2:56:8F:A7:31:D8:80:44:FF:B8:A8:65:04:92:CD
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/mYlPJBjSVo-nMdiARP-4qGUEks0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.242.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:c1:d2:cb:e0:16:b6:fe:c9:c0:f8:66:c5:80:b5:cd:61:1c:
fb:59:51:00:86:c4:26:2f:d1:c5:0d:5b:ae:fb:a0:2d:82:ad:
3d:ae:00:75:03:63:25:01:ce:37:3e:a1:6e:7c:f1:cc:37:59:
18:d3:56:91:78:76:17:d8:3c:c4:d5:9c:10:f1:be:cf:cd:b0:
ef:2f:b1:fd:94:92:9e:7e:4b:ba:24:b3:1d:f2:e1:43:c0:4b:
55:af:9f:c7:15:04:41:39:f1:37:86:24:b1:5f:5d:55:a6:c9:
e3:a7:56:b5:2a:9a:a7:16:43:51:79:51:a6:9a:ba:70:8a:f2:
13:f8:57:1f:04:ff:f5:be:6d:79:90:30:8e:da:b7:83:31:96:
61:72:2a:2d:df:8e:1f:eb:99:27:d0:53:0c:2c:57:05:9e:ff:
cb:cc:29:c7:2d:bc:b4:90:f6:18:f8:2a:62:97:22:16:dd:83:
d7:69:00:42:8a:a5:53:82:bb:2a:34:2a:bd:38:da:3e:2a:16:
c7:0b:c1:d8:a6:c7:b4:6b:ca:40:a2:fe:7b:76:07:98:82:cc:
3f:9e:59:a3:9e:de:c8:79:b3:81:11:bd:09:06:17:56:32:f7:
58:50:7c:35:22:a5:c5:14:32:02:28:69:f9:22:96:c0:83:d3:
f2:c4:e4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net