Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Melq7PLQcz-P184ktmpNOP2H3e4.roa
File: Melq7PLQcz-P184ktmpNOP2H3e4.roa (raw, json)
Hash identifier: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=
Subject key identifier: 31:E9:6A:EC:F2:D0:73:3F:8F:D7:CE:24:B6:6A:4D:38:FD:87:DD:EE
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C1AA4A8E39A7D28FF702AFC097A36
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Melq7PLQcz-P184ktmpNOP2H3e4.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51276
IP address blocks: 93.125.70.0/24 maxlen: 24
213.184.247.0/24 maxlen: 24
217.21.50.0/24 maxlen: 24
2a04:2e80:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1a:a4:a8:e3:9a:7d:28:ff:70:2a:fc:09:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e96aecf2d0733f8fd7ce24b66a4d38fd87ddee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:03:1b:e3:63:fb:97:a6:d7:eb:93:70:e7:
32:61:ac:8c:ab:fb:1b:71:65:4a:4f:a5:91:c6:6f:
75:bb:bc:e5:0d:02:d8:1d:be:d7:49:aa:5f:57:9f:
f9:8b:31:30:c7:c7:d9:0f:7e:9e:f8:4b:8e:51:4f:
6f:17:c0:3d:c2:31:d0:c3:5d:04:ec:8d:dc:20:56:
57:f7:aa:b3:a7:7e:0d:db:57:a3:41:2f:7d:2b:cd:
29:14:71:d0:ea:09:21:17:82:82:0e:4d:0a:bf:e9:
58:5c:ed:56:fa:a4:6e:e6:83:9a:ad:aa:b3:6c:05:
d7:ec:10:90:0c:be:23:df:da:5b:54:31:b3:af:6d:
09:76:54:78:a4:ef:00:c5:a3:e7:a7:e1:54:e6:02:
44:dd:69:69:dd:ae:36:13:80:67:c7:23:7e:bb:dc:
ef:6d:f8:a5:95:9f:12:57:2e:11:b4:5f:72:eb:f1:
9e:95:41:85:ad:82:7d:2d:8b:51:a2:6a:cb:95:2e:
4d:67:ac:67:83:c9:9c:e0:10:e2:07:cb:79:a1:24:
61:dc:b4:ba:4f:92:c1:57:41:0a:0d:15:a0:76:39:
73:6a:58:aa:40:ca:74:b9:33:80:d8:23:c4:51:3f:
c0:f2:ce:c0:4f:a6:a2:de:55:a4:7a:e4:75:e3:24:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E9:6A:EC:F2:D0:73:3F:8F:D7:CE:24:B6:6A:4D:38:FD:87:DD:EE
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Melq7PLQcz-P184ktmpNOP2H3e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.70.0/24
213.184.247.0/24
217.21.50.0/24
IPv6:
2a04:2e80:8::/48
Signature Algorithm: sha256WithRSAEncryption
38:3e:d2:4b:6b:81:30:a6:c3:42:61:1a:55:45:9f:8b:cf:9b:
0a:c9:e9:89:29:7c:f3:f4:b8:23:eb:eb:25:e6:70:68:d7:1b:
ed:37:55:91:7d:37:50:c8:03:46:1d:5f:2a:78:ba:7b:f0:42:
db:07:61:6c:40:80:83:b3:ce:31:86:54:36:55:3b:73:86:33:
c7:86:46:eb:a2:47:47:33:38:66:c6:7f:c6:d3:56:ea:32:64:
cb:dd:4a:a2:90:5e:06:58:79:9f:42:1b:13:53:40:06:cb:11:
ca:c2:f2:fb:63:62:0a:9c:90:1e:d5:74:c8:d8:55:dc:d1:92:
38:7c:d7:f1:31:c3:79:3c:68:f5:36:08:98:37:c9:72:fb:89:
44:e7:0a:d6:4a:7f:4e:13:93:82:68:08:1f:ac:89:67:98:d9:
79:60:b1:89:a8:4e:c1:36:9a:8f:da:3a:fc:5e:9b:f5:d0:ab:
b1:a8:9d:07:61:52:07:ef:ef:11:b1:0f:df:66:74:b8:b4:32:
71:95:6f:62:ac:57:86:99:09:8e:5a:ed:57:06:5c:48:1d:f6:
1b:a4:6b:6a:bf:d4:d0:35:f6:33:7f:7e:ff:01:82:07:58:f6:
42:37:94:15:54:97:0c:24:34:ad:b5:2f:68:49:c5:df:39:94:
27:a3:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net