Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa
File: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (raw, json)
Hash identifier: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=
Subject key identifier: 31:34:F5:21:AF:4B:38:09:B7:BE:81:7E:B4:A9:46:8E:68:05:00:F2
Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial: 019427B65F432A2D738C4BB8D7D541B33831
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa
Signing time: Thu 02 Jan 2025 15:50:50 +0000
ROA not before: Thu 02 Jan 2025 15:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50134
IP address blocks: 194.246.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5f:43:2a:2d:73:8c:4b:b8:d7:d5:41:b3:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Validity
Not Before: Jan 2 15:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3134f521af4b3809b7be817eb4a9468e680500f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:9c:74:10:55:9d:69:b6:8d:1e:a0:11:c8:
37:06:aa:04:c8:4f:6e:6f:fa:b8:4f:61:9d:39:05:
09:b7:a2:6a:25:84:8c:fe:bb:6f:0e:f5:ef:18:15:
82:b5:52:6a:1b:52:c3:cd:12:3e:68:fc:3c:18:ca:
f9:34:85:66:3f:e4:2b:a3:7a:3b:8e:8a:7d:2c:89:
ce:d2:bb:84:e4:a1:f5:7e:19:45:e9:81:5b:7a:e4:
e7:3c:f8:27:6d:c3:47:f0:fb:f9:74:d2:42:5d:93:
21:74:e4:14:d6:ee:2b:6a:ed:4f:d4:7e:01:91:39:
e5:bd:68:70:8c:03:e6:d8:5d:8b:89:81:2f:97:bd:
08:ca:09:aa:2c:0b:19:3b:ab:ec:ae:f6:29:18:96:
06:03:a1:6e:55:b0:fa:42:16:e3:37:84:54:ae:5b:
83:01:7f:85:5a:f6:4f:59:fa:6e:45:56:e8:9d:37:
da:c4:48:87:8a:a6:97:f8:c5:11:36:98:9a:4d:8c:
ef:5a:e9:4b:bd:93:23:51:54:90:7a:a2:be:b0:c0:
7f:32:b0:8c:63:66:d2:0d:14:fc:36:a9:69:43:7f:
28:c9:75:ac:0e:38:70:ee:34:d6:25:ef:92:c3:7b:
94:59:7d:fc:bd:58:3b:c2:5b:46:44:12:6f:26:8b:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:F5:21:AF:4B:38:09:B7:BE:81:7E:B4:A9:46:8E:68:05:00:F2
X509v3 Authority Key Identifier:
keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.76.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f7:ba:bf:32:81:1a:c8:bb:e4:66:61:74:23:8e:db:2e:f2:
a2:75:32:38:93:d5:d1:b3:af:69:34:97:5b:74:08:8f:8e:30:
53:c6:5e:d5:4e:aa:d9:63:02:58:82:ac:46:3a:21:7a:13:e6:
cd:68:7b:d1:3b:d8:87:dd:29:e0:2f:cc:59:e3:6d:dd:ca:2e:
b5:a6:15:40:65:f4:e9:c7:15:6c:75:f0:20:7d:2e:2c:9a:66:
ff:d1:e3:7f:08:79:2d:7b:6c:d7:4c:fd:51:f4:bf:95:e4:4a:
58:90:63:ec:44:f7:ea:db:c0:c3:55:61:98:46:ea:13:9f:79:
9b:0d:0a:b3:c9:5f:05:2e:ba:48:c2:a8:c6:5e:47:1d:54:5c:
b9:69:3e:fa:81:38:e7:76:08:a1:6f:58:b0:3a:f9:b2:73:1c:
df:03:96:d8:af:61:7f:44:e4:9e:ec:0e:bf:57:fe:2a:3b:47:
35:b5:0c:77:c0:8e:05:94:78:c0:4a:d2:ce:67:62:6f:4d:6c:
c2:e6:86:05:95:7d:e5:c6:48:11:e0:51:d1:c4:72:66:7c:c5:
9e:ef:8c:ca:8e:88:e2:0b:49:5b:3e:d6:1d:8f:6d:7e:e7:19:
7c:3c:e1:92:7e:b0:d9:88:ed:bf:c3:e7:85:14:54:d0:9d:62:
b2:40:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net