Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/MiTA2g-pLC5ZITOxl98HfdnHekI.roa
File: MiTA2g-pLC5ZITOxl98HfdnHekI.roa (raw, json)
Hash identifier: ajv9+oi0sq8cFKqa2qx0dulW0VzD6Ty3LJc1Y6gB5hY=
Subject key identifier: 32:24:C0:DA:0F:A9:2C:2E:59:21:33:B1:97:DF:07:7D:D9:C7:7A:42
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B682B95DD0CFC8C167FBBAF8B045B8
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/MiTA2g-pLC5ZITOxl98HfdnHekI.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207875
IP address blocks: 192.109.248.0/24 maxlen: 24
192.109.250.0/24 maxlen: 24
192.109.253.0/24 maxlen: 24
195.211.160.0/22 maxlen: 22
195.211.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:82:b9:5d:d0:cf:c8:c1:67:fb:ba:f8:b0:45:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3224c0da0fa92c2e592133b197df077dd9c77a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:cf:38:15:6f:c6:b6:9e:1b:ec:ce:90:3e:
42:c4:2d:6b:fe:78:46:6e:68:bf:87:a9:95:e1:f3:
00:68:26:5e:bc:25:da:8c:8d:b7:ff:c5:98:0d:ef:
9d:5e:ee:15:b3:17:ce:a5:e2:a9:b1:ac:33:86:b0:
d5:46:76:bf:ce:2c:b1:be:18:08:05:2a:ea:b0:72:
c4:73:d4:be:32:6f:b5:db:be:8c:cb:39:5e:af:40:
d9:b8:46:57:d7:34:70:1b:8a:2b:bb:0c:5c:38:07:
09:82:9f:b8:cd:bc:4d:06:6d:4b:82:41:f4:34:eb:
c0:6d:52:1d:08:ca:2f:48:19:cf:63:bf:a0:76:33:
57:98:f1:4a:39:a1:3e:8b:3c:43:bf:02:e2:00:f3:
88:fa:a8:c7:c9:29:b0:8c:31:2e:84:f6:ad:64:0a:
2f:7b:57:42:75:e2:99:2f:d7:d1:c3:15:25:63:7a:
4b:e7:61:f3:65:21:c0:4e:f0:84:90:4c:df:18:f9:
e7:be:57:b5:0a:d1:01:6d:f1:49:af:14:dc:a3:12:
a1:a9:34:20:54:6f:f9:f4:f0:d1:59:b8:ca:51:09:
d2:01:47:83:15:3a:e9:60:c9:db:8b:67:ce:8a:fa:
33:68:df:aa:da:bf:16:52:f9:61:a8:c3:19:58:0f:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:C0:DA:0F:A9:2C:2E:59:21:33:B1:97:DF:07:7D:D9:C7:7A:42
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/MiTA2g-pLC5ZITOxl98HfdnHekI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.248.0/24
192.109.250.0/24
192.109.253.0/24
195.211.160.0/22
Signature Algorithm: sha256WithRSAEncryption
17:c8:f7:5c:40:a0:a0:e5:7a:f4:d2:60:df:00:fa:d2:c4:84:
9e:f1:82:f7:f0:e0:54:7e:54:ea:c9:96:ce:8b:a3:0e:44:eb:
b2:2d:8d:d4:2f:d3:50:bd:e0:c1:58:d2:c0:ec:e2:2a:ab:56:
54:b9:3b:1d:2b:6e:bf:4c:ac:f0:a1:62:26:8f:22:5b:0e:25:
21:d2:f8:3e:de:d2:83:87:3c:6c:4f:5b:3e:53:29:d8:ce:59:
bb:93:1a:f6:d6:82:2c:92:b1:db:08:51:bd:e3:3f:52:92:00:
67:17:8b:6f:64:cd:f4:49:82:73:ca:4b:61:a8:09:4b:45:31:
5e:59:96:e1:f9:0e:ef:3c:25:1d:e8:28:13:81:55:08:e1:44:
3b:8f:40:50:ab:48:0e:07:1f:f4:b9:33:20:b2:3f:93:e8:87:
85:51:ab:2f:d7:e4:ca:82:cf:57:22:76:95:f9:c6:0b:b0:2a:
26:b7:dd:bf:61:22:70:62:f6:38:f9:90:1e:13:9b:9a:ea:3b:
c8:df:05:30:0f:fa:40:d6:f7:7e:b3:d3:cc:e7:81:8d:e1:a8:
bc:ee:54:f7:24:ea:ef:b2:fa:e9:f3:b8:d3:4f:63:33:28:31:
5c:d4:89:78:6e:d2:89:5c:86:69:31:cd:b4:c0:7b:87:da:bf:
4f:1b:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:09 2025 by rpki-client on console.sobornost.net