Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/mmLe6HuWENi7QUzep8q-JiTgWwU.roa
File: mmLe6HuWENi7QUzep8q-JiTgWwU.roa (raw, json)
Hash identifier: gYanyAh1KK1ckxEEpKBH3uaSiUJAGDZ085GM2/Go/u0=
Subject key identifier: 9A:62:DE:E8:7B:96:10:D8:BB:41:4C:DE:A7:CA:BE:26:24:E0:5B:05
Certificate issuer: /CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Certificate serial: 0187B361765C62A5BAE2A0F546753B132EEC
Authority key identifier: 80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/mmLe6HuWENi7QUzep8q-JiTgWwU.roa
Signing time: Mon 24 Apr 2023 13:08:41 +0000
ROA not before: Mon 24 Apr 2023 13:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.39.110.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:61:76:5c:62:a5:ba:e2:a0:f5:46:75:3b:13:2e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Validity
Not Before: Apr 24 13:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a62dee87b9610d8bb414cdea7cabe2624e05b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:83:cc:82:4b:5b:65:66:7b:2f:dc:80:7c:
d5:71:d2:0b:92:58:40:11:9b:d2:c8:60:ad:85:4f:
2f:ef:c5:07:d5:70:be:75:5b:d2:dc:e9:8a:35:e1:
da:6c:73:17:90:e7:06:ad:f8:e8:dc:de:5b:29:b5:
c3:5b:07:54:1d:52:71:5f:26:76:b0:73:b8:3f:10:
1b:17:27:2b:17:a6:4c:8d:f6:d9:47:1f:a1:17:7d:
39:73:01:82:1d:e5:9c:8f:24:6c:6f:6c:f4:f4:9c:
f1:4e:0c:01:dd:74:cd:7f:73:6b:c3:35:ea:54:c4:
b1:ad:62:d3:7d:8f:b1:bc:12:ed:1b:12:5a:1f:89:
47:09:1e:0c:f2:df:8e:a2:53:66:17:0f:63:11:90:
b8:1f:71:02:10:08:d0:fb:94:81:bf:fd:25:b5:7b:
87:2c:4d:d5:37:e4:36:92:56:ec:93:8c:af:aa:d9:
3e:d7:8f:6c:12:a7:ea:fc:ca:ef:95:bf:76:63:4c:
2f:79:e5:3d:97:54:2f:c7:5b:ba:86:4c:f3:5d:72:
3c:db:2f:c5:f2:dc:31:cd:a4:df:91:ff:57:a6:63:
fb:69:3d:f7:51:b8:65:29:b0:0e:d7:75:43:a2:cc:
0e:e9:4f:23:24:39:4b:ab:a5:18:3e:ef:0d:4e:47:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:DE:E8:7B:96:10:D8:BB:41:4C:DE:A7:CA:BE:26:24:E0:5B:05
X509v3 Authority Key Identifier:
keyid:80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/mmLe6HuWENi7QUzep8q-JiTgWwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
90:76:08:c2:d1:32:d8:05:df:0e:2a:57:82:d5:b0:d6:6c:9a:
5f:7c:f1:32:df:50:94:4f:19:ce:ed:8d:38:28:6d:41:d0:7e:
d1:41:7f:01:8f:b1:cd:b0:9b:6a:86:7d:eb:16:58:6f:9e:9b:
4e:58:99:f5:97:9d:45:bc:b1:a2:5a:6d:4f:06:9c:fe:ad:67:
d1:71:bf:6e:ee:49:b3:65:f2:0a:73:59:82:f8:9b:ba:40:f9:
e5:77:e5:25:7a:ed:f0:7c:7d:6c:a2:7d:0b:11:8d:3d:e3:a4:
d8:d6:51:94:37:0b:c8:8b:8f:e9:8a:e4:9d:fe:01:44:c3:35:
36:74:62:7d:0b:98:b2:f3:8c:68:50:94:9e:72:9a:b5:fe:dc:
f6:fa:46:77:5f:c6:ef:91:80:06:23:67:b2:09:de:65:74:3e:
6a:04:9f:c8:45:7a:a8:36:56:7f:31:9b:63:f7:93:2f:91:9a:
c4:cd:49:c8:2a:09:e7:c4:3b:8d:40:56:44:c3:c2:f7:db:f0:
f5:45:d7:67:3e:de:67:23:7a:b1:9f:32:10:f7:27:58:b8:15:
5c:9b:c9:3d:54:72:e6:6b:e2:2d:c8:12:b3:8d:32:e4:2a:f6:
dd:1e:ea:43:26:dd:21:57:2b:df:7b:f1:ce:f5:14:10:2c:d8:
d4:ba:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:34:05 2025 by rpki-client