Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/MPEX7gi8brUUkrPbVSXykT0w1fo.roa
File: MPEX7gi8brUUkrPbVSXykT0w1fo.roa (raw, json)
Hash identifier: 1TpdK5wXwu9+JpgSvXo/N0uftCp5QGggUY7X8jl1wvM=
Subject key identifier: 30:F1:17:EE:08:BC:6E:B5:14:92:B3:DB:55:25:F2:91:3D:30:D5:FA
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AB8248B84CFA867AC3B0DCDF910D97E0F
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/MPEX7gi8brUUkrPbVSXykT0w1fo.roa
Signing time: Thu 21 Sep 2023 14:28:37 +0000
ROA not before: Thu 21 Sep 2023 14:28:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208949
IP address blocks: 185.100.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:24:8b:84:cf:a8:67:ac:3b:0d:cd:f9:10:d9:7e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 21 14:28:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30f117ee08bc6eb51492b3db5525f2913d30d5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:e7:29:9b:d1:64:f8:e0:a0:a7:80:04:fe:
b9:f0:e3:ad:7c:a3:2b:18:a1:09:91:e1:7b:98:d9:
f4:66:73:13:ea:36:5c:21:88:3f:f6:8a:11:1d:23:
cb:6c:d1:2a:d1:83:49:3c:0d:f4:54:76:91:d8:65:
17:e1:28:5a:71:27:c4:24:07:0d:c5:c0:53:02:1b:
e5:95:0b:21:3a:2e:4e:0e:32:72:59:9f:6c:e2:69:
23:c9:fb:b6:62:df:ac:db:f1:5e:95:34:a3:2b:50:
c6:7a:2a:aa:36:39:13:5e:30:b4:41:18:82:53:3c:
34:52:3d:d7:31:fc:e2:a1:09:f5:7f:ae:2c:5e:87:
40:a7:87:47:09:4c:72:b7:bf:03:07:28:4c:b9:33:
a4:85:30:fd:35:3b:00:8a:0e:ac:33:79:38:c0:9f:
79:26:6d:af:48:b3:8c:14:70:01:b2:45:23:c8:10:
e5:b1:3d:30:bc:09:9d:a8:94:45:41:93:e3:53:1e:
e0:5b:76:a6:41:9a:d0:a7:7e:54:bf:fc:74:e0:3d:
3e:e1:8d:e0:28:e5:cf:70:f4:54:b4:22:a8:fc:34:
fa:d2:bf:30:c8:0f:4b:fe:ff:f6:0e:c7:7e:ed:3b:
cc:e8:49:11:55:9a:06:42:6d:f0:eb:ea:a4:0d:92:
c1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:17:EE:08:BC:6E:B5:14:92:B3:DB:55:25:F2:91:3D:30:D5:FA
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/MPEX7gi8brUUkrPbVSXykT0w1fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.213.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1e:46:0b:4a:21:59:1a:1f:7a:54:b0:d5:b4:d8:18:14:a5:
52:45:ac:82:b0:41:cc:f6:bb:46:3a:69:1f:3e:3c:fe:06:bd:
25:5e:2a:64:a4:d4:2b:ff:a5:7e:7c:0d:10:46:e8:c1:93:17:
e2:41:b8:50:33:9f:2e:c2:25:d1:5d:95:24:4e:71:9f:52:18:
e3:6b:01:da:be:c7:14:40:5c:96:5d:1e:2c:87:88:35:08:2d:
c6:86:3a:9d:c4:b0:bb:3d:07:b5:18:aa:4d:a3:7a:db:c3:8b:
82:4a:e5:47:78:02:9c:64:b9:b9:b4:1d:58:ab:c2:95:03:07:
22:68:9c:60:8a:40:5a:a2:98:22:98:a3:08:60:8a:8f:3e:48:
d9:33:4f:2e:e0:1a:19:99:ce:67:77:3c:46:32:a8:ef:63:a6:
9c:df:bf:df:7f:17:6b:01:51:61:ab:a3:3f:fa:96:db:af:ff:
fb:ee:68:4d:2d:46:41:c0:c3:b9:bc:6c:d0:66:ac:38:96:dc:
1a:1c:64:8b:3d:58:09:b7:49:e2:b6:c5:75:64:de:4a:8d:5e:
68:71:35:93:50:ba:d5:ef:50:86:7e:7a:cb:0b:55:fb:e5:d1:
75:ad:7c:bc:93:85:fc:e8:79:26:9e:c7:ce:ff:4e:26:86:3b:
c9:49:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:34:21 2025 by rpki-client