Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/MNsgwpzMGo9ny09J-jp2iHl3erE.roa
File: MNsgwpzMGo9ny09J-jp2iHl3erE.roa (raw, json)
Hash identifier: rsV4oTpDDAsXfrCe5I5AMLsbpMjSWW+2NPe89PcwdUY=
Subject key identifier: 30:DB:20:C2:9C:CC:1A:8F:67:CB:4F:49:FA:3A:76:88:79:77:7A:B1
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 019551C4B259950F0A44E554F6D649D8A9D6
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/MNsgwpzMGo9ny09J-jp2iHl3erE.roa
Signing time: Sat 01 Mar 2025 12:53:20 +0000
ROA not before: Sat 01 Mar 2025 12:53:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 62.100.192.0/22 maxlen: 22
62.100.200.0/22 maxlen: 24
62.100.212.0/22 maxlen: 22
62.100.220.0/22 maxlen: 22
93.188.68.0/22 maxlen: 22
157.97.145.0/24 maxlen: 24
185.92.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:51:c4:b2:59:95:0f:0a:44:e5:54:f6:d6:49:d8:a9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Mar 1 12:53:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30db20c29ccc1a8f67cb4f49fa3a768879777ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:d1:53:1c:e7:f2:33:49:14:d7:c3:15:9d:
8f:fc:c4:70:30:98:b1:d8:e4:b9:06:34:9e:86:2e:
8b:18:7b:e9:69:21:91:14:b7:95:5c:99:1b:e5:a2:
ec:07:e7:70:15:7f:2f:95:46:90:2e:08:86:fd:b4:
a2:e8:a0:b5:3a:7b:19:f2:8d:16:db:93:1e:27:a5:
1b:80:57:e6:ca:f4:d6:fa:0d:6b:20:f7:5e:ac:fa:
a0:99:44:0f:84:87:8c:3b:21:4e:7c:4e:60:4e:b9:
51:b3:e6:d9:73:90:4b:74:49:8d:ea:d1:10:29:9e:
5a:83:87:f8:86:c9:d7:4c:79:ad:61:72:51:78:1b:
5f:55:25:72:da:aa:be:5a:7d:7f:81:15:61:b2:f7:
31:38:4e:06:bb:aa:38:ef:0a:51:e6:81:2c:e0:20:
c0:97:8f:60:2f:e6:60:d4:c8:aa:01:64:3f:86:a5:
d5:5f:cd:df:f6:30:ad:a2:e3:6a:3d:83:b1:e1:ba:
37:5a:11:f7:8f:e6:0e:c3:9a:db:7a:98:74:5e:82:
d0:61:f1:9c:58:4f:17:f6:29:88:ba:c1:e8:9e:44:
9e:0d:91:fd:81:57:56:91:eb:db:52:c2:e9:12:01:
26:ef:a6:5f:04:69:c9:7c:de:f7:4d:76:c2:21:6e:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DB:20:C2:9C:CC:1A:8F:67:CB:4F:49:FA:3A:76:88:79:77:7A:B1
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/MNsgwpzMGo9ny09J-jp2iHl3erE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.192.0/22
62.100.200.0/22
62.100.212.0/22
62.100.220.0/22
93.188.68.0/22
157.97.145.0/24
185.92.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:24:af:fc:d3:5e:97:fe:26:c0:dc:48:5d:fa:57:f1:9a:40:
45:9a:51:fe:5d:6a:89:c3:9c:11:55:70:31:a1:88:d7:d4:80:
fb:84:86:12:9b:d4:3b:66:5d:b3:9d:13:84:a7:ed:81:c9:3b:
83:62:8d:21:7b:90:9a:ce:cd:ca:c6:d1:bb:47:e7:76:9f:f0:
ec:e6:bb:35:48:09:13:7d:f3:c0:1e:45:ea:59:b6:dd:c6:7f:
26:36:02:dc:97:a7:55:16:7f:8b:9c:ea:38:d3:f1:ed:53:02:
c9:12:5d:4b:96:f1:86:cf:11:e1:36:70:db:e5:e2:4f:53:bf:
3f:f6:97:8e:28:42:3d:53:38:b6:73:fb:fe:71:11:c4:2a:53:
35:b2:81:66:48:97:68:70:a2:bd:8d:6b:78:b8:92:65:71:5e:
ff:18:c8:64:d6:03:98:71:4a:80:15:b5:e9:f2:ac:e0:cd:03:
1e:5d:d8:d0:a3:5e:c6:f0:66:a0:95:aa:9e:b6:f2:88:4f:50:
58:de:85:18:25:b7:2a:ff:27:5e:e2:e2:1d:ed:e3:a5:3d:58:
24:ab:93:77:97:3c:4a:e7:e0:d8:04:03:f8:48:23:24:5c:e5:
5a:81:90:e9:e6:e2:cc:62:5a:5a:db:1e:7c:90:27:ed:99:df:
0c:2d:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:10 2025 by rpki-client