Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Mip9EF-thJGNXHxYtdDMcwy-WdY.roa
File: Mip9EF-thJGNXHxYtdDMcwy-WdY.roa (raw, json)
Hash identifier: ABy3Uo95mW2HFnFpOLOM1AXAOCzuHMJpNgIqf2CNmEs=
Subject key identifier: 32:2A:7D:10:5F:AD:84:91:8D:5C:7C:58:B5:D0:CC:73:0C:BE:59:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019537C5781BD7FC7D36E8CB1208483B9F8A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Mip9EF-thJGNXHxYtdDMcwy-WdY.roa
Signing time: Mon 24 Feb 2025 11:44:03 +0000
ROA not before: Mon 24 Feb 2025 11:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48090
IP address blocks: 93.123.109.0/24 maxlen: 24
195.178.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:c5:78:1b:d7:fc:7d:36:e8:cb:12:08:48:3b:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 24 11:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=322a7d105fad84918d5c7c58b5d0cc730cbe59d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:fe:08:fa:5d:fd:3e:62:03:5f:8c:e9:5b:
56:9f:7e:9b:2e:1e:33:bc:6e:0b:9d:0e:0c:fa:18:
81:8e:dd:3d:43:94:ce:26:7d:66:44:6f:8c:8f:b7:
de:71:2e:d9:12:6a:54:6b:8e:c0:c0:2f:ca:0c:fd:
8d:e8:a7:bc:56:92:ce:0a:cc:f5:3a:a6:da:30:03:
90:0a:3f:08:5e:fa:1c:d0:04:80:b0:54:2d:91:30:
2b:d0:f8:bc:68:60:b6:e3:8b:68:5f:1f:ae:af:cf:
de:9d:77:f9:77:6e:23:3c:47:87:ad:ff:04:93:dd:
9a:d6:ee:f3:d4:a0:c0:2b:8a:4a:ff:6e:1e:ca:5b:
de:15:6f:db:75:c1:2e:6c:a6:e0:50:36:0a:25:61:
15:6e:f6:90:95:bd:0f:0b:0e:db:f0:a6:59:26:67:
df:da:e8:0b:07:b8:fc:12:a1:d9:df:28:1e:01:9c:
84:50:14:57:57:c7:21:5a:29:da:a1:90:de:2f:e0:
e4:03:ef:15:3b:6a:d4:33:46:45:2f:7a:a5:e1:49:
b9:01:ff:3d:b6:24:84:57:85:94:8d:d3:13:b1:8f:
9e:25:11:bd:5f:20:ac:2b:61:f8:56:d4:13:ac:92:
9b:59:23:e2:63:07:6d:b5:8e:50:34:f0:f0:87:d1:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:7D:10:5F:AD:84:91:8D:5C:7C:58:B5:D0:CC:73:0C:BE:59:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Mip9EF-thJGNXHxYtdDMcwy-WdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.109.0/24
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5c:c1:d8:96:2f:2c:51:7f:49:98:2d:09:29:7c:3e:48:a5:
02:46:17:ce:f9:29:60:0b:94:09:87:3c:b2:46:e9:b2:ff:01:
37:83:3d:01:49:45:99:45:76:3b:24:e4:95:f9:53:14:af:35:
b9:46:fd:8f:d0:cf:ae:97:c0:95:b1:d4:3c:08:81:0a:3a:06:
df:36:1a:7d:e8:10:20:0d:04:4f:29:6b:63:b4:3a:3f:b6:5a:
fd:26:27:e7:dc:f7:e3:87:be:20:00:30:46:14:7a:5c:03:7f:
46:ea:e0:28:d6:31:fd:56:fc:15:9e:39:a3:81:53:c6:41:b6:
0e:24:d0:92:a3:7b:11:0d:9f:87:cf:a5:cf:39:9d:23:9b:6b:
5c:9b:45:ce:63:2a:0b:ab:84:45:94:68:01:c0:22:0f:03:2d:
e0:dd:dd:8c:a3:9e:33:bf:17:a8:94:aa:25:30:71:7a:88:09:
54:59:9d:ad:97:75:5f:e1:99:b2:f8:3b:b7:4c:ca:c2:32:9f:
6a:e7:0a:8b:e7:d2:b3:96:31:26:e3:b4:fd:5d:73:61:c8:00:
f2:3e:13:7a:6d:9c:65:ff:f0:2e:0a:d3:b6:26:ed:f6:4f:0b:
c1:5b:e9:2f:a1:1b:30:24:9a:23:d9:29:49:db:99:1c:8d:6a:
9a:e3:26:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZU3xXgb1/x9NujLEghIO5+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjI0MTE0NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjJhN2QxMDVmYWQ4NDkxOGQ1YzdjNThiNWQwY2M3MzBjYmU1OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rT+CPpd/T5iA1+M6VtWn36bLh4z
vG4LnQ4M+hiBjt09Q5TOJn1mRG+Mj7fecS7ZEmpUa47AwC/KDP2N6Ke8VpLOCsz1
OqbaMAOQCj8IXvoc0ASAsFQtkTAr0Pi8aGC244toXx+ur8/enXf5d24jPEeHrf8E
k92a1u7z1KDAK4pK/24eylveFW/bdcEubKbgUDYKJWEVbvaQlb0PCw7b8KZZJmff
2ugLB7j8EqHZ3ygeAZyEUBRXV8chWinaoZDeL+DkA+8VO2rUM0ZFL3ql4Um5Af89
tiSEV4WUjdMTsY+eJRG9XyCsK2H4VtQTrJKbWSPiYwdttY5QNPDwh9ELlQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDIqfRBfrYSRjVx8WLXQzHMMvlnWMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTWlwOUVGLXRoSkdOWEh4WXRkRE1jd3ktV2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXttAwQA
w7JuMA0GCSqGSIb3DQEBCwUAA4IBAQBIXMHYli8sUX9JmC0JKXw+SKUCRhfO+Slg
C5QJhzyyRumy/wE3gz0BSUWZRXY7JOSV+VMUrzW5Rv2P0M+ul8CVsdQ8CIEKOgbf
Nhp96BAgDQRPKWtjtDo/tlr9Jifn3Pfjh74gADBGFHpcA39G6uAo1jH9VvwVnjmj
gVPGQbYOJNCSo3sRDZ+Hz6XPOZ0jm2tcm0XOYyoLq4RFlGgBwCIPAy3g3d2Mo54z
vxeolKolMHF6iAlUWZ2tl3Vf4Zmy+Du3TMrCMp9q5wqL59KzljEm47T9XXNhyADy
PhN6bZxl//AuCtO2Ju32TwvBW+kvoRswJJoj2SlJ25kcjWqa4yYA
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client