Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MvZcHL_Jm293mTx5kDGEK0Oj39E.roa
File: MvZcHL_Jm293mTx5kDGEK0Oj39E.roa (raw, json)
Hash identifier: srz00GcYNvFaWCPlJoYFdSYi+udjbJSbusmknra3BHI=
Subject key identifier: 32:F6:5C:1C:BF:C9:9B:6F:77:99:3C:79:90:31:84:2B:43:A3:DF:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248355DA156823E7544A7905778A3D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MvZcHL_Jm293mTx5kDGEK0Oj39E.roa
Signing time: Thu 02 Jan 2025 17:51:09 +0000
ROA not before: Thu 02 Jan 2025 17:51:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48115
IP address blocks: 94.156.36.0/24 maxlen: 24
94.156.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:83:55:da:15:68:23:e7:54:4a:79:05:77:8a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32f65c1cbfc99b6f77993c799031842b43a3dfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:0b:b4:c3:0e:9b:32:8c:07:7c:aa:58:05:
ac:e3:8d:f7:7a:b7:59:6b:62:35:1d:35:4e:1a:a9:
8e:a7:11:b5:8d:65:35:5e:3c:1c:79:25:1b:c3:86:
50:09:fa:9d:fc:d6:ad:3d:13:39:b5:92:b2:e1:53:
08:43:91:7a:ae:db:1d:cc:d6:d2:94:4e:21:82:83:
aa:a9:45:72:8e:05:5d:62:42:96:a2:9a:30:ad:94:
ef:aa:c4:29:d9:db:66:23:ad:9d:c1:d2:c1:8f:e0:
cd:d3:82:0d:4a:dc:15:67:ef:6a:bd:4a:83:26:74:
8d:e7:8a:56:d5:74:6a:32:c0:0a:8a:d1:27:a0:0f:
6e:6b:99:be:04:44:e9:eb:d7:b5:92:c7:04:8a:b8:
1b:dd:26:f0:3f:63:34:30:5d:80:31:6e:5a:db:4b:
39:4e:c4:10:38:e4:70:50:f3:aa:ba:84:86:3e:25:
77:31:ad:1e:9f:87:87:7c:09:f0:eb:0d:8f:3b:d5:
9b:a7:95:9c:e9:70:54:0e:f5:1c:dd:ee:71:c6:f7:
44:5c:85:90:b9:15:33:b7:93:07:f6:97:b2:1a:21:
c0:6b:bf:0c:94:9d:0e:84:d6:07:46:f2:24:a4:46:
d0:0f:42:07:85:4e:94:ce:c8:de:77:e9:20:37:9c:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:5C:1C:BF:C9:9B:6F:77:99:3C:79:90:31:84:2B:43:A3:DF:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MvZcHL_Jm293mTx5kDGEK0Oj39E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.36.0/24
94.156.101.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a0:6a:ff:e8:9e:ff:21:b6:3c:bb:46:d7:d1:cb:dd:db:bc:
fb:f0:ab:9b:ed:9a:9b:14:e1:c9:17:53:6b:82:32:d8:88:e7:
e9:4f:d9:e7:a4:7f:4c:98:cb:ff:da:90:cd:01:56:6a:4d:3c:
a7:b4:89:88:1a:1e:ee:bb:73:71:dd:ff:0a:2e:a0:a6:69:b2:
b2:71:09:5e:b9:ed:be:ea:6a:73:2c:3d:c6:c4:dc:13:56:ee:
34:32:e1:ed:06:f9:57:6a:a9:ce:56:dc:30:05:f2:69:43:11:
2d:6e:09:d5:2b:4d:95:fd:72:6e:92:f6:d7:45:32:4e:4d:92:
4b:10:e9:de:96:41:01:c4:a8:4f:b3:51:fb:6a:ca:8e:05:54:
0c:10:7f:81:dd:04:43:04:49:4a:1c:ec:38:0a:d7:60:93:da:
1e:03:68:4a:17:70:48:53:b4:cf:4b:61:56:9e:34:59:1f:49:
47:92:5b:95:f8:a6:84:8d:75:da:6c:8b:b8:ae:f3:27:4f:39:
c9:8b:3e:b6:ae:d5:30:05:36:1f:6d:70:f2:90:0c:e4:10:44:
ff:ef:f4:f2:e7:4d:8f:d4:2c:6a:d6:0c:44:b9:21:26:71:23:
b8:90:24:3b:10:ed:28:3f:e1:14:4b:3c:46:18:32:8a:0b:9e:
2d:2f:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:35 2025 by rpki-client