Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/mSIfnercUPuq_dMfy5Im30Ya8MM.roa
File: mSIfnercUPuq_dMfy5Im30Ya8MM.roa (raw, json)
Hash identifier: sW6CxPIodt9yQQHylPQgHKbmNhPqe4c99qw5ZQlvcbE=
Subject key identifier: 99:22:1F:9D:EA:DC:50:FB:AA:FD:D3:1F:CB:92:26:DF:46:1A:F0:C3
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019427B64469573CEB9B0CCE941F2724BAC7
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/mSIfnercUPuq_dMfy5Im30Ya8MM.roa
Signing time: Thu 02 Jan 2025 15:50:44 +0000
ROA not before: Thu 02 Jan 2025 15:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199541
IP address blocks: 147.196.0.0/16 maxlen: 16
153.98.36.0/24 maxlen: 24
153.98.37.0/24 maxlen: 24
153.98.68.0/24 maxlen: 24
153.98.71.0/24 maxlen: 24
153.98.83.0/24 maxlen: 24
153.98.100.0/24 maxlen: 24
153.98.105.0/24 maxlen: 24
153.98.106.0/24 maxlen: 24
153.98.107.0/24 maxlen: 24
153.98.108.0/24 maxlen: 24
153.98.109.0/24 maxlen: 24
153.98.110.0/24 maxlen: 24
153.98.111.0/24 maxlen: 24
153.98.113.0/24 maxlen: 24
192.70.89.0/24 maxlen: 24
192.70.90.0/24 maxlen: 24
192.93.20.0/22 maxlen: 22
193.58.19.0/24 maxlen: 24
193.58.21.0/24 maxlen: 24
193.58.31.0/24 maxlen: 24
193.221.2.0/24 maxlen: 24
193.221.14.0/24 maxlen: 24
193.221.170.0/24 maxlen: 24
193.221.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:44:69:57:3c:eb:9b:0c:ce:94:1f:27:24:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Jan 2 15:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99221f9deadc50fbaafdd31fcb9226df461af0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:64:81:97:0f:f2:5e:e6:5d:5c:2e:0a:4a:
d1:aa:35:a2:05:3c:d3:4e:dc:90:20:14:1a:8d:b6:
03:2a:51:a3:fb:88:54:b2:8b:0f:6e:d5:65:cf:24:
4b:79:4a:53:10:5c:a8:a6:43:38:ff:a7:af:26:29:
19:6c:c7:74:4c:a3:4c:84:82:a5:d6:3a:17:e3:71:
04:00:8f:76:a5:46:f8:f3:74:f7:1c:4c:f3:2f:08:
46:01:13:e8:20:a6:ab:49:2d:34:b7:6b:e8:85:bd:
7f:d4:8c:59:76:dd:49:80:cf:cb:7c:f1:f9:a9:93:
ef:cc:99:61:5c:8a:96:e1:76:06:22:96:80:68:de:
8a:bc:96:1e:85:3a:43:27:7d:35:40:2b:f8:e8:e9:
52:7a:97:e6:a7:32:fa:f5:2d:ac:59:80:bf:9c:23:
68:6b:7f:78:76:da:f6:c3:b3:e1:5e:35:aa:89:94:
18:f9:ff:0b:cb:70:97:f1:7e:87:8a:70:7b:04:37:
71:44:85:92:39:02:c8:f3:16:59:ce:fe:1e:7e:aa:
30:13:c5:21:50:e1:dc:78:f5:5a:99:5f:da:ad:b4:
42:af:00:14:19:16:73:ad:06:42:25:03:06:fe:ae:
62:94:d9:23:c8:b5:7d:2a:d0:95:66:cd:b4:ef:18:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:1F:9D:EA:DC:50:FB:AA:FD:D3:1F:CB:92:26:DF:46:1A:F0:C3
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/mSIfnercUPuq_dMfy5Im30Ya8MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.196.0.0/16
153.98.36.0/23
153.98.68.0/24
153.98.71.0/24
153.98.83.0/24
153.98.100.0/24
153.98.105.0-153.98.111.255
153.98.113.0/24
192.70.89.0-192.70.90.255
192.93.20.0/22
193.58.19.0/24
193.58.21.0/24
193.58.31.0/24
193.221.2.0/24
193.221.14.0/24
193.221.170.0/24
193.221.181.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1c:05:72:78:73:bb:e9:ff:f6:77:cc:76:02:c5:16:d3:a3:
bf:7a:5c:ba:c3:f6:43:67:78:62:f3:d4:f8:37:83:ef:2f:ea:
c1:0d:02:e6:66:d0:87:ed:cd:02:4d:e1:17:02:a9:52:33:94:
55:c6:48:78:76:de:52:ff:7d:3e:1b:0f:64:64:17:74:03:c5:
29:c0:17:57:83:ed:d8:78:56:07:21:18:8c:9d:f0:a1:19:f0:
fe:6b:96:4d:9c:e8:35:4f:4d:3e:a0:5e:75:38:6a:71:47:65:
d2:10:28:b6:6b:59:e3:02:64:c4:15:69:b5:63:1d:6f:00:03:
75:fa:12:47:f6:11:24:70:1f:23:eb:a3:11:08:77:99:78:03:
38:f6:63:ca:39:30:62:20:3b:75:c4:f4:4c:d4:fa:75:1d:13:
9c:f9:84:ce:d3:f8:92:e7:48:4d:b8:9c:f9:95:80:07:c0:ea:
e0:a5:03:aa:8d:ac:67:db:92:43:dc:2d:21:99:67:f7:19:95:
36:b1:b0:8c:e0:6d:6e:76:bd:df:37:70:00:ea:0e:f6:16:8a:
f1:60:54:c8:ff:f2:95:e1:94:28:dd:6d:96:3c:79:ad:ee:21:
bb:88:6a:da:35:b1:5b:95:3f:2f:fe:92:96:00:f5:81:a4:c4:
38:f6:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:27 2025 by rpki-client