Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa
File: mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa (raw, json)
Hash identifier: BwFiGax6tDOHoiiFhGtxEO6XUIlUJlP+Zm+e5NhOWpg=
Subject key identifier: 98:98:1D:8F:E7:73:24:76:08:C1:F7:35:F0:FD:22:29:4B:BA:2B:C4
Certificate issuer: /CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Certificate serial: 01942143A6E729305186D69C8BBA5EA9B3A4
Authority key identifier: 30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa
Signing time: Wed 01 Jan 2025 09:47:49 +0000
ROA not before: Wed 01 Jan 2025 09:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56641
IP address blocks: 91.226.74.0/23 maxlen: 24
2a00:9520::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a6:e7:29:30:51:86:d6:9c:8b:ba:5e:a9:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305c44e8c961a1450d0aab212f0dec717d1defb6
Validity
Not Before: Jan 1 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98981d8fe773247608c1f735f0fd22294bba2bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:5b:db:b0:3b:0c:f2:b3:2f:d6:51:e0:cd:
3f:23:56:34:30:12:31:be:c3:df:9f:9a:eb:39:9b:
66:9d:1d:7e:71:61:0f:1e:9c:7b:27:f4:ef:ed:9b:
c5:a0:46:24:2b:5c:fc:4e:a7:6b:01:f3:a5:0a:7c:
48:33:8f:e3:6c:46:64:b0:b2:6e:57:46:06:42:10:
83:7a:7d:d7:af:d9:3f:c8:24:c4:dd:8f:d7:80:53:
7e:26:32:29:76:79:db:89:31:1e:3a:91:23:ed:4e:
ea:bd:83:15:9b:c2:83:23:32:f6:ac:fd:38:0f:00:
26:cb:dc:11:25:f8:ed:ac:29:0c:94:2e:6e:4b:d2:
1e:1b:9d:de:62:05:fb:fd:57:2e:e2:06:0e:e5:73:
63:b6:58:4b:f0:4d:12:a3:54:92:a9:0a:28:a5:b4:
88:47:32:46:ab:e7:47:c3:c6:35:84:5e:f9:14:4a:
db:61:82:ae:b6:a2:ac:99:83:b8:98:44:93:05:dd:
2b:73:8c:eb:77:31:b3:4c:a8:43:cc:e2:30:49:f7:
f7:30:18:2b:f0:94:21:01:b3:44:16:af:a3:b7:ae:
e2:44:a8:7b:30:0c:f6:34:4f:26:62:a2:00:47:b9:
7b:03:d1:72:cc:d1:5c:9d:59:42:f0:cf:b3:5a:eb:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:1D:8F:E7:73:24:76:08:C1:F7:35:F0:FD:22:29:4B:BA:2B:C4
X509v3 Authority Key Identifier:
keyid:30:5C:44:E8:C9:61:A1:45:0D:0A:AB:21:2F:0D:EC:71:7D:1D:EF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFxE6MlhoUUNCqshLw3scX0d77Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/mJgdj-dzJHYIwfc18P0iKUu6K8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2820d1-fd20-4889-834f-d527ce0d9930/1/MFxE6MlhoUUNCqshLw3scX0d77Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.74.0/23
IPv6:
2a00:9520::/32
Signature Algorithm: sha256WithRSAEncryption
8f:34:04:25:f6:fc:0b:c9:38:b0:cb:bc:32:d6:22:0d:ea:bc:
db:a6:d0:8a:3a:26:3a:85:6a:98:18:ef:86:f2:b0:dc:0b:c8:
6f:24:13:b6:ef:04:c7:c3:b3:2b:f2:f1:ef:ab:cf:5e:8a:28:
a8:79:e6:ca:cc:7e:fd:d7:6a:76:a5:ba:9e:21:bc:51:9d:4d:
f8:d9:f5:8b:a3:f6:65:fc:44:bd:82:68:71:f1:98:b2:ef:e6:
7c:cf:47:51:dc:d9:60:a3:ee:ac:9d:d2:c3:c6:07:42:09:c4:
af:76:8e:46:50:f0:44:77:fd:76:6a:1a:f6:68:79:5a:f9:b9:
dc:8d:39:b5:7d:19:73:bd:b5:ed:39:0f:37:15:6e:ed:4a:f1:
13:a8:c7:93:eb:85:01:87:6e:32:c2:39:f1:d8:0f:fe:42:2a:
1f:e8:e3:b6:03:a6:7c:14:25:70:0a:00:8f:b1:ec:53:40:17:
32:ef:a4:53:5b:bd:da:cc:8a:6f:3c:37:3f:17:ff:a5:9e:4f:
d6:eb:f5:02:de:54:82:fa:a4:0f:06:73:71:f6:92:d7:db:05:
9a:8b:e6:f8:27:f3:86:bb:d9:9a:99:10:d6:56:1d:4b:2f:cc:
80:0c:89:82:e5:9e:7c:68:7c:c9:69:38:86:be:f1:32:14:d6:
71:d5:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:43 2025 by rpki-client