Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MCK-7dLIt0SU908OuEnlPMKl2-A.roa
File: MCK-7dLIt0SU908OuEnlPMKl2-A.roa (raw, json)
Hash identifier: jcgWHEG1hrqvk9WXyOQXfcWXloLJIYVWY2tA7BTUFLs=
Subject key identifier: 30:22:BE:ED:D2:C8:B7:44:94:F7:4F:0E:B8:49:E5:3C:C2:A5:DB:E0
Certificate issuer: /CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Certificate serial: 01856DE654BA36375F880833EB1119660DC3
Authority key identifier: 31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MCK-7dLIt0SU908OuEnlPMKl2-A.roa
Signing time: Sun 01 Jan 2023 15:14:49 +0000
ROA not before: Sun 01 Jan 2023 15:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200810
IP address blocks: 45.93.122.0/24 maxlen: 24
45.93.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:54:ba:36:37:5f:88:08:33:eb:11:19:66:0d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Validity
Not Before: Jan 1 15:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3022beedd2c8b74494f74f0eb849e53cc2a5dbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:d2:b5:b7:95:c9:5f:25:fc:c8:fe:3e:74:
c8:e4:5c:22:e3:1f:43:8b:36:ae:48:56:c8:8e:0e:
d0:fb:78:28:0c:a0:76:f3:96:20:2e:81:79:21:27:
7e:19:86:1f:c9:f2:b5:d4:5d:ae:05:d2:38:e0:8c:
ac:42:dd:10:f5:e8:94:aa:9e:22:35:c0:30:7d:3d:
b3:8a:fb:50:77:8c:cd:84:66:cc:a3:3d:2a:1f:20:
b0:56:96:40:54:82:fd:83:49:f5:d3:80:e7:6d:ae:
db:1e:cf:64:25:25:78:b6:af:d7:4c:3a:23:e3:19:
e8:c2:ba:cd:10:1f:43:0d:fc:26:fc:f9:15:da:41:
3b:9f:ba:1a:05:5c:97:1f:07:64:d8:04:31:41:0b:
36:fa:85:bc:3c:af:ea:8e:81:37:d6:2e:f1:70:52:
87:b0:dd:db:14:d1:65:7f:c2:e2:11:e4:d7:c8:25:
70:dd:b0:10:ec:87:44:73:f4:73:0f:84:17:77:66:
ee:5a:8a:c3:57:65:66:2f:de:b8:d4:ed:da:6d:3c:
91:b1:62:d0:a8:94:b2:50:8d:b1:3c:4f:f3:03:38:
68:c4:9a:f3:83:e4:1e:6c:08:bf:e5:15:c9:2d:a4:
20:32:97:02:7c:e5:f2:5d:b4:34:a5:a3:f3:27:2b:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:BE:ED:D2:C8:B7:44:94:F7:4F:0E:B8:49:E5:3C:C2:A5:DB:E0
X509v3 Authority Key Identifier:
keyid:31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MCK-7dLIt0SU908OuEnlPMKl2-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.120.0-45.93.122.255
Signature Algorithm: sha256WithRSAEncryption
a8:0b:f6:63:ca:ce:3e:4c:a0:63:39:51:cc:26:aa:37:3d:99:
10:d1:f3:6b:65:42:73:2f:ac:c9:a1:18:3f:78:bd:67:e0:58:
a0:7a:d4:35:60:ea:1e:1d:17:75:69:b3:03:e6:f2:b3:79:5d:
c5:df:7d:00:5d:8c:d7:df:f8:53:9d:1f:1a:67:be:d0:77:69:
7b:26:de:69:ec:3f:f0:42:16:9f:e2:51:3e:99:7c:52:41:d2:
a4:71:8b:f6:04:18:6e:60:e6:69:fb:05:c6:49:85:02:96:82:
49:47:a1:4d:69:93:37:bd:42:71:06:26:f7:74:e1:af:b4:4e:
5d:ec:b7:c0:f9:eb:ab:d2:c8:e5:02:37:ce:26:c5:88:83:1b:
90:fe:b7:ee:20:c8:29:16:11:cd:b3:f6:6b:6a:de:5b:e6:5e:
c7:35:5d:18:3b:a7:00:f9:18:43:6b:c8:cf:a3:68:e9:00:a2:
5d:f4:64:d9:f9:f5:bb:36:a9:11:6d:3f:20:3c:74:31:9c:b9:
9f:a1:df:bb:f5:c6:4b:05:43:59:88:a4:31:e1:3a:a3:31:ac:
7d:74:f5:a3:4f:04:e3:94:18:1d:06:13:d3:c8:ab:a8:be:91:
59:74:d6:4f:5c:20:e3:77:50:a9:44:37:9d:a7:2f:8b:d6:91:
f3:50:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:05 2025 by rpki-client