Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/MguR744HGmOoEMdrlIzPUQQNYfs.roa
File: MguR744HGmOoEMdrlIzPUQQNYfs.roa (raw, json)
Hash identifier: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=
Subject key identifier: 32:0B:91:EF:8E:07:1A:63:A8:10:C7:6B:94:8C:CF:51:04:0D:61:FB
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9FFF63520B6A4DC2E04C279F6BAC5
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/MguR744HGmOoEMdrlIzPUQQNYfs.roa
Signing time: Thu 02 Jan 2025 11:50:08 +0000
ROA not before: Thu 02 Jan 2025 11:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 151.236.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ff:f6:35:20:b6:a4:dc:2e:04:c2:79:f6:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320b91ef8e071a63a810c76b948ccf51040d61fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:5a:ac:db:66:41:13:f7:3c:5e:b3:91:35:
19:1f:fd:17:a8:14:51:90:d3:80:75:f4:cf:3c:48:
f6:7f:43:fd:d9:52:0d:03:95:59:e2:ed:ca:14:05:
32:51:87:60:bf:ed:ed:89:4c:53:fa:6e:51:bd:69:
1e:42:5c:eb:40:14:a3:64:85:c5:41:9f:b9:60:b8:
87:ba:9f:d0:d1:43:2c:02:e6:9a:c6:4e:7c:39:62:
15:1f:c0:2b:78:06:eb:13:13:53:a8:0d:17:ba:5e:
5e:b4:35:99:dd:1a:49:9c:58:c9:3c:09:f7:b1:1e:
98:6c:7f:ca:78:d5:94:18:45:7e:ae:bb:4e:24:bd:
3f:87:0d:e2:d4:b7:b6:d7:98:cb:1c:c0:80:61:66:
87:18:d1:a4:fc:31:b9:e4:a6:23:e8:f1:37:8c:cf:
af:4e:1b:82:f3:23:17:fd:2a:39:b0:1d:01:84:ae:
82:66:fc:d7:d4:a1:56:17:dd:17:09:32:d0:e9:6a:
42:44:55:26:90:d2:a0:56:20:b4:0d:a2:1f:26:b6:
14:76:f8:4b:4b:be:c7:4f:ae:01:14:5d:14:d5:2b:
b4:2c:e7:07:77:55:71:6f:2f:8e:74:10:88:0c:88:
16:15:57:2f:de:cb:f5:ad:e8:11:e9:69:14:52:7d:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:91:EF:8E:07:1A:63:A8:10:C7:6B:94:8C:CF:51:04:0D:61:FB
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/MguR744HGmOoEMdrlIzPUQQNYfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.31.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b0:f9:a5:c2:fd:be:a5:3a:3b:3d:54:bb:c2:0d:4a:0b:65:
91:47:b6:f2:86:9a:8c:86:6f:70:95:1b:5f:19:96:ae:11:e9:
76:1e:3d:72:7b:a8:35:45:31:9b:94:29:27:ec:51:8a:5e:01:
de:7e:a9:8e:1f:34:03:42:bf:9f:a6:38:be:00:32:f1:fe:df:
16:b9:63:ea:fa:0f:00:72:94:51:fa:f8:ab:e6:58:81:df:52:
54:03:6a:ea:e1:b2:9d:7e:4a:0b:7e:43:ad:bb:fb:82:6e:ce:
3a:08:49:8d:09:3f:54:65:aa:bf:5d:9b:58:46:7a:7c:a8:d4:
33:53:32:a4:65:b8:9b:35:d7:d3:47:1a:7f:f3:a1:a8:d7:e8:
58:ea:10:54:87:74:af:a8:f4:c3:89:52:ed:73:10:cc:e8:fd:
82:e2:e9:a5:50:16:35:41:6d:07:cc:c8:37:31:62:bb:33:e1:
e8:32:11:0d:19:11:95:da:e3:9d:92:63:20:10:26:82:79:7f:
6e:4a:75:a7:68:4c:97:61:f4:40:19:e8:68:61:b1:fa:c1:41:
f2:a1:bb:f1:52:3b:7e:2e:ac:72:d0:47:bc:0e:22:35:56:fc:
4b:ea:f0:65:4e:c7:30:a5:0e:13:79:9a:d2:2f:c6:e6:22:fd:
e1:09:17:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2f/2NSC2pNwuBMJ59rrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjUwMTAyMTE1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjBiOTFlZjhlMDcxYTYzYTgxMGM3NmI5NDhjY2Y1MTA0MGQ2MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnlarNtmQRP3PF6zkTUZH/0XqBRR
kNOAdfTPPEj2f0P92VINA5VZ4u3KFAUyUYdgv+3tiUxT+m5RvWkeQlzrQBSjZIXF
QZ+5YLiHup/Q0UMsAuaaxk58OWIVH8AreAbrExNTqA0Xul5etDWZ3RpJnFjJPAn3
sR6YbH/KeNWUGEV+rrtOJL0/hw3i1Le215jLHMCAYWaHGNGk/DG55KYj6PE3jM+v
ThuC8yMX/So5sB0BhK6CZvzX1KFWF90XCTLQ6WpCRFUmkNKgViC0DaIfJrYUdvhL
S77HT64BFF0U1Su0LOcHd1Vxby+OdBCIDIgWFVcv3sv1regR6WkUUn0REQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDILke+OBxpjqBDHa5SMz1EEDWH7MB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvTWd1Ujc0NEhHbU9vRU1kcmxJelBVUVFOWWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+wfMA0G
CSqGSIb3DQEBCwUAA4IBAQBUsPmlwv2+pTo7PVS7wg1KC2WRR7byhpqMhm9wlRtf
GZauEel2Hj1ye6g1RTGblCkn7FGKXgHefqmOHzQDQr+fpji+ADLx/t8WuWPq+g8A
cpRR+vir5liB31JUA2rq4bKdfkoLfkOtu/uCbs46CEmNCT9UZaq/XZtYRnp8qNQz
UzKkZbibNdfTRxp/86Go1+hY6hBUh3SvqPTDiVLtcxDM6P2C4umlUBY1QW0HzMg3
MWK7M+HoMhENGRGV2uOdkmMgECaCeX9uSnWnaEyXYfRAGehoYbH6wUHyobvxUjt+
Lqxy0Ee8DiI1VvxL6vBlTscwpQ4TeZrSL8bmIv3hCRc6
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:39 2025 by rpki-client