Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/mxkIV_Neo21FW6vGUNgK8GUqr0c.roa
File: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (raw, json)
Hash identifier: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=
Subject key identifier: 9B:19:08:57:F3:5E:A3:6D:45:5B:AB:C6:50:D8:0A:F0:65:2A:AF:47
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C4DFE41F7114A28A83F70046B7AA
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/mxkIV_Neo21FW6vGUNgK8GUqr0c.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59413
IP address blocks: 37.110.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c4:df:e4:1f:71:14:a2:8a:83:f7:00:46:b7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b190857f35ea36d455babc650d80af0652aaf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:51:2d:81:0a:a2:c9:93:4c:c1:48:24:d1:
07:26:72:cb:23:32:e6:5b:cf:bb:7b:01:73:25:72:
2c:b1:b6:30:ba:b9:b5:80:6e:32:55:94:79:15:a7:
ab:d2:f8:4c:2d:86:ec:d7:87:0e:33:81:b5:d2:66:
e2:72:71:91:8d:06:52:2e:fe:f6:43:fb:7b:f3:0a:
e5:9f:68:59:f7:bd:bb:05:31:1f:48:e8:39:6f:30:
6a:a4:e8:06:37:ee:55:f8:f9:b3:24:19:fc:60:78:
99:fe:00:9a:29:5e:ea:7f:a1:33:6a:a0:fb:96:ad:
c4:4e:18:0e:08:59:4f:2c:e5:3f:15:ae:d4:cf:8a:
1b:cf:4c:c9:fd:33:d7:a6:a1:97:b5:36:5a:ce:84:
40:7b:d8:90:ee:b1:ae:33:84:ff:34:39:82:16:d5:
8c:9f:24:37:8e:13:47:78:5b:58:d8:c9:8e:f4:fc:
15:94:70:27:e9:18:fc:e5:24:7a:99:28:97:47:71:
f3:1b:f0:ca:05:73:d3:7d:7d:84:2e:8f:55:f8:09:
33:8b:a1:42:15:ff:63:0e:db:c4:bc:8a:6e:cf:b8:
3c:f5:79:84:f5:f6:58:39:1a:97:04:6a:9d:e7:c4:
55:5f:93:9e:a8:00:94:22:49:a8:66:8e:ca:c1:1f:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:08:57:F3:5E:A3:6D:45:5B:AB:C6:50:D8:0A:F0:65:2A:AF:47
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/mxkIV_Neo21FW6vGUNgK8GUqr0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.192.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7b:c8:ad:b5:ed:f4:c1:b4:fa:70:5d:63:51:c6:75:7e:a7:
89:75:f4:30:02:a4:cb:0b:1c:6d:1e:1b:48:9c:e3:f3:31:fe:
69:f0:6f:63:bc:29:b8:c6:2c:b3:80:7a:93:5c:93:1c:77:2c:
8e:c8:26:17:af:d9:b9:29:a2:4d:b5:5d:a6:0c:f9:8b:55:22:
6b:c6:4b:8e:bf:14:5d:4c:67:a6:d7:a3:cf:46:6f:1a:58:f3:
04:14:30:45:91:6b:74:b9:05:45:8e:30:87:ff:4e:4d:ef:8a:
bc:2c:f4:25:0b:89:ea:ae:d4:51:9b:9f:19:7c:cb:dc:98:ef:
a3:75:c1:59:5a:ee:3d:fa:94:20:15:03:c0:47:c9:a4:c0:6c:
85:89:69:56:4b:5a:eb:bb:d7:fc:f9:13:ee:50:8e:08:ce:6e:
c1:47:68:ed:e5:a6:86:d4:bb:81:a2:1d:88:fe:dd:32:78:8d:
1b:5f:8b:a0:8a:d9:ba:34:44:0c:49:ff:4f:2a:6b:49:1d:21:
e6:ef:35:87:f4:84:21:6b:55:1b:99:2a:1d:13:d1:3e:21:a7:
9b:2b:15:e0:2c:77:c2:d4:65:be:85:89:4b:54:5c:2d:85:e8:
65:49:c2:05:0a:58:d7:01:a6:c8:31:7d:4c:35:24:e5:3c:e1:
d7:a8:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:28:35 2025 by rpki-client