Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MFMJBcnct-1ZuoRzl8i9kG_EDQ4.roa
File: MFMJBcnct-1ZuoRzl8i9kG_EDQ4.roa (raw, json)
Hash identifier: tTJ2AEsZiYBHt24JDoc0oaiavlOJ3trdR5BJHvYrM1Y=
Subject key identifier: 30:53:09:05:C9:DC:B7:ED:59:BA:84:73:97:C8:BD:90:6F:C4:0D:0E
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1AFB768B585337623529BED569A2
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MFMJBcnct-1ZuoRzl8i9kG_EDQ4.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206005
IP address blocks: 89.40.35.0/24 maxlen: 24
185.243.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1a:fb:76:8b:58:53:37:62:35:29:be:d5:69:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30530905c9dcb7ed59ba847397c8bd906fc40d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:cb:b9:28:ca:3b:de:75:1a:c1:c2:b0:77:
2a:23:5a:2d:64:45:ab:89:32:ef:69:48:22:d6:b9:
ea:a7:e6:2d:6f:f5:df:e8:1b:ad:ae:c6:30:fb:8f:
a2:e9:51:27:74:cb:56:c8:ec:64:d6:a0:f8:5a:34:
9a:c3:1a:82:75:70:66:ae:2e:69:36:1e:fe:bd:e7:
e4:d4:74:35:bc:60:63:98:cc:7f:ea:de:95:c5:75:
91:58:a7:0a:e9:25:8c:4d:d6:cd:de:e0:de:6f:58:
64:70:9e:e0:07:76:1e:67:42:58:7d:9a:0c:ad:32:
3b:85:46:67:4b:dd:a0:6d:0c:8b:b4:fb:60:0d:63:
da:c7:e8:2b:b1:76:64:cc:b6:58:24:5f:58:4b:cd:
ce:5e:4a:04:77:6f:95:f1:70:a2:8d:48:21:e4:9f:
61:2a:62:95:32:af:ca:4b:33:e2:44:4d:d8:30:f5:
12:fe:6a:b0:99:6e:eb:5a:c5:a4:6b:b5:41:32:9b:
4c:34:79:64:53:d4:53:b5:d7:e5:20:a4:09:68:e7:
23:df:5d:3e:a3:63:8f:9d:d0:24:e5:c2:55:34:7a:
39:9b:b2:e3:ce:80:0c:1d:0d:70:0f:65:47:9e:b3:
d3:ba:8f:40:fd:47:4d:c1:79:e0:6f:66:67:09:02:
02:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:53:09:05:C9:DC:B7:ED:59:BA:84:73:97:C8:BD:90:6F:C4:0D:0E
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/MFMJBcnct-1ZuoRzl8i9kG_EDQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.35.0/24
185.243.140.0/22
Signature Algorithm: sha256WithRSAEncryption
68:59:10:5e:15:b8:f6:ff:43:ef:86:bc:a3:92:3c:16:01:14:
75:b3:2f:96:68:07:2e:74:93:e5:ca:b4:c6:58:b3:bd:71:df:
f2:48:d1:ab:89:26:68:e9:cf:01:b6:c0:aa:99:68:b1:80:96:
20:1b:63:2a:f3:f0:a7:34:7a:46:4b:89:91:04:b6:98:48:db:
10:30:1c:b3:5f:d9:86:ae:2b:8d:f7:bf:91:13:96:ca:5c:45:
1e:ea:a0:64:b2:e5:c0:34:6d:d5:37:e6:ef:fa:38:9c:ff:79:
c1:61:07:d2:e3:0f:3d:ca:e5:56:2c:2c:91:9a:24:80:22:31:
b2:05:79:4f:69:4d:ff:58:68:e1:f0:8a:19:07:e4:00:d3:26:
6a:45:74:ac:7e:26:9c:db:76:30:b7:ee:3b:bc:c8:9e:cb:ad:
ef:08:85:2b:fb:ed:6c:00:3d:83:33:d9:9f:27:5f:30:d9:55:
06:b5:af:e3:e0:58:c8:1a:d9:35:67:4a:83:ab:a7:ed:5c:18:
de:fa:9e:9f:71:c8:8b:c0:51:76:9c:7c:9f:33:9f:72:a9:66:
36:e3:5b:f3:3d:e7:ca:38:d4:8a:0b:c4:54:0c:2b:f8:56:3c:
a9:84:09:7d:68:69:63:09:a0:ef:cb:6b:62:85:d7:ef:b0:78:
2a:b1:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:01:44 2025 by rpki-client