Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MZ5ZbE2lpKRGon_Wom6QIvvNlKg.roa
File: MZ5ZbE2lpKRGon_Wom6QIvvNlKg.roa (raw, json)
Hash identifier: J7dzG6wiFB4U2W8moykH6LVV6hyl47KsN9HkvKCq+PI=
Subject key identifier: 31:9E:59:6C:4D:A5:A4:A4:46:A2:7F:D6:A2:6E:90:22:FB:CD:94:A8
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F88BA3539CE66F0FA9024AC91653A
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MZ5ZbE2lpKRGon_Wom6QIvvNlKg.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3561
IP address blocks: 46.151.36.0/22 maxlen: 24
77.36.112.0/21 maxlen: 24
77.36.124.0/22 maxlen: 22
81.161.4.0/22 maxlen: 24
91.237.44.0/22 maxlen: 24
93.120.96.0/22 maxlen: 22
194.33.100.0/22 maxlen: 24
194.33.100.0/23 maxlen: 24
194.33.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:88:ba:35:39:ce:66:f0:fa:90:24:ac:91:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=319e596c4da5a4a446a27fd6a26e9022fbcd94a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:12:69:fd:51:84:56:e6:37:4f:15:5b:fb:
ae:f9:c3:55:9c:ad:d2:43:ac:0a:2d:56:0f:1d:5e:
48:22:11:e3:1a:a0:58:72:d2:05:1b:f4:05:c7:09:
d6:7a:8a:03:b5:a0:61:99:19:79:c1:f4:bc:2f:e1:
2c:1d:ac:1f:56:d6:29:34:14:e6:72:1f:c5:fc:8c:
8b:ff:80:f6:96:86:63:0e:94:3e:05:50:32:c4:23:
77:6a:09:b3:99:91:d5:31:ef:a2:b5:a9:6f:ea:dd:
c4:68:c5:10:df:a3:e3:92:bf:31:44:26:b0:04:f9:
29:e3:09:4e:a9:34:cb:30:a7:b2:bb:00:46:19:83:
b7:42:f0:7c:06:98:e6:96:9c:69:ff:2f:3c:f2:f8:
aa:a7:03:97:fc:cc:fe:30:b4:62:af:97:fb:af:c1:
ff:e1:07:92:13:04:3e:d9:14:6c:95:2c:36:cf:f1:
cb:77:4e:21:42:0b:fd:97:91:1a:c5:94:79:e4:a0:
fa:6f:e0:25:53:8b:dd:f8:2b:d5:b1:94:40:43:64:
5c:15:77:66:cb:61:a9:7e:f9:18:e2:38:b3:42:e8:
39:06:89:bb:ad:83:7d:90:3b:56:fc:e7:77:a6:ea:
0f:f8:f8:00:6e:82:b6:64:bb:55:3a:e4:1a:55:99:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:59:6C:4D:A5:A4:A4:46:A2:7F:D6:A2:6E:90:22:FB:CD:94:A8
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MZ5ZbE2lpKRGon_Wom6QIvvNlKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.36.0/22
77.36.112.0/21
77.36.124.0/22
81.161.4.0/22
91.237.44.0/22
93.120.96.0/22
194.33.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:52:6d:0e:6a:50:d8:3b:ee:ee:df:a6:73:62:c5:ea:14:a7:
16:2c:90:57:91:f7:89:b5:1e:26:f8:22:42:08:22:bc:20:23:
42:7a:f1:66:d4:32:09:8e:0f:c0:34:d8:fd:a2:5d:68:54:dc:
29:89:ff:92:c1:fd:ae:3b:c2:f0:34:ae:13:f0:ed:d9:4d:16:
72:79:70:b3:93:0c:dc:ee:5a:47:b3:e0:1c:7b:28:0d:28:c9:
e0:d9:1a:9a:c9:f4:27:2a:4f:d2:7a:27:61:01:17:da:b5:50:
18:db:94:34:86:84:b1:59:2f:28:c8:a5:ea:5f:46:48:d5:5f:
69:a5:00:5d:78:d2:69:35:17:b4:b2:af:94:df:46:62:d7:8b:
6e:d8:b8:b7:e1:29:ab:e9:df:d9:2e:82:90:9c:ff:e9:44:60:
b0:14:ed:fe:5d:b6:ee:a6:e5:ae:d4:3c:4b:22:58:19:4f:27:
a3:b5:1f:4b:1f:a3:a0:79:4d:11:9a:31:52:5d:47:cf:28:ee:
c7:41:5c:c4:ae:8f:dd:16:81:0e:8f:b8:45:5b:20:fd:74:63:
8a:63:b3:50:d5:f9:34:d3:ce:88:d2:aa:3b:b0:44:d3:93:a4:
48:a1:d0:ed:2e:04:ce:82:bd:2a:05:5b:84:bb:7f:66:78:68:
85:d0:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:50 2025 by rpki-client