Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/MmPCpPvWuuUf5x6TDmfT3PrjZj8.roa
File: MmPCpPvWuuUf5x6TDmfT3PrjZj8.roa (raw, json)
Hash identifier: 2jldcUwl45bwLwzlytCkPIRK4/t2M1DF9TOxocFbbbg=
Subject key identifier: 32:63:C2:A4:FB:D6:BA:E5:1F:E7:1E:93:0E:67:D3:DC:FA:E3:66:3F
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0193B0E1AA2BB537C93D223579619595FD25
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/MmPCpPvWuuUf5x6TDmfT3PrjZj8.roa
Signing time: Tue 10 Dec 2024 14:03:19 +0000
ROA not before: Tue 10 Dec 2024 14:03:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200736
IP address blocks: 94.131.32.0/20 maxlen: 24
94.131.128.0/19 maxlen: 24
94.131.130.0/24 maxlen: 24
94.131.131.0/24 maxlen: 24
94.131.132.0/24 maxlen: 24
94.131.133.0/24 maxlen: 24
94.131.134.0/24 maxlen: 24
94.131.135.0/24 maxlen: 24
94.131.136.0/24 maxlen: 24
94.131.137.0/24 maxlen: 24
94.131.138.0/24 maxlen: 24
94.131.139.0/24 maxlen: 24
94.131.140.0/24 maxlen: 24
94.131.141.0/24 maxlen: 24
94.131.142.0/24 maxlen: 24
94.131.143.0/24 maxlen: 24
94.131.144.0/23 maxlen: 23
94.131.144.0/24 maxlen: 24
94.131.145.0/24 maxlen: 24
94.131.146.0/24 maxlen: 24
94.131.147.0/24 maxlen: 24
94.131.148.0/24 maxlen: 24
94.131.149.0/24 maxlen: 24
94.131.150.0/24 maxlen: 24
94.131.151.0/24 maxlen: 24
94.131.152.0/24 maxlen: 24
94.131.153.0/24 maxlen: 24
94.131.154.0/24 maxlen: 24
94.131.155.0/24 maxlen: 24
94.131.156.0/24 maxlen: 24
94.131.157.0/24 maxlen: 24
94.131.158.0/24 maxlen: 24
94.131.159.0/24 maxlen: 24
94.131.160.0/20 maxlen: 24
94.131.161.0/24 maxlen: 24
94.131.162.0/24 maxlen: 24
94.131.163.0/24 maxlen: 24
94.131.165.0/24 maxlen: 24
94.131.166.0/24 maxlen: 24
94.131.167.0/24 maxlen: 24
94.131.169.0/24 maxlen: 24
94.131.170.0/24 maxlen: 24
94.131.172.0/24 maxlen: 24
94.131.173.0/24 maxlen: 24
94.131.174.0/24 maxlen: 24
95.164.124.0/22 maxlen: 24
95.164.176.0/20 maxlen: 24
95.164.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:e1:aa:2b:b5:37:c9:3d:22:35:79:61:95:95:fd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 10 14:03:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3263c2a4fbd6bae51fe71e930e67d3dcfae3663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:f1:50:c6:31:f0:4c:79:2b:1e:3b:7c:34:
3e:45:9c:14:d5:84:05:ac:9f:f8:4f:54:8b:8d:2c:
1d:d8:b4:9f:ef:99:ca:9b:36:68:ea:80:60:ef:fd:
25:0d:96:dc:ad:06:4b:3d:34:c5:43:fb:f8:5a:fe:
4a:70:9e:34:0d:02:9b:f6:6c:09:5a:e3:f3:94:0d:
8d:1c:2f:f7:fb:bd:6f:b7:0b:42:57:f0:2b:40:3a:
e0:5c:d3:f7:01:46:d7:26:fe:32:70:d9:a6:99:42:
58:7c:d9:18:47:4f:3b:30:3f:d5:58:41:8e:8e:6f:
f3:0b:6f:f6:c1:4d:b5:93:d8:b7:f1:59:61:15:82:
f7:33:1e:6c:4b:ac:d1:72:7b:25:ca:d6:55:1a:9a:
09:bc:29:95:5e:3b:89:74:53:53:0e:cf:23:76:1a:
38:49:0e:82:8c:ff:06:af:a0:1f:fb:54:47:b3:c2:
49:76:9b:1c:c5:4d:81:7e:03:7f:f7:6c:c6:c7:c8:
7e:0c:e2:76:91:4d:66:37:66:90:4b:41:cc:56:ef:
90:9a:84:e1:8d:1f:be:52:d9:c4:f1:07:b8:e1:8f:
2e:3b:ec:72:5c:e7:38:28:8f:17:21:bc:cd:9a:89:
68:a8:43:cd:92:8a:52:18:f3:5b:6d:57:ad:9e:28:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:63:C2:A4:FB:D6:BA:E5:1F:E7:1E:93:0E:67:D3:DC:FA:E3:66:3F
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/MmPCpPvWuuUf5x6TDmfT3PrjZj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.32.0/20
94.131.128.0-94.131.175.255
95.164.124.0/22
95.164.176.0/20
95.164.208.0/20
Signature Algorithm: sha256WithRSAEncryption
23:65:26:80:e8:21:1e:56:45:34:a1:bc:5e:fd:b4:13:29:b3:
e0:e5:0d:ab:d5:35:af:f9:e8:8d:29:31:97:9a:01:da:4e:b0:
09:33:52:f9:42:8f:a9:99:7c:8f:77:51:64:d9:0f:fb:2e:88:
7f:ea:de:c7:01:f8:6c:1e:0a:97:2c:64:6f:4a:8e:cd:2c:65:
3d:61:e0:de:a5:4b:58:7b:0b:5e:90:db:a4:c7:76:14:7c:f7:
7a:85:36:22:d7:34:ea:3e:a2:55:ce:51:78:5c:4f:0c:93:ac:
55:20:62:26:13:5c:5d:84:f1:3c:91:18:ca:98:b7:0a:34:67:
76:3b:c3:81:fc:6f:5b:c6:bf:40:b0:1a:88:6e:bc:ee:0a:59:
41:fc:c2:9e:1d:e8:3c:03:1d:26:d7:98:7d:3c:3a:3d:7f:db:
15:e7:cf:cb:70:b9:e9:67:61:f9:12:e7:fd:7e:0f:39:40:fa:
f2:99:ef:fd:e3:91:f9:c4:09:da:a3:84:57:e1:0b:36:3d:0e:
a7:4e:95:09:d8:d1:c0:c2:96:56:2b:54:e1:4d:96:9f:04:5b:
a6:77:12:d1:ca:b2:4c:d4:71:dd:b8:21:5a:b0:66:3b:5d:96:
c9:d2:52:21:ea:41:dd:06:32:1f:0a:95:e0:80:11:f7:37:bb:
ae:e9:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:18 2025 by rpki-client