Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/MszgOAAx9XeI1MVLP-xGh1BRIhg.roa
File: MszgOAAx9XeI1MVLP-xGh1BRIhg.roa (raw, json)
Hash identifier: WamdHLaO0d/gDKp1GaJztIEAFjj7lOKHx6RPbvGSoNg=
Subject key identifier: 32:CC:E0:38:00:31:F5:77:88:D4:C5:4B:3F:EC:46:87:50:51:22:18
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 036BE474
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/MszgOAAx9XeI1MVLP-xGh1BRIhg.roa
Signing time: Wed 02 Feb 2022 08:22:47 +0000
ROA not before: Wed 02 Feb 2022 08:22:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.199.163.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
194.113.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57402484 (0x36be474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 2 08:22:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32cce0380031f57788d4c54b3fec468750512218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:b6:69:01:8f:c0:5e:54:38:5e:6d:21:63:
6b:c6:d8:f2:4b:81:05:11:5f:58:20:b2:dc:d2:f9:
49:5e:52:e6:fb:8e:fd:8d:91:a3:e2:6a:d8:0d:b6:
1f:bd:ad:de:12:25:b5:6c:3c:23:b5:c9:c2:68:8f:
90:cc:7c:f7:a1:8a:03:fd:89:a5:60:a3:a8:16:6c:
cd:22:ea:d4:67:69:e9:f6:2b:04:cc:77:4f:67:ef:
4f:34:bc:1e:f0:97:00:6a:ce:82:a5:00:de:7d:b1:
be:80:aa:3b:89:59:30:89:23:0c:47:a8:86:a6:11:
71:79:c9:20:3b:2c:96:87:04:0b:64:1c:0b:ea:4a:
2b:41:31:f4:d2:83:56:b5:8d:a1:38:8e:52:ab:84:
50:6c:2a:02:84:47:0f:02:2d:ee:29:44:d4:64:29:
a9:5c:36:4a:1b:37:97:a9:c7:b5:de:88:5b:75:e2:
b9:23:a8:86:41:21:70:69:2d:84:b2:6d:d6:da:80:
97:93:99:63:40:91:72:28:d1:c8:8e:c7:4e:80:d4:
7a:19:63:28:5c:4e:78:16:92:99:0a:32:e2:72:6a:
c0:09:89:e6:b7:75:34:dd:93:90:77:2f:1f:ad:2c:
b9:a0:e5:92:69:12:de:5a:63:a0:ea:48:58:61:1f:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CC:E0:38:00:31:F5:77:88:D4:C5:4B:3F:EC:46:87:50:51:22:18
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/MszgOAAx9XeI1MVLP-xGh1BRIhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.163.0/24
193.111.125.0/24
193.142.4.0/24
194.113.222.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:c8:c0:7d:03:74:1e:55:eb:7f:7a:e5:39:f3:f8:14:46:83:
ed:a4:89:0a:e4:59:cb:8d:1d:13:a9:10:87:6e:8a:1e:21:cb:
a7:23:43:2c:1e:2c:80:bb:b7:f6:65:95:e0:19:4d:b6:87:33:
22:a4:df:65:c5:91:3d:a1:8c:59:37:07:26:8e:04:f7:d5:16:
77:2b:94:39:55:ec:7d:f0:24:06:01:85:81:0a:cc:68:5e:2a:
e0:ec:64:3f:84:68:fe:23:e4:1a:1c:1f:e6:91:f0:d9:13:75:
57:2b:dd:56:29:70:e5:12:2c:8f:d1:b9:3f:70:a0:48:b6:09:
1d:14:c5:83:0e:11:ab:1e:f7:55:20:60:3a:12:ee:06:6c:4c:
dc:cb:a7:05:81:1a:55:1f:4f:4b:80:74:62:5c:ad:f2:ea:ae:
f4:52:8b:e8:95:0c:e0:d3:cb:26:4e:cb:bc:00:56:28:8a:c8:
e6:85:e3:b6:5f:4a:58:c4:06:ef:12:75:fe:cb:5f:13:71:f4:
88:0f:70:4e:ca:33:49:3b:2f:cb:d2:1f:91:9c:9f:90:fa:9e:
b8:22:28:71:8a:07:5f:73:70:8f:85:06:fe:6c:8a:3b:86:6a:
c2:85:2a:11:3b:93:22:85:43:b0:65:ad:ae:3a:73:93:af:19:
24:8d:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:07 2025 by rpki-client