Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/mjZQqpBxq3tzElUxwYWj6w8CYqw.roa
File: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (raw, json)
Hash identifier: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=
Subject key identifier: 9A:36:50:AA:90:71:AB:7B:73:12:55:31:C1:85:A3:EB:0F:02:62:AC
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 0194221FCD533059FD0F8310ED84782EDCAB
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/mjZQqpBxq3tzElUxwYWj6w8CYqw.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42914
IP address blocks: 91.193.208.0/22 maxlen: 22
178.16.96.0/20 maxlen: 20
194.61.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cd:53:30:59:fd:0f:83:10:ed:84:78:2e:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a3650aa9071ab7b73125531c185a3eb0f0262ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:31:18:40:e0:b0:55:a9:71:80:e8:11:76:
3a:d1:33:55:af:dd:4f:d8:c9:bc:64:c4:93:aa:28:
6b:08:33:39:d4:c8:29:d9:0e:38:0b:07:19:6f:57:
b3:3e:cf:3d:db:0a:a6:c1:4c:9a:4c:3c:6e:d3:8a:
ec:69:94:64:01:95:72:2b:5c:d7:0f:db:d8:91:be:
4b:e3:3f:67:54:25:03:15:73:82:c6:43:af:9d:ae:
2a:fe:7c:50:5d:de:35:55:f4:a4:c5:75:4d:6a:8e:
61:f2:de:e3:96:1d:ff:3b:0c:a9:7a:0a:c4:27:92:
9d:c6:0d:63:a2:71:3e:ac:c7:db:03:47:ba:dd:c1:
d2:31:50:e3:55:21:5f:b2:25:2e:86:dc:92:61:2c:
d3:3a:8d:c6:ce:7c:df:fb:c8:e5:5b:b5:5a:e3:3c:
11:08:54:21:32:a1:33:1f:71:63:92:8c:5c:2c:30:
02:19:2e:ca:b9:e3:1b:d4:05:1d:5a:91:5c:d1:47:
6d:c7:a4:d7:bc:20:97:77:b6:a2:ef:05:16:e7:0f:
9d:f0:a9:e2:dc:9b:8f:06:1e:3a:56:9c:ee:12:d9:
b3:87:49:8e:9d:ba:6b:99:2f:43:ae:6c:65:54:c7:
cc:f0:4c:20:37:96:1c:d8:2f:ea:67:2f:0f:07:75:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:50:AA:90:71:AB:7B:73:12:55:31:C1:85:A3:EB:0F:02:62:AC
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/mjZQqpBxq3tzElUxwYWj6w8CYqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.208.0/22
178.16.96.0/20
194.61.228.0/22
Signature Algorithm: sha256WithRSAEncryption
11:a3:e1:2a:8e:b0:1b:e5:df:4b:d4:2e:37:54:6f:95:bc:9f:
8d:76:08:b1:b0:3b:f8:0f:ff:24:4d:0b:46:eb:56:27:76:55:
03:79:79:1a:bc:97:43:aa:bf:14:4c:f5:bc:66:b7:93:34:c5:
26:be:76:26:6d:cd:4d:21:ea:48:98:26:17:a5:82:25:f3:0a:
8e:16:a6:99:73:b5:7b:ff:9b:7a:4e:89:c4:bb:ae:9c:01:b2:
6b:ab:b7:bb:cb:06:b5:d7:ed:2f:63:f9:ab:cc:ba:81:9d:cd:
d5:41:f7:9c:28:ba:4a:32:ec:77:01:53:aa:5c:79:06:85:a7:
7a:75:6f:b9:4f:e7:c9:ce:50:31:1e:ce:80:39:fd:8b:c5:97:
22:13:06:2c:ed:5c:da:9b:36:d1:c9:73:dc:50:10:c6:fb:50:
2a:ae:12:49:62:7a:38:99:f8:66:7f:b8:e2:08:1d:62:dd:71:
ed:54:20:b6:46:4a:d3:b6:9a:e5:db:4a:b3:6b:e8:0d:76:1d:
c0:3e:6e:93:61:56:b8:81:88:6b:77:a5:5d:95:ae:91:b4:37:
a8:0f:9c:2f:ce:e6:f0:39:1e:be:67:90:2a:6a:d9:d7:3f:8f:
6c:7b:e5:1a:5b:17:cc:ca:e9:cc:00:ef:22:f3:6e:83:7e:f5:
2c:6b:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:32 2025 by rpki-client