Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/MJ0lsMSoGBtVk8m1Kq8P03dVsfA.roa
File: MJ0lsMSoGBtVk8m1Kq8P03dVsfA.roa (raw, json)
Hash identifier: MClNHSwDmqia1DiDtZswggK6/0kkzuRHQ3i56wrDV18=
Subject key identifier: 30:9D:25:B0:C4:A8:18:1B:55:93:C9:B5:2A:AF:0F:D3:77:55:B1:F0
Certificate issuer: /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial: 0256E610
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/MJ0lsMSoGBtVk8m1Kq8P03dVsfA.roa
Signing time: Wed 04 May 2022 06:00:25 +0000
ROA not before: Wed 04 May 2022 06:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.81.36.0/24 maxlen: 24
45.81.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39249424 (0x256e610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Validity
Not Before: May 4 06:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=309d25b0c4a8181b5593c9b52aaf0fd37755b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:7b:c5:d4:4e:eb:be:7c:01:0a:9e:8f:a3:
98:94:c2:02:51:bd:90:44:e2:60:a9:e6:c3:fb:39:
fd:d7:63:c8:fd:7d:95:27:3a:95:1f:ea:f6:f3:f9:
63:4f:67:19:4f:95:e7:01:07:b3:3f:7b:09:25:22:
71:d6:31:a4:ee:5c:60:2d:16:1d:93:7b:71:64:ff:
49:89:6e:44:cb:f8:e8:8d:36:3c:eb:55:3d:39:4c:
6a:43:50:14:81:d3:a0:b3:a2:0a:8d:85:80:0d:13:
f6:e5:5d:6e:67:5c:af:68:80:70:87:0c:e3:82:93:
bc:04:08:3e:bd:b4:fd:66:89:69:f7:e3:45:78:c5:
ba:d6:b1:03:a8:12:2d:2b:89:d7:fc:1f:cc:73:3b:
ec:93:32:d0:7d:c7:76:c8:82:25:40:a0:39:83:ba:
3b:75:55:ab:ff:3d:16:6c:a5:d3:13:ad:3c:f5:f1:
35:83:72:0a:9d:e7:e1:35:6e:ee:c3:86:ff:fa:f3:
6f:c2:cc:37:2a:a7:a8:3b:bc:35:87:db:76:6f:7a:
65:02:bd:99:ae:e5:f4:ce:9a:5f:55:e6:30:94:48:
94:f1:8c:e2:82:da:86:1c:42:5a:00:6d:1f:b7:35:
f9:eb:98:74:02:44:f3:26:ee:06:73:44:3d:cb:c3:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9D:25:B0:C4:A8:18:1B:55:93:C9:B5:2A:AF:0F:D3:77:55:B1:F0
X509v3 Authority Key Identifier:
keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/MJ0lsMSoGBtVk8m1Kq8P03dVsfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.36.0/24
45.81.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7a:53:e1:a1:3a:bd:f1:f6:9e:16:87:63:ff:54:58:a4:04:
4f:85:57:84:d9:47:70:26:7b:20:19:b2:83:06:8d:bf:3e:c2:
5e:e5:69:e2:22:de:88:82:6c:4a:12:ed:2d:29:6e:90:fc:4c:
5d:11:3a:8e:87:c6:47:ce:28:eb:d1:46:cc:d1:00:1f:2a:77:
c3:4f:67:e7:52:73:af:59:bc:13:da:4c:cb:65:d5:de:7f:84:
2d:44:4c:20:5e:7f:44:fd:4d:27:21:66:1d:af:24:6c:a2:d5:
0b:e7:d8:05:e2:53:71:61:e0:73:7d:1d:a1:b0:ea:08:95:2f:
22:e9:d3:f4:16:12:65:8d:b4:36:86:44:df:5d:9f:dd:80:e0:
96:6e:45:78:02:06:2e:f9:f1:66:47:bb:90:12:c3:49:8c:04:
82:aa:b0:8a:96:77:ee:8c:34:e0:c0:e3:e0:f7:68:7e:e9:45:
dc:3a:c4:63:ab:9a:64:b6:90:15:7b:c6:64:ad:6c:02:fd:16:
05:bc:e0:c4:06:91:f8:bc:48:8a:d7:d0:9d:e0:ac:45:35:e9:
8e:33:ad:d6:c2:5c:fc:ef:9a:7d:81:49:a4:77:38:0a:0f:c4:
d7:21:32:c2:d9:f5:4e:ca:58:f2:61:1a:dc:e0:96:f6:7c:7f:
d0:56:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:32 2025 by rpki-client