Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/MwVVbPzrYnJJnyB8eRiPNnV-iC4.roa
File: MwVVbPzrYnJJnyB8eRiPNnV-iC4.roa (raw, json)
Hash identifier: Jqs2faMRJuoHgWvGSB327eI2m8hpK7rhOhwZDUCunnU=
Subject key identifier: 33:05:55:6C:FC:EB:62:72:49:9F:20:7C:79:18:8F:36:75:7E:88:2E
Certificate issuer: /CN=4fa0f6a5aee15e8454a284847fa6dd1aebc23932
Certificate serial: 088079E2
Authority key identifier: 4F:A0:F6:A5:AE:E1:5E:84:54:A2:84:84:7F:A6:DD:1A:EB:C2:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6D2pa7hXoRUooSEf6bdGuvCOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/MwVVbPzrYnJJnyB8eRiPNnV-iC4.roa
Signing time: Sat 01 Jan 2022 11:53:53 +0000
ROA not before: Sat 01 Jan 2022 11:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45012
IP address blocks: 46.243.88.0/21 maxlen: 24
109.237.128.0/20 maxlen: 24
185.3.232.0/22 maxlen: 24
2a02:2b80::/32 maxlen: 48
2a02:2b80::/48 maxlen: 48
2a02:2b80:393::/48 maxlen: 48
2a02:2b80:1::/48 maxlen: 48
2a02:2b80:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142637538 (0x88079e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa0f6a5aee15e8454a284847fa6dd1aebc23932
Validity
Not Before: Jan 1 11:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3305556cfceb6272499f207c79188f36757e882e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:8a:69:21:00:87:9e:97:8e:d1:6d:fb:9e:
38:c1:39:9c:9c:c5:ab:85:b9:57:b8:50:a2:60:34:
50:df:dd:e2:d0:30:7d:86:7f:21:75:01:bc:c3:c3:
81:2c:a7:03:da:2f:01:be:44:91:9f:70:9c:5e:ba:
8d:d1:af:1a:a8:51:9e:f8:98:55:75:e7:43:09:1a:
11:2d:7b:5d:77:00:b4:5b:53:20:f3:c1:c2:56:d0:
72:50:82:56:d8:16:63:02:de:55:42:92:d4:4c:1d:
e7:e7:6f:ed:fa:14:24:b0:4b:8c:54:41:70:37:9e:
c9:69:d5:f0:a1:ec:f0:55:95:ef:96:12:51:45:6a:
85:5d:91:b7:d3:f0:a2:35:9b:ad:58:a8:12:8b:60:
8e:8e:54:c6:72:ba:c2:8f:72:03:8f:26:b5:39:00:
5c:97:54:9d:d8:9e:3e:82:59:e0:cd:1d:23:d8:3f:
0d:36:5f:46:89:59:cf:41:47:65:bc:0f:e1:b8:50:
ff:8e:3c:36:6b:90:33:46:18:aa:fe:75:5e:98:e1:
3f:7a:5a:e8:be:93:74:1a:12:35:98:8c:5e:63:9e:
6d:ba:71:7e:53:bc:9f:bb:0c:c9:a4:8a:43:7a:37:
89:61:4d:37:f2:96:d9:82:47:3f:95:0f:91:f2:d7:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:55:6C:FC:EB:62:72:49:9F:20:7C:79:18:8F:36:75:7E:88:2E
X509v3 Authority Key Identifier:
keyid:4F:A0:F6:A5:AE:E1:5E:84:54:A2:84:84:7F:A6:DD:1A:EB:C2:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6D2pa7hXoRUooSEf6bdGuvCOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/MwVVbPzrYnJJnyB8eRiPNnV-iC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/T6D2pa7hXoRUooSEf6bdGuvCOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.88.0/21
109.237.128.0/20
185.3.232.0/22
IPv6:
2a02:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ef:bf:44:c4:c9:31:e1:c2:a0:0b:5b:e0:9a:82:33:59:2a:
0a:6b:aa:ad:64:5f:97:95:43:cb:b3:71:d7:01:66:3e:0e:4f:
1e:aa:78:f1:f8:f6:ea:b3:e8:14:99:23:1a:65:44:77:76:ee:
65:68:6b:32:ad:1b:7b:ae:1b:91:07:9c:e2:f4:e4:6b:1f:e7:
cc:2b:66:05:5b:78:6d:51:35:d0:47:4e:62:14:54:25:99:bf:
f1:c8:26:ff:31:9d:eb:93:14:01:19:f7:83:04:3b:a8:01:67:
18:89:ca:72:c6:4c:b8:42:c1:fa:ca:2f:d1:5f:bb:44:bd:47:
c1:ae:5c:1c:a3:6b:a2:e1:57:17:b8:98:01:2a:95:19:83:73:
45:62:18:66:77:a5:de:f7:ac:ae:b7:1e:27:6b:cc:15:76:5f:
e5:39:26:b2:a3:ee:b0:0a:40:02:7c:8b:79:15:a3:b1:fa:cc:
f0:f6:b5:a6:20:c8:34:a0:6b:4e:45:54:49:33:5a:99:d5:ce:
84:dc:e5:a6:4e:8d:e7:d4:50:d6:06:80:56:3f:75:6f:65:be:
27:e5:bd:21:3e:16:0c:74:74:f6:a3:40:62:73:fa:de:bf:33:
2c:2e:94:87:c9:ee:5b:94:6b:81:37:d1:7f:a5:f1:41:38:ec:
c3:09:14:5a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIECIB54jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZmEwZjZhNWFlZTE1ZTg0NTRhMjg0ODQ3ZmE2ZGQxYWViYzIzOTMyMB4XDTIyMDEw
MTExNTM1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzMwNTU1NmNmY2Vi
NjI3MjQ5OWYyMDdjNzkxODhmMzY3NTdlODgyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/CimkhAIeel47RbfueOME5nJzFq4W5V7hQomA0UN/d4tAw
fYZ/IXUBvMPDgSynA9ovAb5EkZ9wnF66jdGvGqhRnviYVXXnQwkaES17XXcAtFtT
IPPBwlbQclCCVtgWYwLeVUKS1Ewd5+dv7foUJLBLjFRBcDeeyWnV8KHs8FWV75YS
UUVqhV2Rt9PwojWbrVioEotgjo5UxnK6wo9yA48mtTkAXJdUndiePoJZ4M0dI9g/
DTZfRolZz0FHZbwP4bhQ/448NmuQM0YYqv51XpjhP3pa6L6TdBoSNZiMXmOebbpx
flO8n7sMyaSKQ3o3iWFNN/KW2YJHP5UPkfLXlFcCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBQzBVVs/OtickmfIHx5GI82dX6ILjAfBgNVHSMEGDAWgBRPoPalruFehFSi
hIR/pt0a68I5MjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Q2RDJwYTdoWG9SVW9vU0VmNmJkR3V2Q09USS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2UvMGJiNmMxLTljMTYtNDQ0Ni1hOWE5LWM4MDg3Y2RjODYzMS8x
L013VlZiUHpyWW5KSm55QjhlUmlQTm5WLWlDNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Uv
MGJiNmMxLTljMTYtNDQ0Ni1hOWE5LWM4MDg3Y2RjODYzMS8xL1Q2RDJwYTdoWG9S
VW9vU0VmNmJkR3V2Q09USS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAy7zWAMEBG3tgAMEArkD6DANBAIA
AjAHAwUAKgIrgDANBgkqhkiG9w0BAQsFAAOCAQEAse+/RMTJMeHCoAtb4JqCM1kq
CmuqrWRfl5VDy7Nx1wFmPg5PHqp48fj26rPoFJkjGmVEd3buZWhrMq0be64bkQec
4vTkax/nzCtmBVt4bVE10EdOYhRUJZm/8cgm/zGd65MUARn3gwQ7qAFnGInKcsZM
uELB+sov0V+7RL1Hwa5cHKNrouFXF7iYASqVGYNzRWIYZnel3vesrrceJ2vMFXZf
5TkmsqPusApAAnyLeRWjsfrM8Pa1piDINKBrTkVUSTNamdXOhNzlpk6N59RQ1gaA
Vj91b2W+J+W9IT4WDHR09qNAYnP63r8zLC6Uh8nuW5RrgTfRf6XxQTjswwkUWg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:17 2025 by rpki-client