Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/MSo868CYu5MaZVDtsZaVZ0MxgNE.roa
File: MSo868CYu5MaZVDtsZaVZ0MxgNE.roa (raw, json)
Hash identifier: jINB1yAyDQGKncIVhH10GBCdNaYPN3JTAbOnT9hhzA4=
Subject key identifier: 31:2A:3C:EB:C0:98:BB:93:1A:65:50:ED:B1:96:95:67:43:31:80:D1
Certificate issuer: /CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
Certificate serial: 041E492B
Authority key identifier: 09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/MSo868CYu5MaZVDtsZaVZ0MxgNE.roa
Signing time: Sat 01 Jan 2022 14:07:38 +0000
ROA not before: Sat 01 Jan 2022 14:07:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213195
IP address blocks: 46.230.168.0/22 maxlen: 22
5.254.168.0/22 maxlen: 22
46.230.172.0/22 maxlen: 22
5.254.192.0/19 maxlen: 19
178.72.4.0/22 maxlen: 22
92.241.208.0/22 maxlen: 22
92.241.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69093675 (0x41e492b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
Validity
Not Before: Jan 1 14:07:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=312a3cebc098bb931a6550edb1969567433180d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:72:93:63:47:f9:b9:a8:d9:d4:24:97:e1:
80:6e:11:f6:37:dc:d4:32:f8:41:0e:d3:66:47:40:
63:19:8d:24:84:fa:40:c5:93:7c:e3:57:19:3a:48:
28:ce:53:ea:c4:00:4e:b2:c6:cb:9e:23:53:ab:b2:
11:d8:86:8a:81:0e:4a:72:55:ef:0f:4b:26:0d:48:
86:29:ba:2f:17:08:7e:62:8a:1a:68:5c:4e:54:1e:
9f:b9:b4:64:0a:78:f8:87:c6:c3:90:47:b3:d1:0f:
06:67:0f:11:c8:53:a6:a8:07:bb:3f:94:0e:c0:d2:
1f:fa:06:6c:53:aa:b4:c4:a2:7d:bd:b1:14:d8:fc:
fc:e3:2e:c1:9e:2f:ab:e4:ef:e2:e1:28:14:18:ac:
96:d3:c9:ca:7e:72:a8:fe:d9:f4:a8:e1:a2:f8:97:
9f:4c:c8:27:87:c1:ec:86:37:32:ac:a1:c4:b3:da:
61:b4:6e:a3:ff:20:6f:65:cb:d9:1c:e6:66:95:98:
ea:bc:13:41:c6:22:c5:5a:a6:a1:71:2c:f4:dd:c4:
3e:a9:0e:fd:f7:5e:c1:8b:60:a6:a0:0c:57:c9:8c:
f5:44:2c:b6:71:99:b2:31:88:47:e2:c9:eb:65:6d:
4a:d6:9a:51:b3:2d:d4:98:57:44:ba:55:46:0b:b9:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2A:3C:EB:C0:98:BB:93:1A:65:50:ED:B1:96:95:67:43:31:80:D1
X509v3 Authority Key Identifier:
keyid:09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/MSo868CYu5MaZVDtsZaVZ0MxgNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.168.0/22
5.254.192.0/19
46.230.168.0/21
92.241.208.0/21
178.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:c9:8f:50:15:60:7d:73:d4:c2:84:d8:5c:a0:a5:37:99:97:
d4:da:38:c0:96:ea:85:ef:4f:fb:76:79:a6:08:19:c1:a2:42:
28:81:97:41:cb:1a:3b:96:d0:a4:bf:42:e3:17:54:5e:51:96:
29:57:e3:9b:54:fe:73:ce:69:d5:c9:e0:06:e5:8e:c9:74:03:
35:0e:fa:2e:61:c0:15:ac:d7:50:67:e3:16:f0:a6:24:59:f2:
24:dc:5e:eb:4c:32:89:21:05:e5:9f:ba:b2:ac:cd:dc:5a:52:
95:5d:ff:2b:bb:a5:d0:5a:65:d3:c8:e9:8f:71:a7:b7:02:9f:
84:37:cb:14:ae:15:89:7e:14:19:5a:aa:8d:44:e5:38:37:a8:
ae:10:ce:0e:46:2c:3e:1b:ff:f3:2a:06:30:2a:7c:61:9a:07:
87:2f:8a:03:32:29:f4:70:60:a4:84:37:47:8e:56:82:25:8b:
29:bb:93:67:bf:14:ce:e1:80:f0:c2:b8:0b:38:1b:81:76:69:
3a:01:44:1a:2c:e7:64:00:d9:8f:2f:6e:56:21:54:e3:74:f4:
ce:fe:bf:25:76:bc:54:22:a2:24:af:ca:bb:40:d7:7b:2e:0c:
ec:dc:34:58:b3:d0:42:68:90:0c:6c:c6:ff:6a:7c:ab:f2:ea:
7d:70:34:96
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBB5JKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OWRkOTJhZDc3MTUwMWRlMjhiYzljZjM3Yjk2NzBiMTJmMWUyMjA4MB4XDTIyMDEw
MTE0MDczOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzEyYTNjZWJjMDk4
YmI5MzFhNjU1MGVkYjE5Njk1Njc0MzMxODBkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHpcpNjR/m5qNnUJJfhgG4R9jfc1DL4QQ7TZkdAYxmNJIT6
QMWTfONXGTpIKM5T6sQATrLGy54jU6uyEdiGioEOSnJV7w9LJg1Ihim6LxcIfmKK
GmhcTlQen7m0ZAp4+IfGw5BHs9EPBmcPEchTpqgHuz+UDsDSH/oGbFOqtMSifb2x
FNj8/OMuwZ4vq+Tv4uEoFBisltPJyn5yqP7Z9KjhoviXn0zIJ4fB7IY3MqyhxLPa
YbRuo/8gb2XL2RzmZpWY6rwTQcYixVqmoXEs9N3EPqkO/fdewYtgpqAMV8mM9UQs
tnGZsjGIR+LJ62VtStaaUbMt1JhXRLpVRgu54ZMCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBQxKjzrwJi7kxplUO2xlpVnQzGA0TAfBgNVHSMEGDAWgBQJ3ZKtdxUB3ii8
nPN7lnCxLx4iCDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NkMlNyWGNWQWQ0b3ZKenplNVp3c1M4ZUlnZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvZmUxN2ZiLWQxNzUtNDJiZC04ZGFhLWE0OWNjZjA3YmJmMS8x
L01Tbzg2OENZdTVNYVpWRHRzWmFWWjBNeGdORS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
ZmUxN2ZiLWQxNzUtNDJiZC04ZGFhLWE0OWNjZjA3YmJmMS8xL0NkMlNyWGNWQWQ0
b3ZKenplNVp3c1M4ZUlnZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAgX+qAMEBQX+wAMEAy7mqAMEA1zx
0AMEArJIBDANBgkqhkiG9w0BAQsFAAOCAQEACsmPUBVgfXPUwoTYXKClN5mX1No4
wJbqhe9P+3Z5pggZwaJCKIGXQcsaO5bQpL9C4xdUXlGWKVfjm1T+c85p1cngBuWO
yXQDNQ76LmHAFazXUGfjFvCmJFnyJNxe60wyiSEF5Z+6sqzN3FpSlV3/K7ul0Fpl
08jpj3GntwKfhDfLFK4ViX4UGVqqjUTlODeorhDODkYsPhv/8yoGMCp8YZoHhy+K
AzIp9HBgpIQ3R45WgiWLKbuTZ78UzuGA8MK4CzgbgXZpOgFEGiznZADZjy9uViFU
43T0zv6/JXa8VCKiJK/Ku0DXey4M7Nw0WLPQQmiQDGzG/2p8q/LqfXA0lg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:18 2025 by rpki-client