Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/mjst7aUax91GFptXcthnYyUXm5M.roa
File: mjst7aUax91GFptXcthnYyUXm5M.roa (raw, json)
Hash identifier: yt+uoK2SV82Kw1H7pGPHZ6f9URufEVmNUwV6zXvjHTc=
Subject key identifier: 9A:3B:2D:ED:A5:1A:C7:DD:46:16:9B:57:72:D8:67:63:25:17:9B:93
Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Certificate serial: 019425FDA30173F5AC0D5E218E07060E27C9
Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/mjst7aUax91GFptXcthnYyUXm5M.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45010
IP address blocks: 62.220.224.0/22 maxlen: 22
93.90.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a3:01:73:f5:ac:0d:5e:21:8e:07:06:0e:27:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a3b2deda51ac7dd46169b5772d8676325179b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:43:66:f0:58:5b:6a:9c:54:95:52:14:2b:
7e:38:5b:97:ea:63:91:6e:23:26:6a:67:e6:d6:70:
e8:18:b2:70:2e:0d:5a:2b:31:6e:31:c6:a8:07:b7:
93:ca:58:c3:d0:f9:3e:32:38:28:c8:6f:17:4c:ae:
4f:fa:0e:5b:39:fe:62:92:87:10:a8:a9:4f:05:e1:
ee:60:3d:08:32:a7:3d:85:5a:de:3f:2e:96:09:db:
36:20:e2:20:79:d6:15:e0:0c:f5:19:b5:2d:fe:8d:
64:8e:85:0d:40:0e:3e:da:4f:70:35:1d:7b:77:25:
49:d8:bb:fd:45:14:c9:d7:a3:c5:81:ea:f9:7c:64:
79:67:87:dd:ab:64:f9:19:03:be:da:8a:e0:76:8d:
8d:f4:4b:ff:c9:5c:0a:86:75:a2:9e:b9:c6:05:26:
28:16:4c:ef:ab:d6:16:f1:52:db:29:7d:cd:fb:16:
48:6d:7d:e8:54:3e:4a:67:d9:bb:b1:04:4d:cf:e9:
48:b9:4d:c5:72:34:d5:d2:37:c9:50:69:bc:ad:33:
31:76:e4:98:2a:a1:e5:3a:d3:03:f7:e5:ac:dd:8a:
ec:04:2c:ea:2e:f4:af:30:c3:63:7d:38:0c:31:f9:
63:09:b7:da:81:e4:7c:6d:36:05:69:9a:c9:0b:a3:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:2D:ED:A5:1A:C7:DD:46:16:9B:57:72:D8:67:63:25:17:9B:93
X509v3 Authority Key Identifier:
keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/mjst7aUax91GFptXcthnYyUXm5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.224.0/22
93.90.48.0/20
Signature Algorithm: sha256WithRSAEncryption
70:df:cf:30:5b:db:98:44:6b:0d:b8:9a:0c:8f:75:4a:18:3f:
50:58:35:5a:c5:f9:4e:8f:44:7e:74:3a:7a:71:fa:95:0f:f9:
a5:7b:a5:44:0f:26:6d:ef:d1:1f:50:b4:cb:57:19:64:81:92:
cd:f7:7a:02:56:4d:b7:1f:1d:cf:ea:65:39:bd:0b:b2:db:2d:
ee:35:79:6b:54:f1:0e:38:bd:fb:cf:db:f0:c7:7f:bf:df:76:
fb:4d:c4:11:1d:1f:30:7a:89:b1:95:4c:19:9c:71:ab:93:b7:
ff:9a:19:fc:1c:1d:01:ad:c3:c0:10:59:26:89:9e:5f:c7:f4:
fe:5c:60:9f:89:e4:68:17:ed:6e:8f:6f:c7:62:af:69:b8:0d:
61:36:41:38:e0:4e:2f:d2:2c:d2:32:7c:4d:4c:01:c0:02:54:
56:72:b1:b9:ce:cb:54:6a:68:02:14:0c:f6:db:b3:3d:29:96:
10:f0:83:f1:e7:1c:71:25:7f:88:88:88:b6:fb:b5:03:32:2d:
19:07:3a:32:5c:f8:93:2e:1c:a9:90:87:13:6b:4f:a9:2b:09:
b8:81:ee:83:45:8f:a3:90:5d:13:82:17:ad:c1:b7:fd:b5:5f:
2d:d9:40:2b:e5:47:b9:ce:58:cb:b8:c2:b8:1d:05:f9:42:23:
37:ba:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:27 2025 by rpki-client