Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/MVPwNZ1sWh_qT3u_yevkatHjGzM.roa
File: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (raw, json)
Hash identifier: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=
Subject key identifier: 31:53:F0:35:9D:6C:5A:1F:EA:4F:7B:BF:C9:EB:E4:6A:D1:E3:1B:33
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 0194266C0CE01D1BDE463E6B2BCD853D38AE
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/MVPwNZ1sWh_qT3u_yevkatHjGzM.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47304
IP address blocks: 93.184.192.0/20 maxlen: 20
185.155.80.0/22 maxlen: 22
2a07:91c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0c:e0:1d:1b:de:46:3e:6b:2b:cd:85:3d:38:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3153f0359d6c5a1fea4f7bbfc9ebe46ad1e31b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:85:9a:0f:25:81:dc:8f:e7:35:60:64:c9:
b7:c1:0c:ad:26:bb:e1:d6:a6:97:63:1b:c6:92:a7:
82:91:b1:41:58:1d:ec:26:81:54:78:78:0b:d5:8b:
93:37:89:84:ac:75:f1:48:f3:d7:fa:d3:ec:5e:f0:
2b:0c:8c:6e:01:07:7c:e5:a3:9e:c3:25:d1:31:ed:
79:f4:2d:61:41:7a:d0:b2:4e:54:4a:97:e8:3b:25:
ef:68:9f:0a:84:ba:69:e9:d6:7b:33:0e:79:4d:2a:
63:2c:1c:82:dc:24:30:34:18:49:f3:5c:bc:5e:b1:
ef:25:b9:28:cb:2c:b5:50:e9:bf:98:ac:c3:28:2a:
45:b8:5f:72:a8:b3:d7:80:9e:29:6b:44:50:4b:df:
59:6a:e0:f0:c8:1c:05:19:14:98:5a:23:55:65:25:
ce:98:27:3d:4e:41:ef:49:0e:4c:3f:f4:4c:60:22:
c8:07:63:81:c2:d2:9e:1c:82:fd:18:f4:ce:28:79:
51:ea:2e:f9:c8:21:68:d9:6b:c5:74:48:8f:27:4f:
6a:7c:84:df:82:6f:6a:3e:be:1d:66:58:6a:40:f5:
ba:27:35:fc:30:70:4f:f3:5a:df:1f:70:f5:05:19:
d6:15:13:86:dc:fc:d1:17:a9:92:e2:2d:47:4e:bd:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:F0:35:9D:6C:5A:1F:EA:4F:7B:BF:C9:EB:E4:6A:D1:E3:1B:33
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/MVPwNZ1sWh_qT3u_yevkatHjGzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.192.0/20
185.155.80.0/22
IPv6:
2a07:91c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:18:dd:52:9b:54:95:63:be:e9:ba:a3:34:53:e1:50:61:b8:
71:95:76:40:ec:93:5c:c2:dc:33:25:14:35:bb:82:07:b6:5a:
e1:ea:07:97:f4:18:d0:fb:25:26:fc:74:ad:d0:25:5f:90:c8:
8c:3e:bd:e5:86:52:24:79:b5:26:e1:0b:1b:41:72:4a:6f:50:
db:5a:4c:de:58:7c:f3:6d:f8:63:3a:25:57:7b:66:9f:12:4b:
e2:3b:e0:2c:89:ce:77:9a:25:61:bc:1b:4a:b9:70:2c:54:9d:
f0:af:79:d5:db:45:7b:16:14:1a:1b:9c:d8:0b:af:1a:6a:72:
22:e5:8c:85:89:9d:f6:03:af:08:b4:2f:f8:e2:68:80:fc:75:
d1:b5:10:e4:bb:6d:9a:01:69:31:08:d6:d8:6e:22:fa:17:a5:
b1:18:0f:fe:cd:33:ab:4d:f5:f2:94:bb:6d:08:7f:de:95:0a:
b6:e4:a9:93:6f:1d:bc:08:9a:04:e7:03:8b:14:99:14:f3:1e:
45:1f:f9:42:70:d6:d1:af:08:dc:09:09:c2:8d:c4:33:2e:8b:
f1:7e:ec:11:90:e6:4e:4a:2f:59:ee:0c:ca:7a:b9:b6:1b:db:
db:ae:63:3b:85:2b:c6:6c:c0:c0:9d:bf:3d:82:6e:a5:6b:bb:
3b:e2:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:11 2025 by rpki-client