Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ma92grbp087Cjzt52h-uh7kIUtA.roa
File: ma92grbp087Cjzt52h-uh7kIUtA.roa (raw, json)
Hash identifier: cxpEyu2pZUVVtAUE0GunF8bkSOhWra5HTAze8XkwhGQ=
Subject key identifier: 99:AF:76:82:B6:E9:D3:CE:C2:8F:3B:79:DA:1F:AE:87:B9:08:52:D0
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 0191093BE1135A52430E133A69FCFA7CCDD8
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ma92grbp087Cjzt52h-uh7kIUtA.roa
Signing time: Wed 31 Jul 2024 14:40:04 +0000
ROA not before: Wed 31 Jul 2024 14:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5501
IP address blocks: 129.233.0.0/17 maxlen: 17
129.233.128.0/17 maxlen: 17
129.233.163.0/24 maxlen: 24
129.233.252.0/22 maxlen: 22
129.233.252.0/24 maxlen: 24
129.233.253.0/24 maxlen: 24
129.233.254.0/24 maxlen: 24
129.233.255.0/24 maxlen: 24
137.251.0.0/16 maxlen: 16
153.96.0.0/21 maxlen: 21
153.96.8.0/23 maxlen: 23
153.96.10.0/24 maxlen: 24
153.96.12.0/22 maxlen: 22
153.96.16.0/23 maxlen: 23
153.96.18.0/24 maxlen: 24
153.96.19.0/24 maxlen: 24
153.96.24.0/24 maxlen: 24
153.96.54.0/23 maxlen: 23
153.96.144.0/23 maxlen: 23
153.96.220.0/22 maxlen: 22
153.96.253.0/24 maxlen: 24
153.96.254.0/24 maxlen: 24
192.42.63.0/24 maxlen: 24
192.42.64.0/24 maxlen: 24
192.44.0.0/22 maxlen: 22
192.44.10.0/24 maxlen: 24
192.44.13.0/24 maxlen: 24
192.44.17.0/24 maxlen: 24
192.44.24.0/24 maxlen: 24
192.44.37.0/24 maxlen: 24
192.102.165.0/24 maxlen: 24
192.102.171.0/24 maxlen: 24
192.102.172.0/23 maxlen: 23
2a03:db80:4404::/48 maxlen: 48
2a03:db80:4410::/48 maxlen: 48
2a03:db80:4414::/48 maxlen: 48
2a03:db80:4420::/48 maxlen: 48
2a03:db80:4424::/48 maxlen: 48
2a03:db80:4480::/48 maxlen: 48
2a03:db80:4484::/48 maxlen: 48
2a03:db80:4c80::/48 maxlen: 48
2a03:db80:4c84::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:3b:e1:13:5a:52:43:0e:13:3a:69:fc:fa:7c:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jul 31 14:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99af7682b6e9d3cec28f3b79da1fae87b90852d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:cb:39:8a:9b:4a:9b:d4:21:84:42:8b:57:
dc:18:f7:17:a8:6d:7b:db:6b:2e:48:01:77:01:d4:
3f:94:04:bd:7f:50:cf:25:09:c7:34:68:aa:3e:73:
70:c1:6f:f8:32:33:01:a1:02:08:a9:bb:e5:02:da:
f3:f9:d9:31:27:22:53:cd:0b:34:df:60:18:b7:30:
2b:77:06:88:4a:5b:1f:28:1c:33:5e:21:06:7c:4e:
79:a9:6f:4b:a3:bb:dd:29:80:75:a8:ee:85:0f:c8:
63:5b:ae:ba:4d:64:2c:69:91:0f:be:58:81:10:58:
36:d1:b3:67:55:35:05:40:37:55:4a:59:9d:3b:8e:
84:d0:27:b6:6a:f0:29:52:21:f8:5c:ea:87:b1:56:
f2:ac:28:b0:85:a7:c2:83:ed:37:20:b0:32:32:53:
ca:d7:92:62:85:0c:8f:9d:c8:a9:f2:b1:c0:49:a5:
0d:3f:7f:3e:a4:76:49:0c:0b:21:7d:c3:0f:fd:71:
14:ac:99:b9:d7:5d:60:0f:04:f4:82:a0:24:6d:af:
84:d6:91:b0:c1:3f:64:39:a9:a7:15:22:ac:dc:b1:
b2:cf:a5:50:50:8a:db:68:81:28:6e:85:cc:b3:2d:
93:74:d4:9b:c7:24:9e:2f:c8:de:69:87:07:f7:02:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:76:82:B6:E9:D3:CE:C2:8F:3B:79:DA:1F:AE:87:B9:08:52:D0
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ma92grbp087Cjzt52h-uh7kIUtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.0.0/16
137.251.0.0/16
153.96.0.0-153.96.10.255
153.96.12.0-153.96.19.255
153.96.24.0/24
153.96.54.0/23
153.96.144.0/23
153.96.220.0/22
153.96.253.0-153.96.254.255
192.42.63.0-192.42.64.255
192.44.0.0/22
192.44.10.0/24
192.44.13.0/24
192.44.17.0/24
192.44.24.0/24
192.44.37.0/24
192.102.165.0/24
192.102.171.0-192.102.173.255
IPv6:
2a03:db80:4404::/48
2a03:db80:4410::/48
2a03:db80:4414::/48
2a03:db80:4420::/48
2a03:db80:4424::/48
2a03:db80:4480::/48
2a03:db80:4484::/48
2a03:db80:4c80::/48
2a03:db80:4c84::/48
Signature Algorithm: sha256WithRSAEncryption
95:c5:75:d0:3b:20:c8:ba:e3:6c:75:c2:b7:0e:2c:9a:cf:c0:
9f:dd:17:a4:1e:07:39:3f:71:86:2f:90:99:bc:55:0e:49:44:
29:28:13:5e:57:9c:f6:10:70:c9:e5:5c:cc:67:83:07:65:6b:
67:6e:fc:89:55:08:19:44:7a:5e:6c:fc:e4:c3:1c:5b:0e:98:
07:e8:1e:03:c9:56:31:72:4d:a9:b7:61:1e:d6:21:9d:7e:d1:
52:cc:f3:c9:de:e2:39:d8:5d:4d:00:16:30:b3:9a:3b:f3:ac:
5e:26:ba:8d:70:18:ef:72:c9:03:f5:62:e7:7e:bd:17:4a:b3:
5a:4b:5c:09:aa:97:08:69:5b:f4:dc:86:33:c3:e8:02:95:14:
b2:10:11:20:6d:4d:4e:89:e8:7c:40:db:67:68:41:a5:4d:2b:
1c:de:a4:1a:34:9e:b7:be:0e:92:d7:79:e7:6b:7f:d0:39:9e:
66:22:81:be:fc:aa:1e:f5:fa:79:4a:e0:e8:9d:3e:c1:0b:f8:
e2:06:1c:8e:64:db:93:3f:93:eb:06:7d:9b:24:ef:d1:58:42:
e5:75:db:ed:eb:ef:b2:05:88:6d:f4:60:7a:85:9d:ca:76:2f:
67:20:07:bd:ab:69:40:89:49:d3:1e:11:2d:c2:82:e3:78:a2:
d3:68:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:11 2025 by rpki-client