Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MUcebIGoRMXbqXnni2HU3zIrpdU.roa
File: MUcebIGoRMXbqXnni2HU3zIrpdU.roa (raw, json)
Hash identifier: bNTPUmJSJcoJe7qplDSq3vOiUCIZeOL5APq8RDzOmMw=
Subject key identifier: 31:47:1E:6C:81:A8:44:C5:DB:A9:79:E7:8B:61:D4:DF:32:2B:A5:D5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0193AA7DF9ABC74FA4AF6F0FB18B66966FE9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MUcebIGoRMXbqXnni2HU3zIrpdU.roa
Signing time: Mon 09 Dec 2024 08:16:42 +0000
ROA not before: Mon 09 Dec 2024 08:16:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49912
IP address blocks: 84.32.36.0/23 maxlen: 23
84.32.80.0/23 maxlen: 23
88.216.26.0/23 maxlen: 23
88.216.105.0/24 maxlen: 24
88.216.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:7d:f9:ab:c7:4f:a4:af:6f:0f:b1:8b:66:96:6f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 9 08:16:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31471e6c81a844c5dba979e78b61d4df322ba5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:2b:d8:b9:1b:4a:22:ad:2c:d1:f4:66:77:
15:d3:b8:d9:23:38:5f:d3:dd:02:40:5e:b4:38:d9:
9d:d8:bb:d9:88:81:19:59:b4:a0:55:9d:06:8e:55:
9d:72:f4:50:d5:65:b2:01:89:1c:42:dc:31:dd:0c:
2f:cd:17:32:7f:91:10:00:7c:b2:bc:ab:df:c6:d2:
f9:29:b2:f3:66:7a:a6:f5:1a:9f:d8:0e:7f:10:41:
e8:5a:ce:07:7c:8b:6a:35:2e:61:57:2c:8e:78:c2:
e1:87:d8:be:6c:0c:b8:ea:b9:5e:52:09:4c:c8:c9:
ff:03:b3:2b:5a:3c:25:1d:46:52:c4:dd:16:3e:53:
f9:31:e3:c5:31:14:ad:f7:21:7a:a7:d6:75:df:4a:
87:a9:55:34:7d:bc:7f:1c:f7:d1:19:b4:90:78:8b:
b8:64:02:a5:16:65:b2:1a:9d:9c:8c:ad:38:58:82:
86:52:33:66:d4:e9:eb:64:a0:b6:13:b8:a7:79:e9:
d5:3f:b9:51:2d:28:a2:7a:a6:97:59:15:b7:ed:20:
d3:70:35:61:b4:83:3a:9f:79:98:19:e6:10:c0:2c:
b7:2c:ba:61:70:f9:cb:3d:41:35:b8:38:f3:71:8e:
5f:c3:39:4c:9b:e2:22:93:73:a3:9f:5a:50:47:64:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:47:1E:6C:81:A8:44:C5:DB:A9:79:E7:8B:61:D4:DF:32:2B:A5:D5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/MUcebIGoRMXbqXnni2HU3zIrpdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.36.0/23
84.32.80.0/23
88.216.26.0/23
88.216.105.0/24
88.216.160.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a7:1d:00:67:7f:63:6e:80:d5:32:7f:86:1a:34:c5:17:49:
d7:50:d7:fb:5b:94:b1:9a:15:14:4d:04:df:01:2a:8b:c2:22:
69:6e:25:76:e6:0a:3d:c3:ef:1d:c7:24:35:94:a0:ba:0b:2f:
fe:91:02:03:5c:02:48:9f:ed:5a:ab:20:66:95:7d:98:9f:0a:
13:0a:52:9d:88:1d:4a:f6:3b:4e:a4:28:1f:ae:11:42:d0:6b:
6f:e2:57:3f:98:df:08:ac:c3:07:d7:1e:ae:d3:65:da:28:d0:
74:42:39:d3:da:06:e1:2c:97:ad:6f:69:37:6b:a5:5b:27:21:
43:21:ba:7b:8e:92:d4:e4:28:d4:c6:09:92:78:66:1d:50:61:
52:58:08:e6:ac:07:5c:ed:e8:7f:40:8d:c9:0c:0a:63:77:74:
71:15:07:5f:64:53:b3:dd:ea:95:0c:41:5c:b6:b9:92:90:53:
1b:fb:22:59:1a:ac:4a:23:8b:d0:dc:78:50:e5:fc:65:71:76:
1b:98:9d:eb:65:92:35:3a:bf:11:e1:6f:1c:ee:2e:42:df:7c:
30:26:1b:0c:5f:a7:8b:3e:91:c9:2e:e6:dc:0c:68:ad:dd:81:
ef:9a:40:71:dc:3f:bd:7c:70:2e:61:76:dd:eb:10:ad:10:30:
a7:75:6d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:55:10 2025 by rpki-client