Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/mubrSR1blb93Y5_95nRZNp7hm8c.roa
File: mubrSR1blb93Y5_95nRZNp7hm8c.roa (raw, json)
Hash identifier: mcPvoHuGpcCeSyvRe/ogS87RsmiazzB+N29hPmedPKU=
Subject key identifier: 9A:E6:EB:49:1D:5B:95:BF:77:63:9F:FD:E6:74:59:36:9E:E1:9B:C7
Certificate issuer: /CN=e89a7ca8705d869dfc1832de168282d4b725d651
Certificate serial: C27A48
Authority key identifier: E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/mubrSR1blb93Y5_95nRZNp7hm8c.roa
Signing time: Sat 01 Jan 2022 06:56:18 +0000
ROA not before: Sat 01 Jan 2022 06:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 147.78.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12745288 (0xc27a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89a7ca8705d869dfc1832de168282d4b725d651
Validity
Not Before: Jan 1 06:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ae6eb491d5b95bf77639ffde67459369ee19bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:5c:bc:6e:8e:a7:bb:4c:7c:17:22:54:db:
cc:cd:cc:34:3c:65:73:76:7c:4d:a8:ca:4c:53:c3:
24:e4:9d:88:bf:57:49:bc:21:71:00:c5:74:28:88:
4d:30:10:d0:24:89:ca:92:c0:c6:47:31:02:19:2b:
59:3d:f5:ec:d2:e2:da:cd:3d:10:70:39:bb:5f:11:
aa:d4:06:00:c5:e6:88:76:98:ed:82:d5:90:03:f9:
eb:e8:fc:ed:74:36:4d:7a:34:dc:61:db:19:66:8c:
91:51:0c:cb:df:68:df:d2:cb:b8:3e:a9:bc:fd:0d:
05:13:81:cb:8e:0d:52:b9:d6:a5:79:49:35:0b:f4:
3d:5c:e8:64:c8:ea:42:eb:6e:d2:38:20:a5:9b:f8:
34:65:aa:85:bc:ab:16:39:a6:fc:e8:42:23:49:01:
52:4e:94:58:6a:08:e0:de:92:82:d7:69:e1:d9:c8:
87:aa:2e:66:97:3d:5c:56:9e:f8:b3:bb:93:f6:2a:
4d:dc:f3:f5:44:00:fa:6a:a3:0c:d8:da:16:20:c7:
d1:29:4d:16:a7:ba:73:b4:bd:6e:a9:58:4b:69:ae:
f5:03:1f:2b:3c:d0:f2:92:d6:0d:25:c5:1e:8b:ff:
ec:eb:fb:a4:33:5f:2c:d6:c7:c1:d4:12:45:61:95:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E6:EB:49:1D:5B:95:BF:77:63:9F:FD:E6:74:59:36:9E:E1:9B:C7
X509v3 Authority Key Identifier:
keyid:E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/mubrSR1blb93Y5_95nRZNp7hm8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:ba:05:9c:af:a0:d2:c1:94:36:c9:e8:6e:c9:77:5f:35:66:
8b:b2:42:14:fe:aa:27:05:30:95:06:f6:87:10:b6:fd:d3:e2:
8d:3b:d0:7a:70:56:90:90:af:5f:bd:48:1f:5c:bb:14:26:0e:
fa:a5:5c:ee:78:29:d4:59:51:94:69:09:4c:63:0d:af:a8:c7:
dc:78:41:b3:88:13:e2:2a:71:69:69:8a:cf:10:2c:ad:34:ac:
f5:04:2c:ee:cd:73:80:6e:bd:cf:5f:c7:04:7b:0b:a9:64:4c:
94:d4:94:14:3b:ad:c0:c9:11:b1:53:8d:d2:da:f3:aa:40:a8:
11:f2:55:08:eb:a4:5b:67:48:5d:44:0e:3b:35:31:a4:88:ef:
e7:d3:b5:f1:06:28:dc:1f:94:10:9f:7b:5f:ea:6e:cd:34:2e:
43:d4:32:fb:92:cc:a6:1c:da:65:dd:1d:16:7b:fb:9e:d4:f4:
cd:90:3b:8b:64:f6:cb:fb:8d:81:e8:4c:65:68:9a:03:7a:c2:
86:cc:fc:a4:eb:a8:15:40:52:d0:8c:af:46:67:9f:e2:bc:eb:
5e:06:58:d6:d7:16:fd:a1:87:1e:e4:54:d3:13:16:6b:b2:1f:
9e:b0:a2:8d:82:bb:95:9d:61:29:f0:4c:5e:cc:10:19:9a:bf:
8a:d2:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:07 2025 by rpki-client