Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/mwGFMLP8urixZJ9W1x_56ovfS3g.roa
File: mwGFMLP8urixZJ9W1x_56ovfS3g.roa (raw, json)
Hash identifier: FFppZXO5afH6JgZ/GAUgkUjtbJbJsW6ZdAq5a1dyQoM=
Subject key identifier: 9B:01:85:30:B3:FC:BA:B8:B1:64:9F:56:D7:1F:F9:EA:8B:DF:4B:78
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 01942745C1F0569E6C80426F96FBA88742BB
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/mwGFMLP8urixZJ9W1x_56ovfS3g.roa
Signing time: Thu 02 Jan 2025 13:47:50 +0000
ROA not before: Thu 02 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47745
IP address blocks: 151.237.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:c1:f0:56:9e:6c:80:42:6f:96:fb:a8:87:42:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Jan 2 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b018530b3fcbab8b1649f56d71ff9ea8bdf4b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:54:e3:8e:63:51:6d:5c:8b:15:af:72:3c:
e7:d6:9e:83:ab:4d:bf:3b:bf:4b:68:0a:fd:fe:10:
89:69:d8:50:f8:73:0d:3c:99:b6:98:d5:13:c6:ae:
7f:d3:24:35:6a:35:e8:d9:cc:0e:39:c0:44:34:d7:
0a:53:77:5a:2f:c0:da:26:1e:47:3a:e3:e7:cf:ee:
9c:d3:8e:ff:75:3a:e2:10:79:40:b6:be:98:61:2e:
b5:0e:a1:d7:4a:04:d3:1c:62:01:81:56:d2:dc:ee:
83:d0:97:54:af:ca:91:02:fa:9e:87:70:8e:d1:f4:
a1:51:35:86:1c:04:00:1f:8b:0f:49:39:d4:95:c8:
ec:72:24:ab:b2:13:44:f5:15:27:68:79:b2:ad:ad:
66:29:40:0a:d0:26:38:1e:c6:ae:cc:32:f3:80:c1:
a7:fc:d4:8d:09:79:0a:57:49:11:36:71:28:40:f7:
85:85:9d:d1:af:59:d3:ab:63:2b:9f:14:39:58:fc:
bf:00:4f:1a:95:34:03:38:c7:13:d4:62:d0:67:20:
9f:18:de:73:5d:9e:a0:25:51:d1:ca:91:4c:ab:e7:
90:a2:12:e0:da:92:69:57:90:ce:98:db:5d:ca:22:
38:b1:d5:74:70:63:92:2b:4e:c8:63:4d:0f:5d:9d:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:85:30:B3:FC:BA:B8:B1:64:9F:56:D7:1F:F9:EA:8B:DF:4B:78
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/mwGFMLP8urixZJ9W1x_56ovfS3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:40:cb:7a:7d:38:32:96:32:09:79:f5:69:e3:d4:8d:78:e9:
e0:ae:c3:0d:c1:f0:c4:14:ef:f3:b4:95:74:a1:62:f5:60:ae:
26:80:a8:2d:60:bd:96:d6:ca:4a:78:cf:8c:d3:49:ea:69:cd:
c2:f5:00:c8:eb:90:28:58:26:1e:04:88:0f:7e:3f:79:7a:da:
93:19:6f:55:81:30:39:7b:0d:38:05:7b:de:7e:28:9e:59:d7:
53:9e:dc:ce:59:78:25:50:49:f3:42:31:73:5f:02:56:01:c4:
18:c7:43:3d:cd:4c:dd:1b:04:3e:04:f8:dc:22:5f:97:43:44:
b5:3f:fc:e6:36:02:eb:08:ba:4d:89:7d:20:4f:99:85:2f:a5:
6f:bc:22:62:17:28:fa:f9:1b:14:b2:61:48:1b:50:d4:d4:5f:
52:e8:20:8e:21:ec:69:7b:77:b8:e7:3b:2d:be:96:e3:80:f6:
4c:e0:3b:c2:58:89:32:83:59:a7:26:ed:da:21:fd:5e:b4:4c:
b9:42:a9:3d:f3:bf:d7:37:21:eb:97:b5:42:f1:64:16:1e:f1:
81:9f:56:39:f0:b8:fb:38:89:cf:24:d1:2e:7c:53:82:d2:3b:
e6:e7:19:9e:16:10:3b:23:b3:3b:ca:85:b3:3e:38:c6:37:1e:
89:9c:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:11 2025 by rpki-client