Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MgIuCpUH0Mlfe4qOP5tNckoFkTU.roa
File: MgIuCpUH0Mlfe4qOP5tNckoFkTU.roa (raw, json)
Hash identifier: 8SPQEgQRRwwk0fgt0VOD/oIfaA7vCCPyIUPZEVwVj7s=
Subject key identifier: 32:02:2E:0A:95:07:D0:C9:5F:7B:8A:8E:3F:9B:4D:72:4A:05:91:35
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0195B4257D3832A3794C8857D21FE570F39E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MgIuCpUH0Mlfe4qOP5tNckoFkTU.roa
Signing time: Thu 20 Mar 2025 15:21:50 +0000
ROA not before: Thu 20 Mar 2025 15:21:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57270
IP address blocks: 93.171.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:25:7d:38:32:a3:79:4c:88:57:d2:1f:e5:70:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 20 15:21:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32022e0a9507d0c95f7b8a8e3f9b4d724a059135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:0a:d1:c6:ff:da:86:7b:3e:97:e9:3f:73:
33:48:49:32:9a:f0:82:70:08:ff:b1:f5:63:f1:5b:
26:a0:3f:fd:2a:c5:0b:7e:a6:90:83:b6:02:44:ca:
f0:29:aa:75:04:ca:d4:dc:c3:2a:9d:e9:89:2e:71:
f3:4d:90:3e:f4:56:27:6a:93:f1:46:8e:f6:bf:44:
ef:83:96:4d:eb:43:a5:ee:88:5e:91:34:90:0e:4f:
e7:9e:e5:53:b3:c5:3d:f0:7e:b5:b7:7b:0b:1b:ef:
11:02:62:3d:11:5f:75:a4:44:8a:13:8d:ac:75:02:
5b:e8:aa:c0:2d:2c:4e:43:73:8c:22:82:08:a9:8f:
70:77:6f:19:a3:5d:a0:1e:15:e2:59:b5:33:76:cf:
ce:34:27:2e:a1:22:73:e8:f0:f9:55:df:f3:39:9c:
e6:11:48:1d:e5:4b:63:73:2d:b2:83:1f:74:99:7b:
86:51:2c:0e:eb:19:74:7f:9e:c4:8f:3e:c4:66:3e:
fe:bf:85:23:f0:53:35:10:15:88:d6:3f:df:f8:78:
24:7d:9d:52:72:0e:92:8e:1a:b4:c3:29:66:d9:cb:
66:15:c4:04:c4:34:c8:8f:28:cb:53:0e:dc:88:63:
99:69:62:b8:31:83:48:8c:05:21:72:ef:06:da:7e:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:2E:0A:95:07:D0:C9:5F:7B:8A:8E:3F:9B:4D:72:4A:05:91:35
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MgIuCpUH0Mlfe4qOP5tNckoFkTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.5.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cf:e3:eb:74:d9:f8:c7:e0:35:1b:c5:9f:09:6e:1b:e4:90:
f3:87:e7:92:a1:51:01:f5:e6:28:67:f3:a1:b2:f3:c5:6e:82:
c2:25:e7:34:01:76:45:d6:a7:46:b8:31:98:dc:1f:bf:d8:c6:
75:b7:21:c5:88:6f:8d:0f:9d:f4:61:3b:b1:0c:c9:e2:ef:d2:
71:a0:01:f2:0e:9a:1e:48:d1:28:9b:0e:f8:65:8c:a9:e1:54:
93:76:bd:ac:09:26:ab:f3:9d:13:93:3c:6c:e2:ce:e8:38:b3:
c5:79:ed:09:1b:aa:d4:41:66:23:78:f9:b8:13:08:18:cb:4e:
6e:e7:5f:89:f9:bf:3b:53:48:49:6f:d2:f8:cf:4b:f4:48:c2:
71:48:9e:a5:67:ed:4d:61:92:ca:db:73:b8:dc:46:99:f6:c1:
be:16:0f:10:25:12:99:01:da:92:75:d0:bc:40:91:0a:97:e8:
1b:24:4e:2e:c1:20:d5:3c:88:12:b8:e1:1d:dc:fc:b5:76:80:
79:05:37:f0:f3:5b:a9:07:6d:96:b4:a7:2f:f3:70:5e:ad:22:
ef:0d:1b:d5:2e:e6:41:2e:30:15:b5:c4:84:6f:d3:89:ee:dc:
32:df:07:bb:65:3a:be:3e:30:f4:52:7a:53:00:72:74:7c:19:
06:7c:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:58 2025 by rpki-client