Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Mpl_vUNoB6EXRxSXR2V8p_3rVlk.roa
File: Mpl_vUNoB6EXRxSXR2V8p_3rVlk.roa (raw, json)
Hash identifier: e7mlLi1FffhjbJq2hgnt+Vo6RPeQWWQeruJ2M1ywJbg=
Subject key identifier: 32:99:7F:BD:43:68:07:A1:17:47:14:97:47:65:7C:A7:FD:EB:56:59
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01924755F797F8793296934FB9C94AA33567
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Mpl_vUNoB6EXRxSXR2V8p_3rVlk.roa
Signing time: Tue 01 Oct 2024 09:07:49 +0000
ROA not before: Tue 01 Oct 2024 09:07:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41124
IP address blocks: 92.253.208.0/22 maxlen: 24
93.171.64.0/21 maxlen: 24
95.46.232.0/21 maxlen: 24
95.47.32.0/22 maxlen: 24
95.47.192.0/22 maxlen: 24
146.120.124.0/22 maxlen: 24
146.120.152.0/22 maxlen: 24
146.120.176.0/22 maxlen: 24
146.158.24.0/22 maxlen: 24
146.158.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:55:f7:97:f8:79:32:96:93:4f:b9:c9:4a:a3:35:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 1 09:07:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32997fbd436807a11747149747657ca7fdeb5659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:c5:0c:7d:7c:1f:1c:08:90:df:2b:2a:fa:
e9:c6:cf:a6:a1:3f:d5:a9:5b:b4:6b:5f:68:36:f3:
74:38:6e:31:a5:30:7c:86:5d:2d:9c:29:ca:25:15:
f8:76:8c:2c:8b:8c:64:4e:48:59:fe:7d:2e:c5:75:
63:a7:39:fa:68:4f:93:62:a9:ec:ee:c9:0f:f0:1a:
ce:e6:85:eb:87:4b:8f:d4:5a:d9:b2:e8:b3:60:24:
6f:6c:17:59:85:a0:84:36:d3:77:a9:49:e4:68:a6:
eb:8d:b0:c2:4d:61:32:26:08:bd:c7:fe:9d:6d:5c:
04:f8:fa:14:c9:87:04:9e:cc:de:fb:4a:8d:e9:39:
4f:01:2a:ef:0f:85:c0:4a:74:fd:cc:a3:30:a4:10:
15:78:1c:e2:39:7c:de:a0:b8:1a:af:98:8c:74:24:
29:54:f1:b0:d0:bb:7d:c0:27:a4:4e:1a:e7:19:23:
1c:b2:97:9d:c0:1e:e5:d3:ba:7a:e1:2b:53:1f:c0:
1e:93:1c:2a:d3:41:6b:4a:0f:cb:46:52:8e:04:4d:
e5:7c:f8:29:9f:7f:d5:50:16:38:b1:66:24:35:82:
da:41:3d:6b:3e:89:bf:a1:d5:39:4b:4f:c2:98:fe:
f9:13:5c:09:5c:5b:a0:4e:12:ff:ea:0c:17:6d:99:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:99:7F:BD:43:68:07:A1:17:47:14:97:47:65:7C:A7:FD:EB:56:59
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Mpl_vUNoB6EXRxSXR2V8p_3rVlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.208.0/22
93.171.64.0/21
95.46.232.0/21
95.47.32.0/22
95.47.192.0/22
146.120.124.0/22
146.120.152.0/22
146.120.176.0/22
146.158.24.0/22
146.158.64.0/22
Signature Algorithm: sha256WithRSAEncryption
21:63:c1:ee:16:c4:61:e0:3f:3b:03:ab:8c:35:1e:9c:2e:81:
68:01:a5:de:18:1d:49:96:55:49:8d:e3:fd:19:51:ce:54:8d:
ff:53:6a:62:4b:38:99:21:d4:e2:10:0e:77:f4:26:f9:f3:6d:
c5:08:e2:6d:39:0e:d5:5e:9f:60:38:cf:f1:09:eb:5f:5c:b8:
81:7c:e0:8f:33:a2:93:ff:d9:11:f8:6c:5d:3c:54:89:f8:d4:
98:dd:08:26:e5:f4:43:f9:c0:47:86:62:47:76:4f:15:36:c1:
7e:90:fa:71:91:b9:30:aa:34:66:ca:d7:71:28:7c:e9:96:5f:
23:ff:24:84:c6:8c:9a:4f:e2:4e:f8:08:1e:0e:b4:d2:43:7e:
23:90:62:c3:f5:8e:db:10:9d:fb:a2:15:02:eb:40:18:26:74:
2b:96:3d:3a:1e:f9:d4:3c:3e:28:5d:17:3a:74:32:27:80:af:
1d:7b:bd:a6:d1:49:8c:60:0d:ef:59:40:40:17:3f:46:4d:0c:
27:ef:34:a8:bd:07:49:54:b8:6d:0a:57:91:53:fc:23:19:f9:
5d:2c:74:76:5d:9e:54:d4:f8:20:86:be:57:c4:ac:01:39:9b:
15:b9:87:d4:91:08:e2:0e:59:e2:c9:4d:eb:8f:93:95:9e:95:
7f:92:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:02 2025 by rpki-client