Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MqzJEPAXeIn_0fmoQB_P-x9msT8.roa
File: MqzJEPAXeIn_0fmoQB_P-x9msT8.roa (raw, json)
Hash identifier: IVoLr6nfVO2ysmTyvmXBSzK/xM1PAZyzqzeAeW+Vxv0=
Subject key identifier: 32:AC:C9:10:F0:17:78:89:FF:D1:F9:A8:40:1F:CF:FB:1F:66:B1:3F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA9DBF3F8F5BDD5F3ACEBEE3BD79F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MqzJEPAXeIn_0fmoQB_P-x9msT8.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47349
IP address blocks: 93.171.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:db:f3:f8:f5:bd:d5:f3:ac:eb:ee:3b:d7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32acc910f0177889ffd1f9a8401fcffb1f66b13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:a9:30:41:37:e5:4a:61:cf:53:23:49:de:
11:33:a8:53:fd:56:a7:85:c3:f0:3b:52:e3:86:6b:
ac:75:f9:2c:4f:32:c3:57:82:58:2b:00:3b:23:df:
66:00:fd:8a:0d:12:c6:92:62:f6:f1:47:4d:78:c0:
61:2a:9f:d2:17:1b:30:29:15:dc:85:b6:bd:2b:a4:
14:4e:94:93:71:4a:c9:1a:f7:63:ab:69:02:f1:79:
56:58:a4:51:50:af:4e:b7:ea:87:a5:44:bd:2f:f0:
fe:0a:bc:18:a0:ea:26:7e:54:59:07:c0:18:a7:77:
42:af:24:67:90:ea:8f:a6:91:4a:83:7d:7f:5d:a8:
01:b1:98:c1:6a:e5:3d:c5:b2:f5:ce:0b:a6:70:96:
9b:ac:82:c9:81:18:90:76:fb:af:72:d7:7a:73:b5:
b0:88:ce:dd:0d:2c:0a:e4:15:97:22:e2:7c:58:2e:
c7:78:c6:fc:9e:21:5c:41:95:63:16:8f:a9:e8:1b:
76:de:61:a0:c0:f9:89:04:80:94:11:b0:31:83:5e:
b2:da:5f:da:4f:a9:56:77:65:b7:4b:a8:91:02:8a:
08:9a:d9:ba:2a:7a:b4:ea:1c:fd:1d:eb:70:b7:6e:
eb:8b:a3:95:a3:b5:1d:4d:63:65:6c:0a:81:b3:a8:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AC:C9:10:F0:17:78:89:FF:D1:F9:A8:40:1F:CF:FB:1F:66:B1:3F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MqzJEPAXeIn_0fmoQB_P-x9msT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.155.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c3:3e:df:e2:22:0b:5c:5c:a7:f5:02:fc:8b:2b:42:d8:93:
3b:b2:4c:ad:b3:f3:3c:1a:21:ef:58:fb:3a:f7:d2:7c:81:45:
a5:9a:a7:c1:36:a2:3e:d9:17:3b:dc:b6:48:34:8f:00:a6:d4:
70:c4:5e:5a:aa:e1:d8:cb:0d:6d:10:e3:9c:23:da:4a:8d:3e:
de:db:c4:a1:25:dd:99:c3:8a:ff:3a:06:ae:43:20:5d:95:2b:
80:f0:f8:2c:0e:38:0b:f2:1e:d9:7f:d6:88:c4:c6:42:4f:fe:
4e:a2:3b:c0:ec:9d:c3:de:bd:65:8e:d3:6d:2d:7d:60:71:ac:
2c:b9:23:33:64:f2:73:05:87:71:3f:00:b7:f0:a3:7b:bc:de:
70:f1:b8:a0:1d:c4:a1:9f:8f:63:12:4a:9b:23:02:fd:29:88:
47:84:8c:05:06:19:c0:af:81:b4:b4:e2:39:ee:76:f5:0e:d3:
7c:8b:50:06:5a:28:38:d3:0d:41:6b:b8:95:7f:48:46:68:57:
89:a4:39:c7:00:90:0b:c3:39:b6:5a:50:ac:52:36:83:e2:75:
9a:26:4e:43:b6:39:78:23:b0:72:81:9c:f9:81:08:1a:23:5e:
7a:3e:e1:a1:2b:a5:66:41:0c:6a:1e:4a:ae:31:1b:96:8a:34:
f8:a6:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:46 2025 by rpki-client