Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/MPjdl6Pku9phcL-CrpheiDTvDi4.roa
File: MPjdl6Pku9phcL-CrpheiDTvDi4.roa (raw, json)
Hash identifier: L7etze7GT6VyHZmvIklT9OHaYq/9Jx2j+lw2K9bTBpE=
Subject key identifier: 30:F8:DD:97:A3:E4:BB:DA:61:70:BF:82:AE:98:5E:88:34:EF:0E:2E
Certificate issuer: /CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Certificate serial: 01856F4B6E6B6787E54DB36FFE5F54C72B31
Authority key identifier: 4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/MPjdl6Pku9phcL-CrpheiDTvDi4.roa
Signing time: Sun 01 Jan 2023 21:44:52 +0000
ROA not before: Sun 01 Jan 2023 21:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203929
IP address blocks: 185.124.33.0/24 maxlen: 24
185.124.34.0/24 maxlen: 24
185.124.35.0/24 maxlen: 24
89.37.56.0/24 maxlen: 24
2a0b:2cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6e:6b:67:87:e5:4d:b3:6f:fe:5f:54:c7:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Validity
Not Before: Jan 1 21:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30f8dd97a3e4bbda6170bf82ae985e8834ef0e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:b4:44:75:13:24:e6:65:f8:fa:65:c3:c2:
57:e6:26:79:9b:dc:49:9c:6f:be:b4:03:08:6c:87:
9d:12:89:a9:8c:67:6d:c7:f6:fa:2d:79:0b:9e:21:
43:a1:c0:b1:53:e9:a6:a5:b5:93:27:52:5b:e7:89:
01:6f:fa:31:ac:ce:30:6c:94:02:90:f7:59:ab:26:
42:e4:32:37:e8:f3:ee:e3:07:36:26:c7:3b:59:e2:
bf:28:df:e8:ac:44:4c:81:2c:93:5e:08:e7:31:9d:
95:08:c0:28:47:70:fa:31:31:1e:6f:bc:12:ad:ee:
6e:4b:b2:91:21:e6:cc:58:25:4f:bb:68:ec:9e:ce:
fb:95:96:09:05:e2:7c:83:13:9d:97:48:e1:26:b5:
30:08:8b:c4:ba:d9:59:03:2f:0a:86:c5:6e:2c:f2:
b0:ab:6b:b6:ed:91:9d:c6:5f:d3:31:cb:6b:bd:c1:
23:e5:e0:b5:4d:e1:4b:57:34:52:2f:f3:00:20:90:
79:ff:7f:cf:44:90:e8:33:e7:1e:46:3b:69:1d:c9:
0b:35:c0:63:26:2f:21:48:8d:f4:fc:c0:97:2b:79:
dd:78:99:f2:a4:bd:d8:30:36:fd:95:a5:00:62:ed:
d8:9e:54:fd:8e:b7:fa:81:d9:e4:7a:38:96:a8:5d:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F8:DD:97:A3:E4:BB:DA:61:70:BF:82:AE:98:5E:88:34:EF:0E:2E
X509v3 Authority Key Identifier:
keyid:4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/MPjdl6Pku9phcL-CrpheiDTvDi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/TDHPYmi9JMzl8pMczXa5FwXmyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.56.0/24
185.124.33.0-185.124.35.255
IPv6:
2a0b:2cc0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:af:ef:ca:6e:73:6c:1f:5e:09:68:1f:8f:e5:eb:71:9a:ce:
e1:35:28:ba:bd:68:b6:dc:39:ba:ba:31:83:12:f7:6f:69:7d:
a1:36:f4:b9:7a:d1:72:c2:ad:4c:30:82:69:08:5a:15:5d:2d:
1c:ea:f0:03:5b:84:88:7c:96:21:e5:4c:fc:54:58:9f:ef:e9:
4d:07:88:2e:d5:78:98:47:0c:1a:6c:ba:a9:78:d5:85:95:6d:
63:f3:44:a0:7c:ba:ce:84:80:db:19:19:53:05:89:a6:31:17:
f8:35:a2:48:94:9f:f1:a0:7c:d0:7c:88:ef:f8:75:7b:f5:2d:
f6:48:86:ce:86:53:70:3c:10:66:ad:ad:6b:3b:11:dd:3d:62:
bd:f0:e2:07:4b:ed:7c:55:50:53:e6:7d:78:40:1d:0d:d3:b8:
83:8f:7b:3b:ba:a5:a1:44:55:49:c4:18:ac:46:f3:b8:0c:b8:
5e:d9:66:0b:a1:85:db:79:13:90:4f:44:bf:66:42:e3:41:98:
c7:9b:f6:c3:9d:32:ef:34:8a:db:20:a4:32:82:83:30:8a:35:
fa:e6:19:31:ae:fa:6a:44:9c:8d:ab:e5:9d:ae:e6:98:fb:76:
d1:ad:5c:c5:97:3b:c9:62:87:23:46:9b:81:b0:69:47:17:fd:
93:0e:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:23:27 2025 by rpki-client