Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/mpiw9JhQM7LKtUVCRbcJs0dukrY.roa
File: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (raw, json)
Hash identifier: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=
Subject key identifier: 9A:98:B0:F4:98:50:33:B2:CA:B5:45:42:45:B7:09:B3:47:6E:92:B6
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0194221FCB13BD8A1A098A7D8E7E7ECF1F16
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/mpiw9JhQM7LKtUVCRbcJs0dukrY.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329272
IP address blocks: 45.150.188.0/22 maxlen: 24
185.240.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cb:13:bd:8a:1a:09:8a:7d:8e:7e:7e:cf:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a98b0f4985033b2cab5454245b709b3476e92b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:15:6a:4f:67:2b:8c:93:6b:04:e7:11:7a:
a9:83:ce:9d:52:78:e1:fd:13:96:cf:ab:7c:b4:53:
41:09:1f:7f:73:9e:52:05:77:6e:05:44:d1:b2:09:
82:00:ff:ad:2d:d4:d2:ae:70:ea:04:39:c8:da:98:
4b:b1:49:62:50:72:c4:a4:70:5f:a4:27:5c:9d:36:
8d:00:65:57:69:75:c1:65:f8:3d:d0:c5:b6:8d:1e:
4d:e3:20:70:c5:25:69:e5:43:51:b8:e1:21:22:eb:
6e:f6:7c:cc:0f:33:86:f7:fd:73:e5:d2:37:e4:e1:
1b:47:70:23:87:c9:66:af:78:15:f9:01:17:64:da:
ef:90:3d:59:14:de:39:50:08:39:f0:fc:9c:1c:00:
92:41:eb:12:f1:a8:47:d8:15:5b:8f:90:98:95:c7:
7a:b3:8c:ce:04:6f:eb:c2:8d:3e:0c:44:2d:2a:29:
c2:c7:56:7a:df:5f:a2:fc:9e:e9:5a:bf:c9:11:12:
03:7b:41:2b:92:be:4d:f8:98:5c:dd:f3:d7:ea:b7:
2b:3d:bc:87:68:49:4c:ca:0f:f2:db:e7:55:78:4a:
7e:03:e2:10:14:93:f8:70:84:09:ac:32:dc:65:1b:
a4:e5:dc:9e:4d:fb:2c:af:8e:e8:0d:cd:13:e2:d1:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:B0:F4:98:50:33:B2:CA:B5:45:42:45:B7:09:B3:47:6E:92:B6
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/mpiw9JhQM7LKtUVCRbcJs0dukrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.188.0/22
185.240.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:72:60:7f:8e:34:4a:66:24:e4:10:05:15:d5:f1:f7:85:d9:
c3:be:9b:23:58:07:02:c5:ff:d1:85:c7:b1:9e:99:4b:79:5f:
ea:f0:45:83:58:b9:f3:2a:2e:70:04:4d:88:11:72:60:d6:3a:
72:b1:58:55:d8:96:93:47:7f:b8:fa:df:d0:99:5c:13:2e:21:
3a:96:8c:52:06:8b:55:0b:ee:3f:90:15:45:2f:11:a1:12:ba:
e6:fc:51:b7:26:f7:8c:d5:d9:c1:0b:9f:41:6a:e7:ff:e5:10:
03:03:3f:85:4b:13:2e:65:eb:cc:05:7e:8f:26:44:81:7e:c6:
b5:d4:cd:76:7e:86:57:c3:65:3b:38:51:f5:3e:81:22:8f:ec:
b5:9b:70:31:51:5f:3b:18:f9:e4:bb:aa:10:46:ee:9b:46:8f:
2c:04:a3:da:93:7c:15:bf:75:7c:62:a6:e6:8d:a4:9f:76:23:
bc:a8:a6:4f:15:38:b1:cd:61:c1:a5:51:4d:06:56:e5:21:f5:
f1:da:7a:bf:37:dd:5f:0d:0e:47:02:70:c9:35:c7:5f:c7:18:
04:f1:68:b4:c7:c2:99:62:7e:cc:ac:81:11:27:98:1b:dd:19:
54:12:76:61:79:b3:26:01:24:5a:34:7b:7f:48:34:33:db:35:
7b:d8:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:35 2025 by rpki-client