Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/MjjllE7_bL2XbRuSj7P1CRSylBM.roa
File: MjjllE7_bL2XbRuSj7P1CRSylBM.roa (raw, json)
Hash identifier: 3C0JqqCmXUy+GyZCU6b3wMogLKUzb0A9FBbbsn048yU=
Subject key identifier: 32:38:E5:94:4E:FF:6C:BD:97:6D:1B:92:8F:B3:F5:09:14:B2:94:13
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E37FF3AA61880EC1B4B8F74112D1A
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/MjjllE7_bL2XbRuSj7P1CRSylBM.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49902
IP address blocks: 77.143.0.0/16 maxlen: 16
77.143.17.0/24 maxlen: 24
213.222.64.0/18 maxlen: 18
213.223.138.0/24 maxlen: 24
213.223.46.0/23 maxlen: 24
213.223.45.0/24 maxlen: 24
195.115.116.0/22 maxlen: 22
77.137.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:37:ff:3a:a6:18:80:ec:1b:4b:8f:74:11:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3238e5944eff6cbd976d1b928fb3f50914b29413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:d2:95:3c:8d:42:c9:3c:a3:f8:90:bf:cd:
e5:33:ea:54:b6:9f:3f:71:3a:9b:c2:11:cd:bd:19:
3e:70:cd:4f:e8:fa:d4:07:de:0c:d7:5e:c1:18:ce:
1a:1c:82:b7:3e:59:58:cb:b0:9c:bf:70:bb:cb:6b:
92:85:db:62:03:a4:74:ca:c7:86:01:ba:4b:c2:04:
47:c7:97:c9:cd:a8:59:61:e7:75:91:d8:f3:49:49:
83:00:45:39:0e:d4:3b:62:a4:44:94:04:39:3c:a4:
03:18:d2:6e:95:cb:d0:90:40:7b:ef:2e:18:05:b0:
95:70:18:12:8e:ab:c1:70:b6:78:f0:cd:16:58:c7:
f4:50:4c:49:d9:f2:f2:22:85:ce:92:39:e0:fd:b0:
14:73:f8:6b:c2:32:e4:ff:fa:89:01:fa:51:23:ef:
f6:00:29:89:89:17:94:2d:8f:e7:9c:3e:7c:bc:21:
f1:36:db:75:d2:e6:65:ed:64:87:93:b8:99:d7:33:
2f:e4:34:1e:9f:66:b2:c6:ee:42:f9:e6:d9:46:f0:
b2:5c:69:fb:21:67:8e:12:a6:84:c4:d8:c5:eb:40:
32:9f:9b:32:ef:d6:7b:ec:90:48:dd:67:75:8f:1c:
c2:78:04:ac:e7:a6:bf:ea:a5:3d:bf:6b:3d:2f:3c:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:38:E5:94:4E:FF:6C:BD:97:6D:1B:92:8F:B3:F5:09:14:B2:94:13
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/MjjllE7_bL2XbRuSj7P1CRSylBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.224.0/19
77.143.0.0/16
195.115.116.0/22
213.222.64.0/18
213.223.45.0-213.223.47.255
213.223.138.0/24
Signature Algorithm: sha256WithRSAEncryption
38:54:7e:08:09:1a:ec:47:4a:d7:ea:14:48:c6:1f:9e:12:e6:
56:5f:d0:01:23:de:67:b6:2b:5e:70:a2:ca:23:2e:90:a3:95:
d1:4f:de:97:d0:a0:3a:5f:cf:fe:0b:72:d7:48:33:35:95:90:
9b:cd:cb:e9:f9:31:81:b7:cb:f5:f6:e5:36:db:61:29:18:a8:
8d:2c:a7:3e:e4:7a:48:2e:d6:db:67:20:a2:84:86:ec:c9:4f:
2f:7f:b2:77:43:4e:5b:9d:8e:a2:b9:b3:a2:7a:58:bf:ba:cf:
a5:86:fa:b0:71:63:46:c9:e1:b1:2f:16:c6:75:a1:b3:d3:bd:
b9:25:75:4c:d5:d0:cb:ed:1f:1f:d9:97:9b:20:39:de:7b:8f:
bb:f0:a5:a3:e8:e3:e7:16:8e:8c:ca:80:f9:d8:9d:b9:a1:1b:
b5:e1:1f:4d:80:39:81:de:a7:5e:f7:fd:92:17:e7:04:0c:0b:
5c:55:1a:43:7f:21:75:fc:53:95:d6:93:c0:83:9c:36:37:33:
56:4e:39:41:6e:53:43:ea:0e:43:24:ab:1c:ea:1e:06:66:99:
f8:80:69:12:11:fb:3f:7b:b9:6d:db:ed:0e:a0:b9:0c:eb:18:
65:39:dc:a1:df:15:08:67:50:2f:e8:af:35:f9:38:00:a1:92:
49:f4:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:15:55 2025 by rpki-client