Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/MZqNy1F9cJnY_K2s8VyAMykw_DY.roa
File: MZqNy1F9cJnY_K2s8VyAMykw_DY.roa (raw, json)
Hash identifier: s8H7vuTDhKPTXdmofjCqncmM4J6RDOWUR7PsBJ4flkE=
Subject key identifier: 31:9A:8D:CB:51:7D:70:99:D8:FC:AD:AC:F1:5C:80:33:29:30:FC:36
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 01958EBB3B00737D482F2622C731DA4C23BD
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/MZqNy1F9cJnY_K2s8VyAMykw_DY.roa
Signing time: Thu 13 Mar 2025 08:59:49 +0000
ROA not before: Thu 13 Mar 2025 08:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 45.156.116.0/24 maxlen: 24
45.156.117.0/24 maxlen: 24
45.156.118.0/24 maxlen: 24
45.156.119.0/24 maxlen: 24
91.228.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bb:3b:00:73:7d:48:2f:26:22:c7:31:da:4c:23:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Mar 13 08:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=319a8dcb517d7099d8fcadacf15c80332930fc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:f2:86:42:2c:b9:e7:55:d6:47:7e:3d:62:
72:42:ef:d0:3d:23:db:c7:97:1a:26:4a:2e:c8:37:
0f:2f:92:2d:98:2d:8f:69:92:82:7f:68:e4:05:43:
79:81:8f:40:ac:cd:78:bd:83:87:2e:bc:d7:00:68:
69:6c:94:36:e1:6d:83:82:b5:66:b5:d2:e8:1d:74:
cf:8b:52:18:fa:b9:a5:64:c9:d9:48:61:f7:88:31:
bd:2d:d0:2a:61:69:57:5d:1b:62:a9:41:08:e0:bd:
4a:15:ec:c5:74:a1:92:22:db:28:27:ca:17:50:6c:
37:d7:f6:d1:47:05:4b:3b:0d:cd:8f:8e:7b:32:8d:
f9:b1:21:17:0c:84:3f:64:66:58:af:15:65:68:3f:
54:83:be:1f:09:98:b7:d6:d1:de:bf:2a:62:11:0a:
91:a6:a7:c1:6b:98:4b:78:f5:99:06:65:6d:3c:65:
c7:ca:95:18:c1:d6:6f:5b:7e:0a:74:35:57:1a:b9:
02:0b:26:6b:b8:75:63:5a:bc:58:1e:d7:3b:aa:fa:
5a:31:c4:6f:f8:5c:fc:6f:10:41:b1:75:60:34:02:
72:61:43:31:39:ca:aa:09:cc:68:7e:37:cc:b4:09:
2e:20:3c:be:81:46:39:4c:9e:cc:a0:4b:37:12:ed:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:8D:CB:51:7D:70:99:D8:FC:AD:AC:F1:5C:80:33:29:30:FC:36
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/MZqNy1F9cJnY_K2s8VyAMykw_DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/22
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8d:79:ae:c8:2d:24:1b:98:d7:d1:fe:9d:ab:3c:5c:4d:51:
62:04:8c:36:9c:ec:e6:68:ea:01:81:19:7a:48:cf:3c:11:f5:
d9:4f:9f:33:60:ac:bc:28:05:04:fc:60:d3:d8:ce:62:6d:12:
e7:a8:c4:6b:d3:6a:74:74:92:5d:4b:28:a2:e6:57:0f:92:93:
b1:1a:67:ca:54:9c:68:b4:58:18:55:30:b9:fb:5a:85:31:9c:
02:4b:e6:19:d3:a0:4a:af:7f:62:a8:7e:0d:67:a0:a4:cf:fc:
9f:4d:50:5d:3c:5e:6a:2f:f5:ed:5d:b2:ba:50:43:58:c0:d8:
8b:48:de:54:0e:f9:69:79:43:3c:fe:6d:e4:ad:78:6b:ff:84:
a8:63:03:db:53:99:c3:d5:02:c9:d3:34:37:37:e6:c7:6b:0b:
16:a1:c3:7b:cf:6e:a8:6e:2d:ab:af:63:a9:1f:fb:6b:6b:55:
cc:1d:57:19:d0:20:03:96:26:7e:1f:83:4f:19:e0:f9:a2:e9:
68:19:bc:c0:9a:d0:95:1b:8a:f9:99:08:68:10:47:15:e9:5e:
39:13:57:34:9b:62:09:e1:cd:dc:0f:ba:93:6b:e8:48:ae:db:
d9:ae:0c:e5:f2:8f:54:df:dc:cd:78:d7:84:3f:f9:51:9d:6b:
da:a1:db:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWOuzsAc31ILyYixzHaTCO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjhkOTRkNDg0MDMzZjc3ZTZmOTM4MWEwMmRhM2UyNDIx
NjdkYWUwHhcNMjUwMzEzMDg1OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTlhOGRjYjUxN2Q3MDk5ZDhmY2FkYWNmMTVjODAzMzI5MzBmYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2PyhkIsuedV1kd+PWJyQu/QPSPb
x5caJkouyDcPL5ItmC2PaZKCf2jkBUN5gY9ArM14vYOHLrzXAGhpbJQ24W2DgrVm
tdLoHXTPi1IY+rmlZMnZSGH3iDG9LdAqYWlXXRtiqUEI4L1KFezFdKGSItsoJ8oX
UGw31/bRRwVLOw3Nj457Mo35sSEXDIQ/ZGZYrxVlaD9Ug74fCZi31tHevypiEQqR
pqfBa5hLePWZBmVtPGXHypUYwdZvW34KdDVXGrkCCyZruHVjWrxYHtc7qvpaMcRv
+Fz8bxBBsXVgNAJyYUMxOcqqCcxofjfMtAkuIDy+gUY5TJ7MoEs3Eu06gQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDGajctRfXCZ2PytrPFcgDMpMPw2MB8GA1UdIwQY
MBaAFO4o2U1IQDP3fm+TgaAto+JCFn2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmIt
MGM3NTZmZDI0OGM4LzEvTVpxTnkxRjljSm5ZX0syczhWeUFNeWt3X0RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lYWRiZjgtOGU0NC00MjcxLWE3MmItMGM3NTZmZDI0OGM4
LzEvN2lqWlRVaEFNX2QtYjVPQm9DMmo0a0lXZmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZx0AwQA
W+SoMA0GCSqGSIb3DQEBCwUAA4IBAQAVjXmuyC0kG5jX0f6dqzxcTVFiBIw2nOzm
aOoBgRl6SM88EfXZT58zYKy8KAUE/GDT2M5ibRLnqMRr02p0dJJdSyii5lcPkpOx
GmfKVJxotFgYVTC5+1qFMZwCS+YZ06BKr39iqH4NZ6Ckz/yfTVBdPF5qL/XtXbK6
UENYwNiLSN5UDvlpeUM8/m3krXhr/4SoYwPbU5nD1QLJ0zQ3N+bHawsWocN7z26o
bi2rr2OpH/tra1XMHVcZ0CADliZ+H4NPGeD5ouloGbzAmtCVG4r5mQhoEEcV6V45
E1c0m2IJ4c3cD7qTa+hIrtvZrgzl8o9U39zNeNeEP/lRnWvaodvB
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:10 2025 by rpki-client