Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/MlwnnHQSubyNFQe7dJVSCwFfpw0.roa
File: MlwnnHQSubyNFQe7dJVSCwFfpw0.roa (raw, json)
Hash identifier: qQhqibUte4HVHhqYBEYFNgVv7RVvIytD8KphYqSwOfw=
Subject key identifier: 32:5C:27:9C:74:12:B9:BC:8D:15:07:BB:74:95:52:0B:01:5F:A7:0D
Certificate issuer: /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial: 152538FD
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/MlwnnHQSubyNFQe7dJVSCwFfpw0.roa
Signing time: Thu 24 Mar 2022 15:38:48 +0000
ROA not before: Thu 24 Mar 2022 15:38:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48070
IP address blocks: 94.126.232.0/24 maxlen: 24
94.126.233.0/24 maxlen: 24
94.126.235.0/24 maxlen: 24
94.126.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354760957 (0x152538fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Validity
Not Before: Mar 24 15:38:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=325c279c7412b9bc8d1507bb7495520b015fa70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:d8:30:dd:26:19:4c:02:cc:4b:c3:ae:45:
0a:1f:c8:33:db:ab:22:67:f0:02:6d:d7:71:7b:6f:
d0:e2:86:69:f5:bc:97:9f:3d:ff:56:27:af:d7:7b:
4e:16:d4:7c:ab:95:9c:1b:46:04:91:27:d2:b1:16:
66:1c:33:8d:1b:5a:cf:6d:ed:30:70:f8:06:48:4b:
1d:45:5b:22:9c:49:bb:70:7d:c8:bd:d1:09:9f:8c:
91:05:21:37:a8:5d:25:06:14:39:1a:03:29:a0:06:
34:e9:e6:21:9a:a5:c6:25:bb:49:81:0a:70:b5:f2:
80:7f:20:1f:f7:43:b9:17:b1:d9:9b:f4:ed:0d:e7:
51:05:5f:9b:be:3e:b0:e1:74:53:ae:58:4d:0b:19:
17:e9:d8:1d:f7:8a:30:69:f4:88:f8:5a:0f:a0:df:
78:b8:66:2b:ba:06:4e:58:33:35:f8:ff:ce:61:b1:
8d:bd:d9:78:d8:00:90:46:5c:66:17:31:ed:70:07:
e5:b9:ef:83:03:dd:64:33:f0:7d:66:40:39:ca:41:
a2:bd:90:61:81:a4:36:59:23:7f:90:3b:86:f9:58:
fb:47:26:f3:5a:4e:2a:16:09:7e:01:c9:e3:3a:4a:
54:a0:8e:d7:b0:d5:d2:db:26:9a:ba:03:8d:7b:b5:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:27:9C:74:12:B9:BC:8D:15:07:BB:74:95:52:0B:01:5F:A7:0D
X509v3 Authority Key Identifier:
keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/MlwnnHQSubyNFQe7dJVSCwFfpw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c8:34:30:91:d8:2f:31:0d:a0:9b:a1:70:a8:29:87:2a:74:
d3:e5:ae:de:1b:ab:fa:65:1c:ed:46:02:3d:ad:e7:6b:7d:3f:
07:de:27:f2:1c:f7:96:6e:e0:d4:5a:cc:fa:f2:56:53:46:79:
59:ef:5f:ea:81:45:ac:6a:fd:38:9f:50:d0:02:66:a1:57:c7:
f4:cd:8a:56:36:b7:91:28:fe:01:a3:02:be:57:04:a4:28:da:
6f:4e:8f:7c:6d:fb:7e:30:60:57:35:d1:da:83:3b:fd:03:1a:
1c:de:b7:55:83:e9:36:63:ec:20:b1:b3:48:1b:9b:c8:d0:e5:
be:5a:e6:44:96:fa:1f:64:78:fb:7a:9e:22:d1:ec:e6:40:aa:
a6:6c:54:21:58:3c:fb:79:9b:70:96:ac:7e:90:8a:33:2e:7f:
a7:20:84:74:29:b4:12:44:e7:62:fd:4f:48:ab:1e:2c:5a:72:
b0:04:13:3f:cf:9a:39:e4:93:72:6d:ea:f6:82:cb:34:09:16:
90:7e:13:ca:b1:a6:4a:a6:a6:32:41:3c:27:50:94:8f:37:f5:
5d:14:92:66:35:c3:7e:ff:ae:03:a7:0f:68:7e:a1:68:80:98:
df:39:fe:94:bd:ce:cb:3d:e4:46:9a:da:6e:17:6a:df:d8:c0:
3d:29:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:26 2025 by rpki-client