Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa
File: MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa (raw, json)
Hash identifier: fdgnEtst2k3DjzBCjD9kY1X5vik8xfLx76ArRZpas2g=
Subject key identifier: 31:9E:10:18:83:C4:88:FB:83:4B:2A:FF:DE:05:DE:15:60:6F:3D:7A
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194228E39A85D103ADF06A647C2D5E43B83
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 45.149.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:39:a8:5d:10:3a:df:06:a6:47:c2:d5:e4:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=319e101883c488fb834b2affde05de15606f3d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4d:ca:d6:db:f9:d7:61:46:fd:8e:2b:79:e9:
e1:27:a8:bb:56:a9:31:19:c6:d1:31:02:35:c6:36:
aa:e1:75:24:e1:b7:b7:21:6c:79:ce:a6:fc:e4:e2:
9e:64:51:d5:7c:56:26:02:bc:c9:de:ee:cb:4e:f4:
0d:b2:17:e1:83:27:56:4b:7f:91:af:71:d9:02:9a:
e9:be:03:be:4d:cf:a5:41:57:54:b7:fc:6c:15:dd:
b4:f1:13:0b:8d:09:a0:57:60:a6:eb:d5:09:75:e8:
c5:7b:08:e0:6f:f8:64:31:63:ff:9f:03:a4:12:1e:
8c:0a:e3:e3:77:1e:a4:bd:46:d8:06:ac:f5:c2:b2:
eb:99:2c:95:1b:87:34:53:8f:b4:05:c8:01:ab:2f:
04:04:bf:aa:86:da:04:b0:80:ba:60:82:6d:65:3e:
b1:87:6f:20:c6:1b:6f:dc:aa:c2:8e:ea:79:87:52:
73:51:c2:8f:80:89:02:35:3e:45:2e:e9:a4:84:8b:
48:61:8f:d8:d9:96:3f:6c:5d:69:27:c5:c6:80:3a:
ba:d1:ef:f3:52:d7:e5:68:6d:46:7e:48:37:4a:3a:
d3:b9:86:70:15:11:b2:fd:1c:90:c7:65:31:5d:bf:
9f:c6:ed:f3:be:c3:06:98:00:d5:52:57:b5:af:43:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:10:18:83:C4:88:FB:83:4B:2A:FF:DE:05:DE:15:60:6F:3D:7A
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/MZ4QGIPEiPuDSyr_3gXeFWBvPXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.167.0/24
Signature Algorithm: sha256WithRSAEncryption
93:21:24:b7:d2:c4:c6:ce:13:f7:aa:14:f9:3d:90:67:f1:4c:
f1:2a:de:85:36:46:f0:78:8a:9f:0f:6e:45:cd:c1:90:0a:1a:
e9:44:26:81:69:48:26:9c:80:66:6c:39:32:2c:e8:69:9e:22:
ea:a3:45:da:ad:94:99:9f:86:f6:7d:92:d9:35:2f:b5:46:26:
2e:ce:ed:bb:62:e0:31:ec:ec:74:aa:fa:ee:70:42:2d:df:51:
eb:72:b7:51:54:7a:4f:b6:87:80:7b:fb:7a:33:98:76:12:b4:
20:8b:b2:84:cf:bb:7d:a3:5d:a4:bc:9a:d9:af:ba:d4:a3:56:
1d:94:44:31:0f:e5:03:d9:04:3e:b4:5c:56:cf:23:a3:53:d9:
81:4a:f8:40:1f:d7:e3:0b:e4:e2:03:7c:32:fb:f6:47:3f:4e:
83:50:bc:35:43:bf:3b:1e:b2:9c:ff:4a:13:7a:2a:74:de:3e:
c3:8e:fb:ba:5b:50:48:37:a7:80:31:06:6c:d0:6f:62:d6:42:
ab:8b:32:e8:26:66:eb:0a:ce:40:11:d5:3d:c7:44:09:89:f7:
77:1d:93:04:4e:53:05:82:66:22:67:80:f7:bd:47:d0:57:dc:
5e:ac:47:41:b1:e0:73:3f:36:72:49:a8:94:8d:86:32:ef:6b:
b5:ca:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:50 2025 by rpki-client