Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/mphDesgjK6Onr5y6IZPMTWlrP-U.roa
File: mphDesgjK6Onr5y6IZPMTWlrP-U.roa (raw, json)
Hash identifier: ilbmBxOIagqo/tPLQF0wDgYFEpCdkEK/5ye43lns6Ks=
Subject key identifier: 9A:98:43:7A:C8:23:2B:A3:A7:AF:9C:BA:21:93:CC:4D:69:6B:3F:E5
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019590B0061F122DBBC52DFE698F264D7024
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/mphDesgjK6Onr5y6IZPMTWlrP-U.roa
Signing time: Thu 13 Mar 2025 18:06:49 +0000
ROA not before: Thu 13 Mar 2025 18:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.139.68.0/23 maxlen: 24
45.150.80.0/23 maxlen: 24
95.214.38.0/24 maxlen: 24
95.214.39.0/24 maxlen: 24
193.36.162.0/24 maxlen: 24
193.36.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:b0:06:1f:12:2d:bb:c5:2d:fe:69:8f:26:4d:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Mar 13 18:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a98437ac8232ba3a7af9cba2193cc4d696b3fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:09:5e:1d:91:f9:15:59:4a:3d:ee:9d:d7:
04:64:e8:a5:12:f1:da:86:7f:40:76:66:cb:b4:f1:
22:a0:52:28:99:d7:8d:d1:15:7d:ee:ef:f7:e9:e0:
e5:0b:ac:bb:d6:36:c7:cf:ac:2d:82:e2:08:a2:2c:
ce:e7:d0:53:3a:e2:3b:78:a2:6c:df:a5:6d:ca:2a:
d6:53:46:e5:aa:e7:e3:42:2c:72:14:49:7c:9e:36:
8d:63:9b:6d:40:b6:76:a5:4c:99:37:b5:99:af:01:
c5:0b:c1:2e:18:8a:1a:c9:c3:f4:09:b8:90:95:b5:
7c:ea:06:04:71:10:7a:55:f4:9f:e3:1a:15:f3:fc:
be:f8:a2:b5:6a:e3:b1:9b:c3:73:54:94:59:76:1d:
51:bd:82:c6:f2:58:64:05:71:dc:9b:e3:3b:68:7f:
6e:bb:26:70:49:02:1e:e9:52:b1:08:76:b2:04:b9:
b6:d3:10:d6:e8:cf:5e:11:e8:72:21:75:f0:1b:8c:
65:2e:f8:91:14:c1:2b:1a:ac:6d:b6:6b:99:a5:09:
dc:06:22:21:49:f8:1b:c8:60:57:47:0e:28:72:d9:
8e:82:02:57:b2:a4:7d:2e:e0:78:ed:5a:76:0e:a3:
91:6e:c3:c4:04:a1:85:e8:59:3c:bf:87:c3:3d:ca:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:43:7A:C8:23:2B:A3:A7:AF:9C:BA:21:93:CC:4D:69:6B:3F:E5
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/mphDesgjK6Onr5y6IZPMTWlrP-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.68.0/23
45.150.80.0/23
95.214.38.0/23
193.36.162.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:3d:07:e2:30:94:2b:de:b2:78:14:74:4d:80:8d:7e:72:f9:
3d:d7:10:5d:b2:e9:37:af:2f:21:da:13:c0:40:ef:90:42:0a:
35:9c:be:cc:ee:b6:eb:da:82:b4:94:5e:f8:3b:1c:c7:12:c8:
49:fb:b6:d2:cd:ae:cc:f8:4d:0c:1a:b3:3e:e5:92:b3:7d:7b:
2a:e2:5b:06:2a:25:a2:cd:25:59:fd:c1:30:5c:77:e3:d7:26:
0d:b2:91:2f:4b:76:3e:02:53:9e:0e:e8:f7:8d:4b:09:3e:1d:
5b:74:8d:8f:ed:15:a5:e2:01:f8:aa:fc:2f:38:14:d7:bf:9c:
9d:ac:a4:4b:d0:01:e1:2b:db:eb:01:7b:f2:a6:0b:2f:89:f3:
d7:34:dc:01:50:01:ee:77:c4:49:bb:f4:c0:89:27:0e:c5:b8:
dc:84:f9:19:74:50:e4:56:ab:bf:73:cd:35:d2:07:6c:19:af:
c8:9f:59:c1:e6:d5:e8:5e:1a:11:7e:b9:62:b5:af:b9:a9:af:
6f:62:ac:e7:54:62:4e:92:bd:61:87:e4:3d:2c:24:89:29:31:
b3:ca:aa:2b:fc:66:37:2a:78:3c:96:ce:b6:15:23:35:79:83:
cf:68:4b:b6:7f:a7:6e:d8:52:2d:2f:42:47:86:21:0d:12:cd:
6f:39:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:26:14 2025 by rpki-client