Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Mz4trJrAW01ZkNslsML1xRMxGxQ.roa
File: Mz4trJrAW01ZkNslsML1xRMxGxQ.roa (raw, json)
Hash identifier: ERnrmORMYlRxYBsPnovWcZLmcw9b0y0/ocxTW5D5jX4=
Subject key identifier: 33:3E:2D:AC:9A:C0:5B:4D:59:90:DB:25:B0:C2:F5:C5:13:31:1B:14
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B1003D6
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Mz4trJrAW01ZkNslsML1xRMxGxQ.roa
Signing time: Thu 26 May 2022 09:18:13 +0000
ROA not before: Thu 26 May 2022 09:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.117.101.0/24 maxlen: 24
89.117.167.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185598934 (0xb1003d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 26 09:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=333e2dac9ac05b4d5990db25b0c2f5c513311b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:57:a9:c4:f1:55:97:cd:48:a1:54:06:0b:
0d:9d:05:53:25:81:12:2f:7a:6f:d8:e6:f7:dd:27:
50:cd:40:f6:a4:cf:19:cf:74:a4:c4:7b:03:50:0a:
b9:a2:d8:7c:56:00:c7:2a:10:ab:1c:e8:06:69:5e:
4a:2c:07:e1:1a:e9:8a:ef:8b:1a:c5:92:78:7c:00:
48:37:93:ad:48:49:10:19:31:80:cf:a7:0e:5b:0c:
0c:fb:0f:4b:f8:18:41:f9:02:7b:b9:2a:39:26:d6:
98:bc:1c:a0:34:67:25:38:27:c8:f3:7f:c8:df:5a:
a3:0d:9d:51:64:9f:f0:59:39:64:3a:d3:17:37:ed:
08:3e:a9:dc:59:7d:c9:62:a7:8a:26:14:96:41:59:
c7:7a:df:8f:8b:62:3e:e4:92:1e:a8:dd:e7:02:00:
0a:80:c1:ac:5f:bc:03:09:f3:51:cc:61:da:3e:39:
fb:09:bc:ee:1d:02:4f:fc:29:4d:f9:9d:c2:61:a8:
52:22:c6:3b:93:a1:7e:da:2d:9c:e4:a7:e0:70:72:
db:2f:86:42:b6:33:ea:7f:a6:c3:b4:3f:1b:5d:1f:
56:90:2f:1e:4d:4c:5f:21:7a:05:37:48:80:34:3c:
08:3c:8f:95:24:d4:a2:48:ee:b9:43:42:44:32:78:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:2D:AC:9A:C0:5B:4D:59:90:DB:25:B0:C2:F5:C5:13:31:1B:14
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Mz4trJrAW01ZkNslsML1xRMxGxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.102.0/24
89.117.101.0/24
89.117.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2a:83:be:7b:b8:d6:24:40:d3:ac:77:e5:8a:cc:a9:29:db:
a1:71:40:0c:6d:92:4d:d4:e1:a6:0c:47:1f:b0:81:fa:29:cd:
53:b5:93:7c:c0:f1:b0:85:aa:e5:b1:8c:3e:f4:40:07:35:ea:
0c:6b:d3:8b:f3:bd:03:b2:46:44:39:c3:21:8f:9e:bf:ed:9e:
50:5c:68:56:3b:f8:7c:25:7c:c6:7a:5d:10:eb:48:c9:77:99:
84:cf:2f:27:10:2f:da:6b:88:5f:4b:ea:99:ae:cd:e6:42:32:
01:6d:03:39:37:ec:9b:bc:0d:86:61:e9:a5:25:86:db:c9:21:
b8:b3:bf:c1:50:ee:e7:05:1e:4d:49:fe:11:e2:50:0f:70:7c:
79:d5:88:23:d4:a0:71:02:7b:ab:68:c0:59:69:b1:d1:1d:ff:
61:3e:ce:69:b7:64:f6:3e:cf:a3:21:2d:a9:30:49:d8:c2:1b:
01:59:90:e5:b0:56:65:69:cf:a9:8e:65:cd:5c:6d:e3:bc:5b:
6b:12:3a:36:cd:13:ea:2d:30:40:18:75:f5:13:fd:b2:e5:6e:
8f:49:95:db:90:bf:d8:58:41:0c:98:3d:3f:03:3b:c3:fe:98:
39:4d:17:5e:8e:9d:f2:e1:0e:28:7a:4d:94:d4:dc:e7:b3:26:
78:fb:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:48:42 2025 by rpki-client