Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/MBUBEndfEL2ou1Si73Dx05W6APw.roa
File: MBUBEndfEL2ou1Si73Dx05W6APw.roa (raw, json)
Hash identifier: ORyjqxAsrGQXFHo1HObozyWaia7CIcrM9/AH92AodZQ=
Subject key identifier: 30:15:01:12:77:5F:10:BD:A8:BB:54:A2:EF:70:F1:D3:95:BA:00:FC
Certificate issuer: /CN=ac4d602e30b9806c8479c87b2f5b4cd92d4784f2
Certificate serial: 87D26C
Authority key identifier: AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE1gLjC5gGyEech7L1tM2S1HhPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/MBUBEndfEL2ou1Si73Dx05W6APw.roa
Signing time: Thu 10 Feb 2022 12:19:04 +0000
ROA not before: Thu 10 Feb 2022 12:19:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212755
IP address blocks: 45.149.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8901228 (0x87d26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4d602e30b9806c8479c87b2f5b4cd92d4784f2
Validity
Not Before: Feb 10 12:19:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30150112775f10bda8bb54a2ef70f1d395ba00fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:56:61:a3:8b:be:fe:6f:92:17:5e:bd:e0:
63:e3:c9:a4:d2:0a:f1:50:cb:a6:a6:f8:b7:e0:35:
d7:6f:c8:9c:d8:6f:ee:f7:7f:fb:66:93:3e:2c:1f:
4e:95:1a:a6:29:c5:87:3d:0a:80:55:67:66:93:56:
5e:92:6e:64:a7:06:ad:a9:71:10:24:f6:d6:1d:28:
0d:94:e7:fd:b9:cd:2c:37:b0:f2:ae:58:6c:49:1a:
97:7a:5c:74:48:7d:66:6a:a3:2b:c0:a2:90:ca:39:
6e:29:80:1f:37:b5:12:db:29:24:5e:a8:56:09:89:
34:7d:66:13:34:55:c9:21:12:57:48:73:89:e6:dc:
dc:2a:59:16:ed:b9:ef:a0:8a:3b:93:95:1f:f1:ba:
0f:30:3a:55:8a:eb:bb:03:19:29:ab:4f:47:54:00:
c2:f8:e0:49:97:76:f2:23:5f:71:f9:a4:54:b5:39:
b2:57:7b:5d:b6:cf:62:62:03:3c:28:e3:fb:7b:f7:
5c:5a:50:f6:c7:47:e5:1b:62:bb:a5:d1:b8:f3:ed:
bf:fb:49:90:dc:77:f1:2c:8a:37:87:b1:d9:5b:71:
67:cb:f4:4b:a2:ab:62:68:85:c0:98:7e:e5:a5:6f:
02:cd:95:4b:f5:53:0a:e3:f2:a3:f9:52:1e:1e:24:
2f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:01:12:77:5F:10:BD:A8:BB:54:A2:EF:70:F1:D3:95:BA:00:FC
X509v3 Authority Key Identifier:
keyid:AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE1gLjC5gGyEech7L1tM2S1HhPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/MBUBEndfEL2ou1Si73Dx05W6APw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
Signature Algorithm: sha256WithRSAEncryption
88:19:90:8f:61:72:16:91:b0:0b:f1:13:88:27:7f:5e:59:be:
01:8f:fb:d7:d3:9d:dd:71:60:5c:dd:b5:b0:1c:75:3e:97:50:
aa:27:fa:49:c4:04:d4:2f:16:85:f9:9b:41:b7:3a:86:1a:38:
f6:b2:b0:2a:b3:f9:1a:dd:08:d8:25:14:d0:0d:5d:6c:6e:0a:
35:5e:d5:f7:90:d3:d5:0f:58:b2:58:23:08:0b:5a:b2:f1:b9:
e2:23:47:fa:93:65:98:30:2a:ab:6e:31:13:69:2f:e8:c4:8f:
90:03:e2:fd:d4:1d:51:73:ad:eb:a0:0f:11:6b:ec:65:63:58:
54:52:dd:6f:ad:d7:63:7e:8c:76:61:03:7b:c0:ef:dc:89:d7:
93:c1:e3:88:76:de:a6:e4:35:d6:f2:96:d6:38:d8:35:44:08:
5b:f9:a1:da:bf:15:a5:e7:a1:fa:13:69:61:c5:33:d7:55:de:
55:69:c6:51:c8:fb:09:45:85:ec:4c:25:0c:3b:fd:1a:ed:94:
d7:a3:b0:bf:8d:e6:6a:c8:b4:a4:b6:41:1a:b4:87:46:dc:a0:
06:6a:a7:34:a2:86:9b:8f:7f:8e:c6:0d:72:2d:88:fe:ce:68:
96:e6:52:11:a5:82:6f:d5:87:62:57:b7:0d:98:4f:26:4c:1c:
38:b8:ce:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:56 2025 by rpki-client