Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/mx93IwJNinuuMjzIP0xomfPqOgU.roa
File: mx93IwJNinuuMjzIP0xomfPqOgU.roa (raw, json)
Hash identifier: NC/J+Yuystqog7yeYoa5b9lyAwE4oiRR/tCC1WEfXWo=
Subject key identifier: 9B:1F:77:23:02:4D:8A:7B:AE:32:3C:C8:3F:4C:68:99:F3:EA:3A:05
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 01856FCBB5A606DCF49D4D86CC7DC374B38A
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/mx93IwJNinuuMjzIP0xomfPqOgU.roa
Signing time: Mon 02 Jan 2023 00:04:59 +0000
ROA not before: Mon 02 Jan 2023 00:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 45.157.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b5:a6:06:dc:f4:9d:4d:86:cc:7d:c3:74:b3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Jan 2 00:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b1f7723024d8a7bae323cc83f4c6899f3ea3a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:da:bd:88:8e:1f:48:bb:0f:18:74:64:68:cb:
4a:4e:9a:9d:28:05:82:ce:e2:c2:89:db:e9:dd:1a:
42:ac:f0:f5:2f:4d:a1:61:9b:e3:90:bc:d0:2c:eb:
1e:5e:4e:8a:ac:7c:b6:2d:b4:e1:ac:5b:6b:a3:a5:
80:9f:a0:6b:9f:9a:bb:d2:f0:53:1a:5a:b6:72:5e:
51:35:04:4d:0d:66:1b:e8:68:3a:3f:d3:b9:d6:f3:
31:40:d9:cd:11:38:97:87:a0:eb:36:f1:79:8f:6e:
a3:29:05:a5:41:ee:f8:5b:5d:5a:03:e2:02:b3:a0:
63:eb:5f:68:4f:b3:3e:21:9e:5d:ed:62:29:27:41:
1a:d2:19:23:e1:28:80:d4:76:dd:ce:bc:f1:fd:e4:
ba:2c:2f:e7:17:f0:6d:64:c9:e0:50:07:78:48:1f:
12:99:4a:01:35:af:43:a1:79:35:ce:87:62:88:26:
82:67:57:a6:7d:45:64:86:67:64:22:c7:b1:71:01:
71:0f:9d:e8:3e:9a:49:84:42:ba:71:8a:65:71:a5:
2a:78:1f:2a:ac:07:b8:a3:07:b9:54:78:ba:ad:06:
b7:e2:6d:86:d8:67:9a:3f:f9:60:11:bc:4d:93:b7:
8d:bf:9b:8d:e2:a4:3d:db:0c:38:60:61:3e:8b:5c:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1F:77:23:02:4D:8A:7B:AE:32:3C:C8:3F:4C:68:99:F3:EA:3A:05
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/mx93IwJNinuuMjzIP0xomfPqOgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d8:b1:e3:dd:46:a1:2a:e7:ed:fc:3f:3a:1a:39:5c:ac:33:
42:5e:4a:1e:e7:bd:6d:cb:be:e6:6f:96:36:fc:f3:e7:61:75:
ab:60:d5:81:f5:54:50:12:0d:3f:8a:f9:25:46:55:83:21:dd:
a5:19:f1:3e:18:93:23:4b:ce:a8:39:1f:e7:60:a2:b8:13:31:
ab:e1:c9:1e:40:c7:78:2a:58:15:ee:69:bc:ca:52:7d:64:3f:
9f:25:1a:8a:b4:44:8c:65:a8:17:34:1a:7e:ef:35:87:82:b6:
2c:64:3f:db:c3:b0:04:82:08:2b:a2:0e:fd:2a:3e:5d:a8:fa:
d6:87:12:1a:57:79:3e:2a:58:d5:08:77:1c:b7:79:b2:69:19:
a9:b4:51:c4:84:44:71:c6:d6:2b:9f:f3:18:e8:45:9e:0f:c7:
56:7a:d7:37:0a:3e:d9:48:ca:04:67:eb:bd:ad:d1:d1:48:b9:
e3:18:5d:28:b3:67:64:30:37:49:a4:85:75:c5:94:70:15:cd:
30:d5:51:cc:38:5c:ac:42:e8:ae:94:e7:13:ff:8e:1a:da:34:
52:f6:72:27:8c:90:74:21:6f:5a:78:a5:3b:de:cc:87:d3:03:
0b:46:59:9c:b4:b9:90:22:41:58:17:d1:54:cf:12:4e:aa:c0:
b4:4e:e4:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy7WmBtz0nU2GzH3DdLOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjMwMTAyMDAwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjFmNzcyMzAyNGQ4YTdiYWUzMjNjYzgzZjRjNjg5OWYzZWEzYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89q9iI4fSLsPGHRkaMtKTpqdKAWC
zuLCidvp3RpCrPD1L02hYZvjkLzQLOseXk6KrHy2LbThrFtro6WAn6Brn5q70vBT
Glq2cl5RNQRNDWYb6Gg6P9O51vMxQNnNETiXh6DrNvF5j26jKQWlQe74W11aA+IC
s6Bj619oT7M+IZ5d7WIpJ0Ea0hkj4SiA1Hbdzrzx/eS6LC/nF/BtZMngUAd4SB8S
mUoBNa9DoXk1zodiiCaCZ1emfUVkhmdkIsexcQFxD53oPppJhEK6cYplcaUqeB8q
rAe4owe5VHi6rQa34m2G2GeaP/lgEbxNk7eNv5uN4qQ92ww4YGE+i1xYwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJsfdyMCTYp7rjI8yD9MaJnz6joFMB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvbXg5M0l3Sk5pbnV1TWp6SVAweG9tZlBxT2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0HMA0G
CSqGSIb3DQEBCwUAA4IBAQAM2LHj3UahKuft/D86GjlcrDNCXkoe571ty77mb5Y2
/PPnYXWrYNWB9VRQEg0/ivklRlWDId2lGfE+GJMjS86oOR/nYKK4EzGr4ckeQMd4
KlgV7mm8ylJ9ZD+fJRqKtESMZagXNBp+7zWHgrYsZD/bw7AEgggrog79Kj5dqPrW
hxIaV3k+KljVCHcct3myaRmptFHEhERxxtYrn/MY6EWeD8dWetc3Cj7ZSMoEZ+u9
rdHRSLnjGF0os2dkMDdJpIV1xZRwFc0w1VHMOFysQuiulOcT/44a2jRS9nInjJB0
IW9aeKU73syH0wMLRlmctLmQIkFYF9FUzxJOqsC0TuR5
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:08 2025 by rpki-client