Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/MuNj6Tmq_I8EffoJFwt2bhBnzCg.roa
File: MuNj6Tmq_I8EffoJFwt2bhBnzCg.roa (raw, json)
Hash identifier: b8VgMDzcm3PvdusGhXoS1+19dE/nYxa5skqgW7ZjJV8=
Subject key identifier: 32:E3:63:E9:39:AA:FC:8F:04:7D:FA:09:17:0B:76:6E:10:67:CC:28
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 018F2447F74FBC28716A05421BCBC769DD11
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/MuNj6Tmq_I8EffoJFwt2bhBnzCg.roa
Signing time: Sun 28 Apr 2024 10:37:27 +0000
ROA not before: Sun 28 Apr 2024 10:37:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 158.172.140.0/23 maxlen: 23
158.172.142.0/24 maxlen: 24
158.172.152.0/24 maxlen: 24
158.172.153.0/24 maxlen: 24
158.172.154.0/24 maxlen: 24
158.172.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:47:f7:4f:bc:28:71:6a:05:42:1b:cb:c7:69:dd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Apr 28 10:37:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32e363e939aafc8f047dfa09170b766e1067cc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:58:32:6a:aa:f4:5a:71:d1:a3:1b:fb:85:
8b:4b:88:ca:d6:49:c9:0e:7d:19:0e:f1:fa:fa:2d:
26:b1:5a:22:77:fd:d8:70:40:8c:67:d9:6b:d9:5c:
5a:ac:68:c8:86:be:42:7e:d2:bf:05:fd:0e:af:66:
21:3f:71:a4:13:1f:28:ac:52:02:ab:ff:48:3b:ef:
09:27:06:07:1f:f8:9e:52:41:bf:80:ee:ce:38:91:
62:7e:28:1f:0d:83:19:17:9d:95:fd:ef:ec:b7:43:
d4:ed:8a:73:c9:51:58:89:b7:e1:be:5c:a6:92:0b:
3b:ed:07:96:60:55:f4:9e:c5:43:6b:eb:6d:e1:8e:
ca:dc:0a:43:a4:a1:9b:2e:bd:d3:ce:c0:d6:5c:8c:
3c:21:75:f3:3a:f8:b6:a9:af:f0:b4:b7:b8:c9:f1:
d4:ec:7b:41:24:91:28:0c:66:5e:bf:34:d5:ad:a6:
2e:d1:61:b6:91:49:b0:07:24:de:8e:a2:3d:81:ca:
85:dc:93:f3:72:e1:b1:09:e9:bd:7b:0d:5f:16:3c:
ff:f9:5e:38:2b:d9:f7:48:27:6d:9f:eb:c0:21:a6:
11:c9:e4:49:e2:55:42:17:a1:4a:ee:e4:cf:b1:11:
c1:c2:34:79:05:a7:3e:e9:be:51:c9:f0:c3:23:8f:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E3:63:E9:39:AA:FC:8F:04:7D:FA:09:17:0B:76:6E:10:67:CC:28
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/MuNj6Tmq_I8EffoJFwt2bhBnzCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.140.0-158.172.142.255
158.172.152.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b6:17:92:bc:37:d3:ac:ca:5a:8b:c9:6e:17:5d:c1:93:3e:
93:50:18:3b:31:da:25:2c:a1:89:6c:39:23:ee:e1:88:e6:65:
4e:3c:83:9c:41:23:c8:7a:68:ff:4b:b5:45:7c:2a:c2:cd:72:
62:ff:61:c7:9b:2e:5d:4d:23:0a:79:6a:94:4c:8c:ba:c2:4e:
13:83:de:88:11:c3:8d:7b:f6:48:fe:b7:b8:37:a2:8a:c5:e6:
08:31:15:b1:1c:9e:92:b3:5e:43:96:43:7b:fa:c6:c1:fd:bb:
4f:9a:b8:39:da:02:8e:fd:33:a8:e8:34:7d:2b:40:8a:09:f7:
fb:82:09:bd:1e:17:4b:cb:4e:91:03:62:69:52:96:87:a5:fc:
f6:e3:91:8f:e9:a0:06:02:9e:2c:06:14:a8:92:97:c5:55:ce:
f8:0a:34:18:02:1e:70:9d:b8:70:7f:35:74:a4:ef:3a:d2:b0:
f4:0f:6e:81:56:cb:4b:61:40:64:40:70:a2:ae:7b:77:5d:a6:
23:76:4f:5a:73:e5:b2:f1:35:75:19:02:8e:9d:07:39:e8:f2:
8d:e4:31:7c:1c:2d:d1:ab:f5:f2:7a:f9:96:13:9a:9f:50:5f:
3d:fb:eb:e4:7b:ff:c7:99:76:a4:be:40:61:07:8f:e5:0c:77:
3e:68:aa:00
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY8kR/dPvChxagVCG8vHad0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjQwNDI4MTAzNzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmUzNjNlOTM5YWFmYzhmMDQ3ZGZhMDkxNzBiNzY2ZTEwNjdjYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2BYMmqq9Fpx0aMb+4WLS4jK1knJ
Dn0ZDvH6+i0msVoid/3YcECMZ9lr2VxarGjIhr5CftK/Bf0Or2YhP3GkEx8orFIC
q/9IO+8JJwYHH/ieUkG/gO7OOJFifigfDYMZF52V/e/st0PU7YpzyVFYibfhvlym
kgs77QeWYFX0nsVDa+tt4Y7K3ApDpKGbLr3TzsDWXIw8IXXzOvi2qa/wtLe4yfHU
7HtBJJEoDGZevzTVraYu0WG2kUmwByTejqI9gcqF3JPzcuGxCem9ew1fFjz/+V44
K9n3SCdtn+vAIaYRyeRJ4lVCF6FK7uTPsRHBwjR5Bac+6b5RyfDDI4+j7QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDLjY+k5qvyPBH36CRcLdm4QZ8woMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvTXVOajZUbXFfSThFZmZvSkZ3dDJiaEJuekNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAKerIwD
BACerI4DBAKerJgwDQYJKoZIhvcNAQELBQADggEBACS2F5K8N9OsylqLyW4XXcGT
PpNQGDsx2iUsoYlsOSPu4YjmZU48g5xBI8h6aP9LtUV8KsLNcmL/YcebLl1NIwp5
apRMjLrCThOD3ogRw4179kj+t7g3oorF5ggxFbEcnpKzXkOWQ3v6xsH9u0+auDna
Ao79M6joNH0rQIoJ9/uCCb0eF0vLTpEDYmlSloel/PbjkY/poAYCniwGFKiSl8VV
zvgKNBgCHnCduHB/NXSk7zrSsPQPboFWy0thQGRAcKKue3ddpiN2T1pz5bLxNXUZ
Ao6dBzno8o3kMXwcLdGr9fJ6+ZYTmp9QXz376+R7/8eZdqS+QGEHj+UMdz5oqgA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:03 2025 by rpki-client