Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MzAunatgPS01jwJpslG9CtE52b4.roa
File: MzAunatgPS01jwJpslG9CtE52b4.roa (raw, json)
Hash identifier: Hm4tBuOcIhdBawm9TbM/eqfZu34qEGIp7H0c6+mZfyg=
Subject key identifier: 33:30:2E:9D:AB:60:3D:2D:35:8F:02:69:B2:51:BD:0A:D1:39:D9:BE
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142EE3A3CCED463E40C7A6E6A89B192
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MzAunatgPS01jwJpslG9CtE52b4.roa
Signing time: Mon 02 Jan 2023 06:54:49 +0000
ROA not before: Mon 02 Jan 2023 06:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2.58.85.0/24 maxlen: 24
2.58.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:ee:3a:3c:ce:d4:63:e4:0c:7a:6e:6a:89:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33302e9dab603d2d358f0269b251bd0ad139d9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:4e:d3:ae:be:9e:8e:dc:c7:1d:2a:3a:f9:
54:5d:fa:1e:50:7e:7c:fc:4c:45:c4:a5:eb:25:d0:
6e:5c:87:4e:91:28:c3:36:2c:37:d5:1e:05:31:16:
da:dd:bb:b2:09:ec:db:7f:1b:b9:f3:02:b5:df:71:
23:18:47:1d:de:90:81:6b:e9:52:22:b1:18:49:e1:
73:7a:ce:b8:5d:47:4d:9e:61:3f:47:d2:a5:3e:a7:
89:e7:79:c3:8b:30:4a:94:34:e6:c7:b6:71:aa:30:
ba:54:4d:2a:e6:84:21:c7:27:d3:ae:3d:be:98:7a:
8d:71:13:5b:f7:07:81:e8:24:d4:6f:d4:ab:1d:b7:
83:10:c9:93:58:52:4f:71:c6:82:04:a5:fa:3d:9d:
fb:4d:7d:01:54:d1:56:fb:6c:03:a4:c6:42:cd:38:
1e:49:e4:e5:c2:ad:cb:3c:4f:81:10:68:80:d5:54:
3f:e5:30:b6:a9:4c:d2:46:aa:12:19:49:3f:5a:40:
28:64:b9:9e:03:66:78:61:cf:c1:0f:e7:7f:42:62:
0c:2c:49:64:2a:e4:8b:1d:8f:ac:ea:96:41:7c:02:
33:23:25:d2:c0:12:a5:dd:65:2b:dc:57:73:f4:e0:
09:57:cf:fc:a0:bf:44:a1:45:25:3f:c6:04:46:ba:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:2E:9D:AB:60:3D:2D:35:8F:02:69:B2:51:BD:0A:D1:39:D9:BE
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MzAunatgPS01jwJpslG9CtE52b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:9a:02:96:1d:6d:2e:75:7f:47:2c:07:83:44:32:18:69:ed:
6a:df:db:26:ba:81:ba:04:a1:97:2a:30:21:ec:e0:85:d0:a9:
25:d6:dc:5a:78:7c:45:43:96:02:a2:dd:63:14:d7:e2:d3:9e:
ac:41:a2:5c:26:cb:89:cb:8b:6d:09:0c:1f:9e:32:a3:0c:30:
83:e5:ce:21:a0:37:83:c8:77:c7:45:e0:d1:dd:24:af:fb:4b:
91:9f:ce:b2:04:53:0f:1b:23:55:05:f9:c3:2c:fc:a3:54:4b:
2d:83:2b:33:fa:10:c2:f5:43:21:6c:7e:41:c8:8d:9d:05:92:
a9:52:75:b6:37:ae:e2:09:77:7c:01:36:c5:1b:43:d4:29:c1:
7a:6a:08:2e:c3:4b:14:07:b2:88:f7:e1:2b:e1:bf:5a:29:4e:
05:13:80:1c:84:74:f2:4d:27:8a:5b:27:3f:7c:c8:0e:95:05:
f4:e7:bb:bc:ec:52:24:dd:f5:88:e1:06:82:64:72:dc:11:be:
cf:cb:14:66:9c:33:cc:c7:5a:2e:c2:d1:23:49:25:e5:a3:27:
84:c5:76:a6:b8:39:98:ee:62:e0:63:78:49:df:08:25:00:33:
bc:b5:af:ab:87:8a:d2:af:4d:b1:af:08:35:76:ee:7a:4d:fe:
73:01:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:33:28 2025 by rpki-client