Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/MjxchySxHLPX0oxp6Z6SYoucUMg.roa
File: MjxchySxHLPX0oxp6Z6SYoucUMg.roa (raw, json)
Hash identifier: fpyAWA+pqwty+fi9kxovWSmXLh8K9Vk7+9DV1WXQdTY=
Subject key identifier: 32:3C:5C:87:24:B1:1C:B3:D7:D2:8C:69:E9:9E:92:62:8B:9C:50:C8
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019425220175E8DA7EFC15FB3205FCFCA48B
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/MjxchySxHLPX0oxp6Z6SYoucUMg.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 36.255.188.0/24 maxlen: 24
36.255.189.0/24 maxlen: 24
36.255.190.0/24 maxlen: 24
36.255.191.0/24 maxlen: 24
45.143.68.0/24 maxlen: 24
45.143.69.0/24 maxlen: 24
45.143.70.0/24 maxlen: 24
45.143.71.0/24 maxlen: 24
83.150.240.0/24 maxlen: 24
83.150.241.0/24 maxlen: 24
83.150.242.0/24 maxlen: 24
83.150.243.0/24 maxlen: 24
87.239.254.0/24 maxlen: 24
95.181.216.0/24 maxlen: 24
95.181.217.0/24 maxlen: 24
95.181.218.0/24 maxlen: 24
95.181.219.0/24 maxlen: 24
103.225.200.0/24 maxlen: 24
103.225.201.0/24 maxlen: 24
103.225.202.0/24 maxlen: 24
103.225.203.0/24 maxlen: 24
171.22.252.0/24 maxlen: 24
185.46.116.0/24 maxlen: 24
185.46.117.0/24 maxlen: 24
185.46.240.0/24 maxlen: 24
185.46.241.0/24 maxlen: 24
185.46.242.0/24 maxlen: 24
185.46.243.0/24 maxlen: 24
185.75.208.0/24 maxlen: 24
185.75.209.0/24 maxlen: 24
185.75.210.0/24 maxlen: 24
185.75.211.0/24 maxlen: 24
185.201.190.0/24 maxlen: 24
185.253.68.0/24 maxlen: 24
185.253.69.0/24 maxlen: 24
185.253.70.0/24 maxlen: 24
185.253.71.0/24 maxlen: 24
193.108.242.0/24 maxlen: 24
193.108.243.0/24 maxlen: 24
193.201.248.0/24 maxlen: 24
193.201.249.0/24 maxlen: 24
193.201.250.0/24 maxlen: 24
193.201.251.0/24 maxlen: 24
194.36.96.0/24 maxlen: 24
194.36.97.0/24 maxlen: 24
194.36.98.0/24 maxlen: 24
194.36.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:01:75:e8:da:7e:fc:15:fb:32:05:fc:fc:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323c5c8724b11cb3d7d28c69e99e92628b9c50c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:d6:62:10:eb:e9:6e:9c:35:ec:d2:64:94:
5f:5d:1d:48:2a:60:00:73:48:45:13:a7:c0:51:82:
8a:f1:48:b7:26:bf:a6:3b:b4:90:d1:06:26:06:6a:
7e:e6:cd:a5:d2:2d:7d:da:ff:55:a1:1d:79:a2:e7:
b7:7d:93:c7:65:8e:b7:99:d8:22:fa:f9:d3:fd:e6:
34:59:84:3d:0e:b2:1a:f3:61:12:c3:23:71:6e:fc:
ce:75:61:44:3a:ac:1e:b4:9d:ff:54:c0:c7:e3:4e:
6c:25:3f:b1:a0:f6:15:5b:42:f8:25:07:67:88:a3:
6d:a6:bf:8c:ae:6d:3c:bc:0c:21:b3:e0:4e:f8:43:
c9:8e:dc:ec:08:34:3f:69:e1:62:65:7c:9a:15:4f:
48:30:fe:a9:c6:70:b6:4b:fc:e9:f4:ec:9a:1d:f2:
fa:98:ad:89:b5:8d:b2:2a:bd:94:8e:07:7d:4c:32:
33:f9:bd:ee:f3:db:42:73:dc:9c:08:e9:15:f1:d7:
65:ea:ae:9d:ae:da:e2:37:2b:bd:77:35:ba:c1:29:
c1:7e:0e:ce:08:04:3f:de:b5:2b:c9:ad:da:07:d6:
53:04:72:3c:64:fe:d6:0c:71:cb:64:2f:86:55:fb:
b7:87:cc:b8:54:51:3f:db:b6:74:25:45:15:27:ed:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3C:5C:87:24:B1:1C:B3:D7:D2:8C:69:E9:9E:92:62:8B:9C:50:C8
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/MjxchySxHLPX0oxp6Z6SYoucUMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.188.0/22
45.143.68.0/22
83.150.240.0/22
87.239.254.0/24
95.181.216.0/22
103.225.200.0/22
171.22.252.0/24
185.46.116.0/23
185.46.240.0/22
185.75.208.0/22
185.201.190.0/24
185.253.68.0/22
193.108.242.0/23
193.201.248.0/22
194.36.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:d3:a5:4b:b3:df:55:4f:bb:70:04:ee:2a:df:bb:dd:e2:54:
15:6a:0a:34:ac:c8:77:a5:c6:43:41:58:2d:be:1c:ea:17:f6:
37:cf:bc:e8:a3:ef:21:63:b8:80:5b:0c:22:2a:c0:67:b1:19:
1c:44:3a:c1:ae:ab:6d:db:e9:83:9e:65:b4:62:c6:fd:1c:f8:
21:fb:3b:ca:7b:5c:b6:ab:1e:d5:6e:8a:3a:e0:f4:27:16:1a:
83:54:28:50:2e:40:2b:48:ec:e2:d2:eb:42:71:4a:7a:fd:c7:
de:4d:92:c4:f3:7e:09:ec:34:8f:f2:b2:c2:38:4f:0a:b2:ba:
27:ce:12:4d:b1:f4:00:8a:e1:f2:74:21:5f:fd:77:45:58:4e:
5a:32:e1:89:17:a5:06:0d:4b:2e:e3:8a:10:23:c7:3c:b6:bb:
95:18:e8:fc:42:9a:52:01:e6:4d:fc:13:41:a0:f9:e5:87:bc:
a7:36:61:d4:4a:1a:83:ca:de:90:34:69:99:bb:a5:11:c3:91:
19:8c:57:39:21:ca:4f:87:6e:f3:a7:6d:39:26:2d:48:fa:0e:
07:2d:c5:bb:70:37:18:e5:d3:40:39:da:39:db:7d:8e:a0:74:
f3:88:37:b3:20:26:9d:1e:d6:d5:cf:a9:54:87:a9:dc:66:3e:
fc:9c:09:74
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZQlIgF16Np+/BX7MgX8/KSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjUwMTAyMDM0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjNjNWM4NzI0YjExY2IzZDdkMjhjNjllOTllOTI2MjhiOWM1MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7WYhDr6W6cNezSZJRfXR1IKmAA
c0hFE6fAUYKK8Ui3Jr+mO7SQ0QYmBmp+5s2l0i192v9VoR15oue3fZPHZY63mdgi
+vnT/eY0WYQ9DrIa82ESwyNxbvzOdWFEOqwetJ3/VMDH405sJT+xoPYVW0L4JQdn
iKNtpr+Mrm08vAwhs+BO+EPJjtzsCDQ/aeFiZXyaFU9IMP6pxnC2S/zp9OyaHfL6
mK2JtY2yKr2Ujgd9TDIz+b3u89tCc9ycCOkV8ddl6q6drtriNyu9dzW6wSnBfg7O
CAQ/3rUrya3aB9ZTBHI8ZP7WDHHLZC+GVfu3h8y4VFE/27Z0JUUVJ+2dNwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFDI8XIcksRyz19KMaemekmKLnFDIMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvTWp4Y2h5U3hITFBYMG94cDZaNlNZb3VjVU1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCJP+8AwQC
LY9EAwQCU5bwAwQAV+/+AwQCX7XYAwQCZ+HIAwQAqxb8AwQBuS50AwQCuS7wAwQC
uUvQAwQAucm+AwQCuf1EAwQBwWzyAwQCwcn4AwQCwiRgMA0GCSqGSIb3DQEBCwUA
A4IBAQCL06VLs99VT7twBO4q37vd4lQVago0rMh3pcZDQVgtvhzqF/Y3z7zoo+8h
Y7iAWwwiKsBnsRkcRDrBrqtt2+mDnmW0Ysb9HPgh+zvKe1y2qx7Vboo64PQnFhqD
VChQLkArSOzi0utCcUp6/cfeTZLE834J7DSP8rLCOE8KsronzhJNsfQAiuHydCFf
/XdFWE5aMuGJF6UGDUsu44oQI8c8truVGOj8QppSAeZN/BNBoPnlh7ynNmHUShqD
yt6QNGmZu6URw5EZjFc5IcpPh27zp205Ji1I+g4HLcW7cDcY5dNAOdo5232OoHTz
iDezICadHtbVz6lUh6ncZj78nAl0
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:41:27 2025 by rpki-client