Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/MJHrGXz_475urzG9mrm81ANmUyQ.roa
File: MJHrGXz_475urzG9mrm81ANmUyQ.roa (raw, json)
Hash identifier: OAcEQnshFGtQyQScOje41Wnk6vIea2Tv4BCuwkyUU00=
Subject key identifier: 30:91:EB:19:7C:FF:E3:BE:6E:AF:31:BD:9A:B9:BC:D4:03:66:53:24
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0188DA0F6F440DCF3F9A2A3848DE162984E6
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/MJHrGXz_475urzG9mrm81ANmUyQ.roa
Signing time: Tue 20 Jun 2023 18:27:04 +0000
ROA not before: Tue 20 Jun 2023 18:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 188.240.83.0/24 maxlen: 24
84.247.20.0/24 maxlen: 24
89.47.249.0/24 maxlen: 24
62.112.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:da:0f:6f:44:0d:cf:3f:9a:2a:38:48:de:16:29:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 20 18:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3091eb197cffe3be6eaf31bd9ab9bcd403665324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:1f:5f:a4:21:83:82:46:f3:bc:2b:a0:ac:
73:c6:c9:ed:62:a2:de:07:1d:fe:27:ac:d2:f9:2a:
21:d4:4c:fa:13:05:25:23:5e:dc:6f:1f:49:00:32:
92:92:84:6c:3e:e6:16:89:6e:e5:b8:be:8b:76:8a:
fe:b6:b3:f3:b5:3e:12:f6:d3:3c:01:57:a0:61:ce:
3b:59:9b:67:db:0e:16:f6:dc:25:6a:61:36:21:78:
bb:d5:cb:9b:23:c5:a8:3f:80:12:d6:09:12:08:24:
da:ed:a6:99:b4:ed:02:82:98:37:e6:5d:b0:e6:34:
0f:4e:c8:90:e0:f5:eb:8e:9b:f9:f2:73:1c:a0:da:
7b:3f:2c:41:3f:0e:3b:ce:bc:f4:4d:a1:67:a5:a7:
00:f6:52:fc:81:c2:38:ec:9a:0f:33:bc:df:ec:27:
ec:75:31:ff:cf:06:29:d5:c8:bd:6d:0c:06:8f:ba:
42:3b:91:a2:ee:ef:f5:ca:04:51:6e:01:f2:07:da:
70:37:93:49:a1:07:14:7c:94:81:fd:32:21:c7:3c:
0f:c8:37:4f:24:61:53:e1:1b:66:aa:d7:98:34:ef:
b3:c1:55:73:42:a7:86:a8:43:0b:7b:e3:a6:43:12:
13:e0:cf:59:fa:48:79:e8:82:a2:1f:a9:78:76:79:
5d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:EB:19:7C:FF:E3:BE:6E:AF:31:BD:9A:B9:BC:D4:03:66:53:24
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/MJHrGXz_475urzG9mrm81ANmUyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.30.0/24
84.247.20.0/24
89.47.249.0/24
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
32:04:d5:3c:1a:41:f4:5e:a7:f9:19:73:57:19:ef:3e:5c:5f:
e8:b1:eb:cd:1b:a9:52:11:34:86:c6:aa:14:71:7e:de:89:94:
c1:03:ac:ff:64:7e:27:07:08:33:d8:c8:ae:e2:bb:36:54:07:
e0:39:d6:82:cc:58:75:33:11:22:a6:74:db:6f:4d:16:b4:93:
d2:0d:46:2d:d3:63:f0:2c:33:b7:a9:17:5b:67:5e:17:15:6d:
f9:9a:7a:df:f3:7a:a9:73:d0:65:39:c1:59:82:aa:69:41:59:
f0:6e:d3:09:68:77:3a:f1:0b:21:db:27:8f:65:66:cb:39:c7:
38:97:2a:d9:c2:ba:73:45:65:b2:2b:ae:eb:5e:c0:f7:28:9d:
eb:d9:96:90:c2:9c:d7:03:61:f5:09:19:f6:11:bc:2d:8a:6e:
7e:93:75:97:93:59:2d:e2:be:ff:9b:87:ba:19:5b:d9:af:39:
c6:c1:1c:ec:d0:25:53:61:5e:3b:e9:b6:20:29:b8:c8:de:73:
5c:3e:3c:d5:b2:81:3b:d5:df:a0:ea:8a:65:9f:9d:ea:b9:74:
6d:35:03:34:19:cb:69:1c:d5:f3:ad:c6:58:f4:89:a6:02:bd:
aa:60:75:af:09:76:34:2d:e4:45:bc:f6:22:48:aa:bf:43:74:
04:2d:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:06 2025 by rpki-client