Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa
File: MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa (raw, json)
Hash identifier: 5TORTeqJiwMyc0YYZ+uZpy4vEZ3dc7NK/jSlgDV+/8Q=
Subject key identifier: 32:65:8A:06:A7:E9:54:15:51:95:4A:99:F2:A7:25:3D:96:35:26:01
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019424B388DE162F9434D63DB83BCFCA398F
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56410
IP address blocks: 5.149.168.0/21 maxlen: 21
45.137.184.0/22 maxlen: 22
81.173.12.0/22 maxlen: 22
91.216.236.0/24 maxlen: 24
91.216.241.0/24 maxlen: 24
93.119.24.0/22 maxlen: 22
144.2.240.0/21 maxlen: 21
159.253.224.0/22 maxlen: 22
185.32.152.0/22 maxlen: 22
185.57.100.0/22 maxlen: 22
185.57.102.0/24 maxlen: 24
185.122.132.0/22 maxlen: 22
185.156.196.0/22 maxlen: 22
2a04:b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:88:de:16:2f:94:34:d6:3d:b8:3b:cf:ca:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32658a06a7e9541551954a99f2a7253d96352601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:a8:1a:bc:72:c4:1f:89:d2:41:40:d1:2f:
af:8e:d6:c6:8f:e0:b8:53:e7:c5:96:68:f0:0f:02:
26:32:b7:87:65:19:2b:8c:8e:c3:b6:ef:63:85:5c:
c4:e5:70:72:79:21:4e:5e:ca:8f:9a:9e:61:dd:f1:
be:c2:f2:b5:b4:57:c3:f8:91:dd:2b:20:85:a3:b2:
d6:d6:3c:8e:07:8d:08:cb:ac:6b:e1:79:75:78:04:
4a:f1:29:75:a7:7d:b8:21:10:4a:bd:a7:ed:15:85:
cc:f8:57:3b:0f:4a:c6:dd:f6:ab:b9:00:d5:86:94:
74:84:98:81:99:97:18:02:02:a3:b3:76:10:42:0c:
e7:1e:15:0b:e5:e5:7d:33:80:00:0d:67:68:3a:4b:
76:18:ac:15:33:8a:61:a5:94:13:69:30:a6:25:c2:
78:fd:67:6d:82:67:2a:b1:fc:75:6f:c9:3e:11:a2:
f1:c4:9d:d2:47:81:de:1a:6d:51:15:b7:14:72:90:
d7:cf:01:34:2a:d5:aa:a5:6d:9a:c4:67:0d:e6:4d:
1a:e2:0e:4d:6a:03:68:6d:38:83:42:28:34:9e:59:
03:d0:53:3c:ad:17:e7:ba:47:c4:56:0b:72:97:c0:
f4:38:ab:bc:ac:61:1d:51:c5:47:f7:78:b3:db:72:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:65:8A:06:A7:E9:54:15:51:95:4A:99:F2:A7:25:3D:96:35:26:01
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/MmWKBqfpVBVRlUqZ8qclPZY1JgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.168.0/21
45.137.184.0/22
81.173.12.0/22
91.216.236.0/24
91.216.241.0/24
93.119.24.0/22
144.2.240.0/21
159.253.224.0/22
185.32.152.0/22
185.57.100.0/22
185.122.132.0/22
185.156.196.0/22
IPv6:
2a04:b00::/29
Signature Algorithm: sha256WithRSAEncryption
ac:72:de:87:d3:1f:4b:6b:f4:71:24:dc:0e:d1:5e:35:04:a5:
ca:aa:de:4a:b2:2e:dd:d0:44:cc:17:88:41:17:f9:a6:e6:2f:
9d:27:d0:5a:19:ba:dd:b4:5d:19:b3:36:9e:70:94:4a:5f:c5:
df:40:07:fb:b3:72:6c:15:c7:4e:a7:88:bd:77:83:73:99:14:
79:0a:e0:45:29:c7:d0:04:00:c0:8d:f6:e9:b8:62:2a:4b:25:
8b:4e:b8:45:de:a4:3d:24:47:30:f0:88:b9:3b:b0:4f:95:39:
ff:ca:5e:56:29:fc:74:41:16:df:62:4d:3f:d4:97:a8:d3:26:
0b:3b:84:12:f9:02:b6:e4:83:ee:c6:2f:6a:2b:ac:04:05:db:
84:dc:47:eb:2b:c9:fd:13:15:ad:74:53:4e:d1:7c:79:f3:d0:
9c:ff:20:23:a5:91:58:f9:82:f1:9c:4f:03:a9:66:72:b6:0b:
45:1c:9c:4c:3f:7d:70:08:2a:60:eb:7a:94:d1:0d:15:9a:d4:
cc:66:59:f4:37:db:ee:19:b4:dd:2d:da:b0:be:98:8d:3c:cb:
65:57:d3:f8:91:4b:40:53:f4:ae:c0:6b:83:92:b1:0d:26:20:
6d:77:e6:ab:85:f2:dd:31:78:71:4e:e5:0d:a4:14:d3:42:94:
b6:73:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:56 2025 by rpki-client