Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/MgPLstdxM5a-WWX1xsgHmXdbcNE.roa
File: MgPLstdxM5a-WWX1xsgHmXdbcNE.roa (raw, json)
Hash identifier: C0aZGpcfjUHuzV39vC28DYgENZYc8xqjMvy1vcoOXr0=
Subject key identifier: 32:03:CB:B2:D7:71:33:96:BE:59:65:F5:C6:C8:07:99:77:5B:70:D1
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019423D6E828E3EB1915A56406848844EDD8
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/MgPLstdxM5a-WWX1xsgHmXdbcNE.roa
Signing time: Wed 01 Jan 2025 21:47:54 +0000
ROA not before: Wed 01 Jan 2025 21:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209671
IP address blocks: 46.174.140.0/22 maxlen: 24
185.104.208.0/22 maxlen: 24
2a06:3340::/32 maxlen: 32
2a09:de80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e8:28:e3:eb:19:15:a5:64:06:84:88:44:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Jan 1 21:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3203cbb2d7713396be5965f5c6c80799775b70d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:09:0e:07:57:f9:91:c7:a2:d9:98:84:76:bb:
a7:d9:f1:84:05:38:6a:47:cf:a2:85:59:3a:04:74:
23:f5:30:28:a2:e2:86:5e:b2:61:4f:77:2c:96:ff:
d7:46:36:00:44:ca:e4:a1:6e:a2:d4:08:c7:1c:90:
0e:05:b5:2a:df:c3:96:36:59:93:93:97:f3:46:2c:
d0:72:7d:bb:73:f0:c6:80:19:63:a0:04:6e:a0:d8:
85:25:0f:87:4a:95:36:cf:82:b1:e3:2b:65:f9:f4:
4e:c3:2d:d7:6a:4b:5d:c3:55:89:70:22:7e:74:77:
51:73:da:3c:c7:03:8c:9f:eb:cb:44:e3:3c:72:6e:
f4:c5:e4:50:b3:b4:d1:d6:5a:56:59:23:d6:b1:f6:
df:f5:28:32:fe:e6:32:b5:42:39:53:ab:0a:e1:89:
01:07:fe:b2:ad:1c:99:a5:f9:63:43:36:3b:20:07:
75:7e:c5:4e:91:37:38:dd:2b:df:e4:0a:0d:fb:82:
1f:ce:c2:a1:29:e2:2e:d0:88:cb:da:f5:b1:cb:e2:
01:11:c2:c0:d3:6c:75:22:cd:b1:dd:6e:c3:42:54:
2b:c8:9d:7d:e7:af:5b:ba:7e:2f:d6:d9:f2:c1:18:
83:75:1d:79:c9:b1:0b:d5:e9:46:de:ac:a6:26:e6:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:03:CB:B2:D7:71:33:96:BE:59:65:F5:C6:C8:07:99:77:5B:70:D1
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/MgPLstdxM5a-WWX1xsgHmXdbcNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.140.0/22
185.104.208.0/22
IPv6:
2a06:3340::/32
2a09:de80::/32
Signature Algorithm: sha256WithRSAEncryption
49:b5:23:c2:d3:d3:5d:16:93:04:74:9c:c4:2e:55:70:56:63:
0e:ee:97:96:6a:37:58:ca:91:97:58:14:49:db:04:46:42:a2:
05:05:ee:fd:0e:c7:d4:17:2d:49:4a:56:d6:10:b6:48:27:97:
ad:a0:a8:9b:6f:4b:6e:2e:84:dd:bb:16:a9:be:87:3b:8f:1b:
19:d6:0a:ee:bf:5f:a2:80:5d:69:53:4e:d2:54:d2:1b:0c:7d:
28:a4:8a:dd:46:dc:bd:3d:dc:ba:b1:52:5b:4b:33:f9:c4:82:
50:ea:bf:f1:31:c1:c4:1a:c0:ef:51:c3:d5:40:88:a4:49:c7:
c0:12:2a:3f:71:81:05:2c:6b:61:00:12:a9:db:f9:cc:f8:4a:
c3:d0:3c:83:cd:8e:f8:01:e6:39:f8:fa:7b:63:14:e6:06:3a:
87:a0:3f:29:89:fd:1b:fc:e5:e8:69:40:79:9b:26:5d:9c:9e:
ca:a9:d9:2d:20:68:77:3d:58:98:40:27:e5:ad:14:71:04:a7:
fd:c8:a7:a7:85:a2:a4:6a:f0:e4:cd:f2:65:15:18:75:ee:d9:
82:f1:8e:15:aa:f7:98:e7:3c:db:0e:29:78:60:20:8f:6c:df:
07:7f:40:7d:f3:b2:b2:f1:73:88:f6:d9:9c:06:21:25:3c:b4:
7a:db:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:56 2025 by rpki-client