Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/MJgreWjojTG3TWAm0IOsT3PX7yE.roa
File: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (raw, json)
Hash identifier: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=
Subject key identifier: 30:98:2B:79:68:E8:8D:31:B7:4D:60:26:D0:83:AC:4F:73:D7:EF:21
Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Certificate serial: 01941F8C59995253D6F1041ED90AEF627515
Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/MJgreWjojTG3TWAm0IOsT3PX7yE.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49924
IP address blocks: 91.109.192.0/21 maxlen: 21
109.73.176.0/20 maxlen: 20
176.101.171.0/24 maxlen: 24
185.123.232.0/22 maxlen: 22
2a06:be40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:59:99:52:53:d6:f1:04:1e:d9:0a:ef:62:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30982b7968e88d31b74d6026d083ac4f73d7ef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:0d:32:21:2f:ef:9a:a4:8c:1f:bd:38:47:
e3:59:d9:21:4e:93:75:9d:a6:f6:50:0f:97:fd:41:
44:5a:2e:88:41:1f:2e:5d:c0:93:c4:d4:3e:b9:67:
00:41:56:7d:06:cf:d6:28:8c:08:17:ce:5c:0d:f9:
36:64:07:c6:e5:5c:12:11:55:ea:8f:27:57:76:53:
66:37:1d:ce:5e:7d:69:6f:13:ae:c1:d1:78:ba:ab:
9d:ee:ee:d6:37:f7:17:d7:86:fe:f8:d0:2e:60:d3:
1f:8a:b8:63:29:cc:3b:f0:2e:da:f7:23:32:b4:46:
1c:4e:61:e0:2a:dc:1c:46:70:a9:79:9f:25:93:db:
a0:52:c7:a6:5a:87:a1:dc:7f:d7:98:69:80:2c:4c:
a4:e4:ee:07:4d:a7:12:14:a3:fc:b5:8f:d5:eb:2d:
e5:c1:c0:63:32:9a:9b:ee:64:df:e3:01:48:de:a0:
58:7d:ee:e4:f2:13:3d:d3:20:47:de:b9:2b:14:4f:
1c:eb:fe:a8:0d:41:d1:0e:7e:34:7d:38:7e:36:8c:
3f:cf:da:5c:9c:97:d1:e2:37:7d:1a:76:65:e6:07:
2e:29:1c:cc:68:f3:50:55:64:c3:b2:71:a0:15:ee:
17:b5:3a:42:a1:98:d6:ae:95:94:01:10:d4:a9:83:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:2B:79:68:E8:8D:31:B7:4D:60:26:D0:83:AC:4F:73:D7:EF:21
X509v3 Authority Key Identifier:
keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/MJgreWjojTG3TWAm0IOsT3PX7yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.192.0/21
109.73.176.0/20
176.101.171.0/24
185.123.232.0/22
IPv6:
2a06:be40::/29
Signature Algorithm: sha256WithRSAEncryption
52:89:7a:9b:2e:c4:33:b5:97:ab:24:76:36:f7:c0:7f:85:b6:
10:99:39:d4:87:de:ea:13:df:64:96:c9:72:8f:51:e1:ab:6f:
27:66:a1:c3:ab:26:21:de:74:f9:88:93:41:f0:f4:a8:14:8f:
96:55:ad:83:b0:d8:50:d6:bf:25:87:82:30:ec:79:20:8a:56:
cc:5a:6c:e6:38:57:79:0d:fa:23:32:96:f0:11:12:7a:6b:63:
42:05:2e:27:a0:fd:4f:db:d4:43:22:5a:fe:de:ba:52:31:c8:
83:8d:c9:c9:9e:cc:00:4c:63:f9:c9:2f:17:50:0c:f6:a3:b8:
a2:49:46:08:1b:ff:13:4c:0d:16:f5:12:ab:b6:ad:22:af:75:
be:40:04:d0:b0:10:3b:0f:f4:f2:a3:bb:4d:3a:51:5d:99:03:
9f:b8:5f:40:cb:dc:c8:0c:1d:95:0c:a2:d0:97:37:4c:79:e4:
f1:dc:7f:76:0f:dc:27:e0:bb:59:b5:24:2f:e4:b6:1e:d7:ee:
43:5b:46:75:b8:e3:75:02:fc:aa:73:85:a7:3d:49:9f:16:a0:
a4:b9:7c:5b:e6:75:2a:de:9c:75:6c:6f:b6:2d:57:e4:29:c4:
38:f8:fc:a9:75:a1:10:21:e8:a7:3e:df:4e:e7:bb:23:e9:4f:
67:cc:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:27 2025 by rpki-client