Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MBRhqE6-aD7iCWcMnH5h8UHWwao.roa
File: MBRhqE6-aD7iCWcMnH5h8UHWwao.roa (raw, json)
Hash identifier: kKLFOWBQkg10mLbq/o1kc1WLMlwid8+y8wNhwWSrsCQ=
Subject key identifier: 30:14:61:A8:4E:BE:68:3E:E2:09:67:0C:9C:7E:61:F1:41:D6:C1:AA
Certificate issuer: /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial: 019423D6FF3EC0188A2B80315F284B509C58
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MBRhqE6-aD7iCWcMnH5h8UHWwao.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39279
IP address blocks: 89.32.224.0/20 maxlen: 24
89.32.226.0/24 maxlen: 24
185.33.104.0/22 maxlen: 22
185.33.105.0/24 maxlen: 24
185.108.136.0/22 maxlen: 24
185.108.180.0/22 maxlen: 24
185.108.181.0/24 maxlen: 24
185.108.182.0/24 maxlen: 24
2a00:c5a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ff:3e:c0:18:8a:2b:80:31:5f:28:4b:50:9c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=301461a84ebe683ee209670c9c7e61f141d6c1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:d4:54:22:ef:c0:8d:14:12:c5:03:0c:f3:
4f:dd:e0:86:05:97:09:1f:23:0f:c6:1a:26:b9:53:
86:20:23:84:aa:a1:13:2f:eb:a7:36:39:40:e0:1c:
90:1c:a4:a8:b2:22:7c:cb:5a:f9:0f:7f:03:eb:89:
3c:9f:e2:2c:1b:bd:14:4f:e7:14:e8:d5:f7:a1:c0:
b4:6c:c6:ef:26:d6:cf:23:b5:9f:ca:45:fd:d0:90:
e4:53:89:dd:e4:3f:3e:3c:eb:2b:e9:36:89:83:c4:
f1:5a:75:97:c4:12:0d:ee:b6:b1:64:ee:9f:10:c1:
fd:e7:26:94:66:4f:5d:dc:cf:42:67:5b:77:6b:a6:
c4:19:6c:b4:f2:8e:60:e8:1d:3c:16:ba:9f:29:95:
8a:83:8b:5b:c9:48:3f:f1:ac:12:26:b0:0a:29:28:
91:26:82:32:e9:0f:31:c8:d3:8d:e3:a5:04:c9:fa:
cf:11:37:6a:16:06:1a:6b:ba:76:f2:8d:ff:88:01:
30:b1:bc:e5:bc:5e:f5:36:76:fd:bd:e8:49:61:58:
e3:5e:b3:c3:3e:0e:a5:6d:4f:6c:03:3a:8a:e5:69:
00:46:a8:be:4a:9c:20:1f:48:37:c8:78:b3:10:54:
0f:f7:41:04:2c:88:42:93:09:d0:31:d4:a6:3d:7f:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:14:61:A8:4E:BE:68:3E:E2:09:67:0C:9C:7E:61:F1:41:D6:C1:AA
X509v3 Authority Key Identifier:
keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MBRhqE6-aD7iCWcMnH5h8UHWwao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.224.0/20
185.33.104.0/22
185.108.136.0/22
185.108.180.0/22
IPv6:
2a00:c5a0::/32
Signature Algorithm: sha256WithRSAEncryption
63:c1:0f:5f:50:46:d9:56:00:9b:ed:39:49:91:4f:6a:5d:c8:
b5:56:a9:73:e3:cd:e8:ea:0c:65:7e:5f:a7:e2:33:fc:8d:9a:
f9:c4:dd:f5:ed:6e:4b:b4:4d:75:46:ca:f1:eb:9c:79:27:64:
c7:1c:e9:1f:72:09:99:c5:f8:6d:ee:22:9a:21:b0:34:e7:cc:
cc:91:95:92:89:51:9b:e8:4f:97:77:fe:f7:be:e7:58:17:da:
24:ce:df:b6:ec:ad:79:71:78:01:86:57:da:5f:28:35:30:5f:
ce:86:e1:37:fc:31:c0:34:16:aa:1c:f0:a1:1c:5b:c2:eb:6c:
97:a1:98:c7:bc:43:4e:d9:fe:d0:01:a5:85:0d:84:95:8c:ff:
77:01:d9:71:c9:d5:7c:20:ac:88:5c:73:d0:6c:1a:00:93:21:
63:67:12:84:aa:2a:a6:66:fa:aa:bc:24:da:36:6d:87:a6:3f:
65:a1:77:da:3a:83:ff:6d:67:70:1c:98:54:cf:a4:0e:eb:00:
19:dc:a8:28:9f:59:00:8e:54:22:f8:6f:5c:91:f5:e2:96:a7:
e5:93:07:02:89:a9:41:7d:a3:77:7e:af:e0:2f:94:8f:32:24:
20:eb:a1:a5:a5:ab:01:d7:9b:77:ae:9e:c9:a1:38:cb:12:78:
2c:7d:e2:21
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQj1v8+wBiKK4AxXyhLUJxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNDRlNjA5ZTM2MTkxM2UzYzNiMGE3OGQ3NDg2YWE0NWI1
NjI0MDEwHhcNMjUwMTAxMjE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDE0NjFhODRlYmU2ODNlZTIwOTY3MGM5YzdlNjFmMTQxZDZjMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2LUVCLvwI0UEsUDDPNP3eCGBZcJ
HyMPxhomuVOGICOEqqETL+unNjlA4ByQHKSosiJ8y1r5D38D64k8n+IsG70UT+cU
6NX3ocC0bMbvJtbPI7WfykX90JDkU4nd5D8+POsr6TaJg8TxWnWXxBIN7raxZO6f
EMH95yaUZk9d3M9CZ1t3a6bEGWy08o5g6B08FrqfKZWKg4tbyUg/8awSJrAKKSiR
JoIy6Q8xyNON46UEyfrPETdqFgYaa7p28o3/iAEwsbzlvF71Nnb9vehJYVjjXrPD
Pg6lbU9sAzqK5WkARqi+SpwgH0g3yHizEFQP90EELIhCkwnQMdSmPX82TQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFDAUYahOvmg+4glnDJx+YfFB1sGqMB8GA1UdIwQY
MBaAFDFE5gnjYZE+PDsKeNdIaqRbViQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYt
Nzc1ODg4YTg3MTk0LzEvTUJSaHFFNi1hRDdpQ1djTW5INWg4VUhXd2FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jYWEyYjYtODdlOC00ZTI0LWE0NDYtNzc1ODg4YTg3MTk0
LzEvTVVUbUNlTmhrVDQ4T3dwNDEwaHFwRnRXSkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEWSDgAwQC
uSFoAwQCuWyIAwQCuWy0MA0EAgACMAcDBQAqAMWgMA0GCSqGSIb3DQEBCwUAA4IB
AQBjwQ9fUEbZVgCb7TlJkU9qXci1Vqlz483o6gxlfl+n4jP8jZr5xN317W5LtE11
Rsrx65x5J2THHOkfcgmZxfht7iKaIbA058zMkZWSiVGb6E+Xd/73vudYF9okzt+2
7K15cXgBhlfaXyg1MF/OhuE3/DHANBaqHPChHFvC62yXoZjHvENO2f7QAaWFDYSV
jP93AdlxydV8IKyIXHPQbBoAkyFjZxKEqiqmZvqqvCTaNm2Hpj9loXfaOoP/bWdw
HJhUz6QO6wAZ3Kgon1kAjlQi+G9ckfXilqflkwcCialBfaN3fq/gL5SPMiQg66Gl
pasB15t3rp7JoTjLEngsfeIh
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:47 2025 by rpki-client