Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/MccPojCQ_5aiRX4Myokyw6v--7c.roa
File: MccPojCQ_5aiRX4Myokyw6v--7c.roa (raw, json)
Hash identifier: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=
Subject key identifier: 31:C7:0F:A2:30:90:FF:96:A2:45:7E:0C:CA:89:32:C3:AB:FE:FB:B7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019423694D1D7D4C2BD4C94DD0C6452D720A
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/MccPojCQ_5aiRX4Myokyw6v--7c.roa
Signing time: Wed 01 Jan 2025 19:48:11 +0000
ROA not before: Wed 01 Jan 2025 19:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50226
IP address blocks: 89.16.192.0/19 maxlen: 24
185.56.124.0/22 maxlen: 22
185.228.40.0/22 maxlen: 22
2a00:17e8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:4d:1d:7d:4c:2b:d4:c9:4d:d0:c6:45:2d:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Jan 1 19:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31c70fa23090ff96a2457e0cca8932c3abfefbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:f8:ca:82:93:d2:a7:19:36:c0:7b:eb:be:
9e:8b:8c:55:23:cb:73:4a:f5:ee:97:05:dd:a3:53:
4d:26:d7:52:4c:70:99:f8:d5:2b:10:0a:02:97:d7:
f6:3f:0f:b5:a4:76:38:3d:b8:18:7d:5b:7d:6b:51:
ba:8c:33:f8:00:00:cf:45:b2:e1:53:bc:fc:10:f9:
28:47:e6:0e:37:ff:b8:7f:03:67:b4:c2:bd:45:23:
02:44:d2:66:62:90:6a:d4:19:d7:16:00:b8:42:a6:
b9:43:3a:e3:f3:19:9f:c2:6a:94:2d:34:17:59:9d:
75:05:b2:bf:1a:f9:3c:40:fe:42:12:c7:0d:d1:a8:
6b:83:6b:a1:93:7a:de:c1:6b:74:13:c0:92:d6:4f:
4c:c2:71:4d:4d:bb:b1:99:82:85:88:e1:7d:ba:84:
0a:89:e7:64:7c:8c:b4:2a:a7:61:d0:4b:c0:57:87:
d3:ba:a9:88:28:b4:4b:93:dd:9f:b6:b0:00:77:b4:
ef:2d:6a:d8:d7:76:12:c5:6d:18:53:85:8a:53:f1:
57:b0:1e:c8:52:ab:2f:28:37:3e:e5:16:27:c7:d8:
17:21:ef:50:ba:bc:0f:64:5b:49:19:49:c9:d2:29:
5f:1a:6f:8e:b4:ab:3a:ca:4a:95:aa:e7:70:46:90:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C7:0F:A2:30:90:FF:96:A2:45:7E:0C:CA:89:32:C3:AB:FE:FB:B7
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/MccPojCQ_5aiRX4Myokyw6v--7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.16.192.0/19
185.56.124.0/22
185.228.40.0/22
IPv6:
2a00:17e8::/29
Signature Algorithm: sha256WithRSAEncryption
4f:9c:82:2a:30:4f:e6:07:1b:1c:70:8d:a2:8a:7a:aa:9d:d7:
83:14:b3:8c:d6:43:37:de:bd:95:de:d5:84:ac:22:d5:65:08:
2f:31:fd:e7:2e:2d:9e:21:ba:cd:ba:b0:a7:bb:f1:6a:75:e2:
37:0b:5e:7b:41:14:ec:ea:ba:95:c7:23:39:2f:96:10:0e:2d:
c9:49:b0:3f:89:10:19:12:3a:e1:66:94:5c:9e:c9:61:81:5b:
4e:fe:9e:9a:9e:30:51:b4:3b:2b:e2:33:f7:da:5c:5b:2f:1b:
cb:8a:ac:99:9d:b4:8e:d6:30:c4:05:d2:7e:2c:a9:65:7c:9a:
c9:37:24:85:b7:d1:da:32:81:75:43:bf:f9:cf:ad:70:9f:35:
19:ec:39:bc:7d:d1:04:c6:b8:cd:99:4e:4f:25:70:91:68:b6:
ba:19:e6:71:24:71:79:92:4f:76:51:d3:ef:15:c3:ad:2c:7c:
d1:f8:9f:29:49:be:c4:97:b9:6a:4a:0c:e3:2d:cd:14:cf:f4:
ec:d4:9b:70:68:a9:0a:cd:12:76:47:61:ee:6d:e8:27:ea:03:
f6:75:c0:8e:16:ff:f6:09:be:7e:51:71:1f:15:fa:58:e0:58:
6b:63:de:ee:31:52:48:ef:fa:9b:f9:0d:2d:66:bc:a9:96:30:
b0:9e:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:23 2025 by rpki-client