Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/m-mgeij2s-izZmoG2EJOGobZRbs.roa
File: m-mgeij2s-izZmoG2EJOGobZRbs.roa (raw, json)
Hash identifier: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=
Subject key identifier: 9B:E9:A0:7A:28:F6:B3:E8:B3:66:6A:06:D8:42:4E:1A:86:D9:45:BB
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 01942143B9DBF24DEBCA729CD7C9A0F14389
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/m-mgeij2s-izZmoG2EJOGobZRbs.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8447
IP address blocks: 91.230.142.0/24 maxlen: 24
2001:67c:238c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b9:db:f2:4d:eb:ca:72:9c:d7:c9:a0:f1:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be9a07a28f6b3e8b3666a06d8424e1a86d945bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:1a:89:ee:5a:e5:b3:08:1e:61:9d:3b:2f:
17:36:22:b0:81:71:3c:f8:76:ca:17:40:07:3d:60:
77:5d:d0:52:c9:5c:c4:7c:d3:c6:0e:60:62:c1:76:
eb:32:34:a2:ff:b7:c6:68:05:1c:30:f8:dc:18:cf:
a6:8e:0c:9a:52:c9:1e:e9:aa:c5:98:e0:f0:68:15:
13:5e:f2:81:1f:c9:f8:68:93:9e:52:f1:f2:72:9b:
6a:f9:2a:bd:ae:a9:71:14:8c:7f:09:98:75:bc:6e:
10:4b:08:8f:b9:89:6d:29:90:9f:61:b6:3c:a4:b2:
d3:96:40:f3:30:40:40:1e:25:8e:8d:1b:4b:90:c3:
d9:90:1b:f6:7c:ba:0b:84:55:1c:93:ae:c1:18:fe:
c4:85:cd:c3:74:12:10:57:1e:8a:55:6b:a0:af:f8:
55:3c:6d:6e:3d:11:c3:44:62:60:dd:ca:c6:06:0f:
78:1c:e9:0e:a9:b7:62:9f:cb:5e:2b:e9:49:53:45:
ff:e3:d6:68:33:ad:b7:f2:0c:3e:06:5c:c1:a3:51:
c6:10:3c:67:7e:aa:1f:df:4b:4d:20:87:b7:01:2d:
26:fa:56:42:db:be:a3:13:40:ad:0a:ae:22:7a:68:
06:4b:58:87:4c:31:d3:6d:70:69:0c:4f:86:b7:f6:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:A0:7A:28:F6:B3:E8:B3:66:6A:06:D8:42:4E:1A:86:D9:45:BB
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/m-mgeij2s-izZmoG2EJOGobZRbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.142.0/24
IPv6:
2001:67c:238c::/48
Signature Algorithm: sha256WithRSAEncryption
6b:1b:5e:24:4a:f9:96:30:c3:8a:dd:ee:5a:54:72:59:6a:a4:
93:cc:62:6a:46:80:10:6a:06:cf:07:9e:c4:2b:26:e3:7e:8a:
67:14:9a:0c:be:15:7b:d7:9c:c3:02:10:7d:a1:74:41:31:9c:
01:c7:82:82:26:5e:9a:7f:38:5b:04:b5:0c:14:4d:64:9f:2a:
0e:5a:f4:95:6b:23:b3:36:95:8b:32:0f:29:24:b8:67:6f:2c:
41:7f:a7:88:0a:ae:cd:be:70:a9:9a:f7:ff:14:c4:1f:7d:f0:
53:19:3b:c3:d6:c9:95:95:e4:4c:01:ec:8e:22:54:1a:64:9f:
88:65:3c:49:b8:ac:e9:0f:e9:60:d8:88:f5:f5:07:05:07:b5:
92:0b:c6:ab:9c:f2:59:7c:69:f6:00:4c:f4:71:ac:f8:93:21:
df:96:9e:8a:7e:5b:3b:8a:19:a9:c1:0d:77:39:e4:e6:f6:0e:
2a:e5:8d:3f:19:f7:0e:91:04:12:9c:a3:09:3d:22:f1:c9:5c:
e1:c6:d4:10:ca:44:84:23:29:12:74:32:31:08:7d:0c:52:a3:
3d:a1:36:a4:a8:3a:02:5d:b0:8f:9d:1e:e8:0d:e8:7a:ef:19:
4c:54:9d:4a:78:1b:4b:04:ee:36:f4:08:fa:74:3e:9d:f7:97:
38:29:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:05:30 2025 by rpki-client