Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/MGRHgyHDY72aznlW-t7cwjM_240.roa
File: MGRHgyHDY72aznlW-t7cwjM_240.roa (raw, json)
Hash identifier: z3dVxtPbNQjRzhZVqHNxBYYRYl50/oceD5/vwHPqRbM=
Subject key identifier: 30:64:47:83:21:C3:63:BD:9A:CE:79:56:FA:DE:DC:C2:33:3F:DB:8D
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0194274839BFD9AD7297DAD5E69A01FF33B4
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/MGRHgyHDY72aznlW-t7cwjM_240.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210928
IP address blocks: 185.161.64.0/24 maxlen: 24
185.161.65.0/24 maxlen: 24
185.161.66.0/24 maxlen: 24
217.168.240.0/24 maxlen: 24
217.168.241.0/24 maxlen: 24
217.168.242.0/24 maxlen: 24
217.168.243.0/24 maxlen: 24
217.168.244.0/24 maxlen: 24
217.168.245.0/24 maxlen: 24
217.168.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:39:bf:d9:ad:72:97:da:d5:e6:9a:01:ff:33:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3064478321c363bd9ace7956fadedcc2333fdb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:1e:5a:6e:10:10:70:19:e8:dd:6c:00:25:
e1:ab:32:3e:85:b7:d8:b4:47:a0:7b:e7:d2:f7:46:
c9:a6:00:c5:8d:21:8f:95:0c:30:4a:f0:06:c2:e7:
ca:13:e1:f7:36:48:cb:39:66:b6:e6:c3:ad:52:0c:
81:0b:45:68:8e:c4:2c:7d:d3:6b:61:f0:61:26:6c:
3f:d6:cf:dd:d6:a5:8b:33:76:4d:f2:ae:58:29:52:
0c:27:c7:ff:78:1b:94:43:3d:ce:62:9c:59:6f:4b:
31:c3:ae:87:df:19:f2:0e:04:76:46:bc:f8:26:5e:
79:1d:c4:7e:f1:89:36:20:e1:a3:0f:5c:f3:49:2e:
52:63:92:52:72:26:94:3a:81:5e:9a:b5:b8:ac:98:
cb:df:ee:7a:e7:79:16:42:4e:9b:b2:b4:f4:8b:f3:
c8:d3:1d:1d:ae:cb:3d:86:11:4a:db:ff:5b:9f:02:
29:6e:1c:81:ec:0e:7e:82:8b:7d:26:39:ff:b9:72:
98:be:b6:f6:d7:31:f2:d4:f1:60:1c:1a:23:10:10:
a5:68:3c:a0:01:f4:00:66:a1:01:9a:d0:96:76:07:
3d:6a:01:62:78:06:11:8d:5d:58:de:80:3c:7d:63:
10:e9:91:e7:09:aa:d9:81:09:b0:28:34:52:75:ef:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:64:47:83:21:C3:63:BD:9A:CE:79:56:FA:DE:DC:C2:33:3F:DB:8D
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/MGRHgyHDY72aznlW-t7cwjM_240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.64.0-185.161.66.255
217.168.240.0-217.168.245.255
217.168.247.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e5:b1:71:ed:79:ba:27:e4:bb:c2:91:85:84:8f:07:88:7f:
5c:45:cb:ba:ae:71:59:88:78:81:cd:9b:94:7b:13:6c:ec:9d:
12:02:5a:ab:2a:c1:af:fc:06:91:cd:ac:25:96:a0:fe:0b:f8:
be:6c:d3:bd:84:a0:97:c1:37:c1:0f:40:6f:b9:e6:51:e9:c4:
59:59:5d:cf:fb:94:ed:30:09:28:d7:0b:fa:e4:c5:e5:3c:14:
00:09:a3:bd:ae:06:59:d9:f4:af:bf:49:9b:67:b8:53:a2:9e:
4e:e2:9a:be:ea:f7:e6:9c:a9:13:23:ac:58:07:80:f2:be:5a:
66:b3:44:6e:1c:e6:12:89:e4:43:74:30:13:1b:88:cb:a7:0b:
f5:86:8c:e9:5f:cd:6c:c7:73:15:70:07:35:e2:62:5b:ef:1c:
11:2e:fd:ce:08:49:bb:35:32:a1:ab:11:cd:c5:e7:94:d2:a1:
26:b2:1b:2e:6f:3b:88:82:63:8a:0d:53:bf:ed:47:e2:1d:61:
d1:01:b4:66:5c:4c:8a:57:be:ff:64:00:51:a5:5f:cf:ca:b8:
0d:05:a4:f0:ab:09:b2:c4:e0:53:62:8c:90:de:b0:19:ec:b4:
60:af:39:f1:57:86:ba:d9:36:68:a7:b9:8f:4f:fe:14:a7:0c:
d7:24:73:54
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQnSDm/2a1yl9rV5poB/zO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi
OGUwNzAwHhcNMjUwMTAyMTM1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDY0NDc4MzIxYzM2M2JkOWFjZTc5NTZmYWRlZGNjMjMzM2ZkYjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK8eWm4QEHAZ6N1sACXhqzI+hbfY
tEege+fS90bJpgDFjSGPlQwwSvAGwufKE+H3NkjLOWa25sOtUgyBC0VojsQsfdNr
YfBhJmw/1s/d1qWLM3ZN8q5YKVIMJ8f/eBuUQz3OYpxZb0sxw66H3xnyDgR2Rrz4
Jl55HcR+8Yk2IOGjD1zzSS5SY5JSciaUOoFemrW4rJjL3+5653kWQk6bsrT0i/PI
0x0drss9hhFK2/9bnwIpbhyB7A5+got9Jjn/uXKYvrb21zHy1PFgHBojEBClaDyg
AfQAZqEBmtCWdgc9agFieAYRjV1Y3oA8fWMQ6ZHnCarZgQmwKDRSde+YuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDBkR4Mhw2O9ms55Vvre3MIzP9uNMB8GA1UdIwQY
MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt
MzZmODJiZDM3OWJkLzEvTUdSSGd5SERZNzJhem5sVy10N2N3ak1fMjQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk
LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAa5oUAD
BAC5oUIwDAMEBNmo8AMEAdmo9AMEANmo9zANBgkqhkiG9w0BAQsFAAOCAQEAUeWx
ce15uifku8KRhYSPB4h/XEXLuq5xWYh4gc2blHsTbOydEgJaqyrBr/wGkc2sJZag
/gv4vmzTvYSgl8E3wQ9Ab7nmUenEWVldz/uU7TAJKNcL+uTF5TwUAAmjva4GWdn0
r79Jm2e4U6KeTuKavur35pypEyOsWAeA8r5aZrNEbhzmEonkQ3QwExuIy6cL9YaM
6V/NbMdzFXAHNeJiW+8cES79zghJuzUyoasRzcXnlNKhJrIbLm87iIJjig1Tv+1H
4h1h0QG0ZlxMile+/2QAUaVfz8q4DQWk8KsJssTgU2KMkN6wGey0YK858VeGutk2
aKe5j0/+FKcM1yRzVA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:53 2025 by rpki-client