Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/MZhsqynH__I-cRM9XpDVtBKh3gU.roa
File: MZhsqynH__I-cRM9XpDVtBKh3gU.roa (raw, json)
Hash identifier: wdXsbMUTuJeBpI9QFXLSolE9+QHF/J8af9RLJ5uEPjM=
Subject key identifier: 31:98:6C:AB:29:C7:FF:F2:3E:71:13:3D:5E:90:D5:B4:12:A1:DE:05
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 01889011495682559C522CBB5710FCD37583
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/MZhsqynH__I-cRM9XpDVtBKh3gU.roa
Signing time: Tue 06 Jun 2023 09:37:11 +0000
ROA not before: Tue 06 Jun 2023 09:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48950
IP address blocks: 104.160.2.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
5.157.21.0/24 maxlen: 24
158.222.3.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:11:49:56:82:55:9c:52:2c:bb:57:10:fc:d3:75:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jun 6 09:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31986cab29c7fff23e71133d5e90d5b412a1de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:9c:61:e6:9d:bf:c2:83:2d:e4:03:48:df:
a9:53:4e:b1:b2:1b:24:4e:30:4c:f8:30:14:9e:b6:
4c:c6:57:61:0f:91:a3:4f:4f:13:53:2f:a9:ab:5d:
c5:34:80:b7:94:a3:a8:f4:ce:3a:47:38:88:4f:5d:
09:18:24:4c:bf:f8:98:ab:e0:ba:84:23:fa:f0:fa:
66:83:9f:79:cb:29:6f:10:7c:7d:0d:79:04:ff:f4:
e1:f2:d8:50:7d:4d:56:77:c7:a6:71:fd:e6:65:59:
28:0f:fb:a9:f7:80:27:42:d0:aa:a3:d7:1a:92:7e:
83:39:29:b9:05:cb:64:9f:bd:d2:84:1f:d9:66:a2:
88:c9:79:bc:34:05:f9:3c:b4:9c:c9:b7:66:fc:79:
8c:c5:79:6b:e7:b1:aa:12:f5:7b:ae:9b:a3:3c:c6:
a7:8f:f5:4c:1c:b5:15:55:81:33:7f:d8:ba:1f:e4:
3d:98:d2:a4:6c:55:c1:36:f9:3b:15:84:9b:85:13:
a3:e6:fe:f3:8c:4d:62:30:ab:fd:f0:f2:d9:d8:c2:
ea:42:3c:8d:be:18:94:cd:0c:f3:6a:4f:95:75:5f:
42:ed:65:49:eb:dc:d0:74:d2:51:ac:64:47:cc:e2:
18:ed:16:3d:1d:58:ba:04:1f:b1:72:e6:18:4c:68:
69:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:98:6C:AB:29:C7:FF:F2:3E:71:13:3D:5E:90:D5:B4:12:A1:DE:05
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/MZhsqynH__I-cRM9XpDVtBKh3gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.21.0/24
104.160.2.0/24
104.160.4.0-104.160.6.255
104.160.10.0/24
158.222.3.0/24
158.222.5.0/24
158.222.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e2:21:44:d8:8a:67:94:43:e8:d6:cb:37:ad:7e:5c:7f:76:
5e:55:c4:0a:ef:08:40:a6:86:7c:f0:92:ba:54:b8:e3:3a:12:
f5:2e:1e:53:00:38:b3:d9:06:2a:d9:90:f2:de:e5:d6:e7:64:
60:79:5d:cd:a0:02:67:f8:dd:76:1f:03:2a:73:86:c7:fb:aa:
c5:17:f4:1f:2a:ad:1f:0e:27:39:1a:e3:85:b4:97:13:f9:00:
74:49:9f:d3:f1:e9:8f:38:05:59:b7:32:7f:13:01:22:1d:21:
cc:d8:bc:b9:f3:2c:f1:b7:6f:8e:ce:c7:cb:0b:21:d9:83:be:
00:2b:51:c7:13:32:c0:04:d4:ec:8d:44:7b:61:48:d9:c0:b3:
19:53:dc:f3:3f:d6:60:40:ab:8e:88:d2:34:28:05:51:60:8b:
2f:4f:ba:d2:50:a1:3c:8a:5b:cb:10:c9:9f:e1:99:8e:9d:ee:
1f:2c:64:9b:38:f6:23:1d:57:a0:04:3b:8a:8e:d6:09:6f:a8:
37:0b:80:c1:d4:db:e0:09:37:56:9c:60:8d:ea:6b:cd:66:12:
57:90:07:96:18:65:89:46:bf:23:8e:ac:e1:2e:22:ec:82:46:
4e:fe:1a:a8:7c:24:0a:22:57:cd:9a:33:d0:a1:b5:30:96:31:
36:aa:d7:e3
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYiQEUlWglWcUiy7VxD803WDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM3NmRmNWY5ZWY0ODdjODJiMzFhODc1YzZhNDk2ZDc5
Y2EwZDcwHhcNMjMwNjA2MDkzNzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTk4NmNhYjI5YzdmZmYyM2U3MTEzM2Q1ZTkwZDViNDEyYTFkZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNucYeadv8KDLeQDSN+pU06xshsk
TjBM+DAUnrZMxldhD5GjT08TUy+pq13FNIC3lKOo9M46RziIT10JGCRMv/iYq+C6
hCP68Ppmg595yylvEHx9DXkE//Th8thQfU1Wd8emcf3mZVkoD/up94AnQtCqo9ca
kn6DOSm5Bctkn73ShB/ZZqKIyXm8NAX5PLScybdm/HmMxXlr57GqEvV7rpujPMan
j/VMHLUVVYEzf9i6H+Q9mNKkbFXBNvk7FYSbhROj5v7zjE1iMKv98PLZ2MLqQjyN
vhiUzQzzak+VdV9C7WVJ69zQdNJRrGRHzOIY7RY9HVi6BB+xcuYYTGhp3wIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFDGYbKspx//yPnETPV6Q1bQSod4FMB8GA1UdIwQY
MBaAFIDzdt9fnvSHyCsxqHXGpJbXnKDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMt
YTRiYzI4MTY2NDNhLzEvTVpoc3F5bkhfX0ktY1JNOVhwRFZ0QktoM2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMtYTRiYzI4MTY2NDNh
LzEvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQABZ0VAwQA
aKACMAwDBAJooAQDBABooAYDBABooAoDBACe3gMDBACe3gUDBACe3gcwDQYJKoZI
hvcNAQELBQADggEBAEziIUTYimeUQ+jWyzetflx/dl5VxArvCECmhnzwkrpUuOM6
EvUuHlMAOLPZBirZkPLe5dbnZGB5Xc2gAmf43XYfAypzhsf7qsUX9B8qrR8OJzka
44W0lxP5AHRJn9Px6Y84BVm3Mn8TASIdIczYvLnzLPG3b47Ox8sLIdmDvgArUccT
MsAE1OyNRHthSNnAsxlT3PM/1mBAq46I0jQoBVFgiy9PutJQoTyKW8sQyZ/hmY6d
7h8sZJs49iMdV6AEO4qO1glvqDcLgMHU2+AJN1acYI3qa81mEleQB5YYZYlGvyOO
rOEuIuyCRk7+Gqh8JAoiV82aM9ChtTCWMTaq1+M=
-----END CERTIFICATE-----
Generated at Wed Apr 30 09:34:19 2025 by rpki-client