Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/MUzH6xsh7lBrmnntCvAf96p9dnc.roa
File: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (raw, json)
Hash identifier: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=
Subject key identifier: 31:4C:C7:EB:1B:21:EE:50:6B:9A:79:ED:0A:F0:1F:F7:AA:7D:76:77
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 019421443030B53F40259668BB8CF29B7403
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/MUzH6xsh7lBrmnntCvAf96p9dnc.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212047
IP address blocks: 45.157.0.0/24 maxlen: 24
212.2.240.0/21 maxlen: 21
2a10:c880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:30:30:b5:3f:40:25:96:68:bb:8c:f2:9b:74:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=314cc7eb1b21ee506b9a79ed0af01ff7aa7d7677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:0e:27:7d:ac:3e:b6:b8:fc:d7:c3:5c:cb:
57:54:3c:1b:7d:07:d1:a7:86:de:40:d3:5f:9b:bf:
d1:28:19:46:e6:a3:78:17:47:92:53:83:8e:f5:7d:
6a:6a:36:1d:4e:c3:18:2a:c9:26:7d:d8:2e:7c:80:
99:bd:fd:69:4d:d6:4a:6f:2d:02:61:f9:cb:f5:e9:
1c:c1:05:bc:88:17:03:3c:12:e9:56:25:70:68:3b:
c7:80:9d:11:04:80:f8:ad:76:21:26:48:8e:e5:ad:
c2:a4:85:03:e8:87:b0:bd:07:9e:a1:e0:1e:63:ca:
b9:01:e8:fe:a9:f3:16:70:24:d3:4e:0c:ef:13:f4:
6f:c9:05:11:e2:a5:2a:e4:4f:3c:75:97:cd:ea:3d:
19:aa:06:b4:91:fc:11:9b:df:9e:43:6c:df:6a:b0:
4b:32:c2:f7:fb:c1:c2:f7:de:55:a0:46:19:54:42:
f5:c2:cc:8b:d4:b0:e3:7c:89:34:0e:82:c2:80:0f:
eb:18:35:9d:bc:9a:49:53:75:19:c6:81:cd:07:4d:
f9:90:e3:d9:ac:09:ee:3d:8a:4e:83:26:d6:5d:ee:
46:69:34:b6:a6:03:1d:0a:36:ef:df:a1:ea:89:03:
2b:9b:11:1c:73:77:ea:2d:67:fc:1e:11:69:79:3a:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:C7:EB:1B:21:EE:50:6B:9A:79:ED:0A:F0:1F:F7:AA:7D:76:77
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/MUzH6xsh7lBrmnntCvAf96p9dnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.0.0/24
212.2.240.0/21
IPv6:
2a10:c880::/32
Signature Algorithm: sha256WithRSAEncryption
20:7b:9e:df:16:f6:39:11:47:3b:ed:06:95:a0:17:5d:f4:d6:
7e:73:74:09:97:bd:ca:ef:eb:40:41:52:d0:06:6b:9a:20:fa:
be:52:71:f3:68:d1:97:19:ac:d0:51:b3:1e:0e:9d:1b:95:b2:
86:39:d7:df:9e:39:65:f3:c3:17:4a:fb:ba:48:e1:73:f8:b1:
61:f9:ce:82:e7:53:d2:aa:57:6b:f6:d1:33:5b:64:42:00:c9:
25:e3:11:10:fc:c2:2f:e6:57:9a:39:95:e8:db:08:64:ca:15:
6b:ac:8e:85:27:87:af:e6:0c:6d:0e:45:93:4d:a7:14:59:a8:
fd:0c:2c:26:b4:e9:a4:1c:84:9f:1f:80:a9:6a:ce:ab:4f:5d:
79:3f:10:cb:06:fa:38:c5:0a:95:0d:7e:e6:01:20:e6:cd:e1:
85:f5:93:b1:35:40:a9:0c:09:eb:3d:cf:11:a4:55:d2:6a:ac:
4b:e0:fc:d3:72:7c:1f:2b:19:61:5c:60:8a:2f:c2:cc:74:bd:
ab:f6:e5:09:bd:3e:ff:c7:8c:a1:c4:b4:6e:64:73:9e:f8:b4:
17:0d:95:2b:3c:6c:60:6b:35:84:48:13:e3:61:16:94:ce:0f:
66:bc:93:51:ef:2c:9c:4f:92:57:6e:14:b9:5c:d2:85:49:93:
ef:98:59:07
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQhRDAwtT9AJZZou4zym3QDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh
YjRmMDAwHhcNMjUwMTAxMDk0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTRjYzdlYjFiMjFlZTUwNmI5YTc5ZWQwYWYwMWZmN2FhN2Q3Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlkOJ32sPra4/NfDXMtXVDwbfQfR
p4beQNNfm7/RKBlG5qN4F0eSU4OO9X1qajYdTsMYKskmfdgufICZvf1pTdZKby0C
YfnL9ekcwQW8iBcDPBLpViVwaDvHgJ0RBID4rXYhJkiO5a3CpIUD6IewvQeeoeAe
Y8q5Aej+qfMWcCTTTgzvE/RvyQUR4qUq5E88dZfN6j0Zqga0kfwRm9+eQ2zfarBL
MsL3+8HC995VoEYZVEL1wsyL1LDjfIk0DoLCgA/rGDWdvJpJU3UZxoHNB035kOPZ
rAnuPYpOgybWXe5GaTS2pgMdCjbv36HqiQMrmxEcc3fqLWf8HhFpeTqvjQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDFMx+sbIe5Qa5p57QrwH/eqfXZ3MB8GA1UdIwQY
MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct
MDM3NWE5YzMyYjAwLzEvTVV6SDZ4c2g3bEJybW5udEN2QWY5NnA5ZG5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw
LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALZ0AAwQD
1ALwMA0EAgACMAcDBQAqEMiAMA0GCSqGSIb3DQEBCwUAA4IBAQAge57fFvY5EUc7
7QaVoBdd9NZ+c3QJl73K7+tAQVLQBmuaIPq+UnHzaNGXGazQUbMeDp0blbKGOdff
njll88MXSvu6SOFz+LFh+c6C51PSqldr9tEzW2RCAMkl4xEQ/MIv5leaOZXo2whk
yhVrrI6FJ4ev5gxtDkWTTacUWaj9DCwmtOmkHISfH4Cpas6rT115PxDLBvo4xQqV
DX7mASDmzeGF9ZOxNUCpDAnrPc8RpFXSaqxL4PzTcnwfKxlhXGCKL8LMdL2r9uUJ
vT7/x4yhxLRuZHOe+LQXDZUrPGxgazWESBPjYRaUzg9mvJNR7yycT5JXbhS5XNKF
SZPvmFkH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:55 2025 by rpki-client on console.sobornost.net