Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa
File: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (raw, json)
Hash identifier: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=
Subject key identifier: EE:69:2A:31:20:E2:F8:70:8B:6D:61:71:65:55:6A:A7:8A:03:65:5E
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 0194228D4334FB6B5D137B72D2631F636A08
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205044
IP address blocks: 185.231.236.0/22 maxlen: 22
2a0c:8f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:43:34:fb:6b:5d:13:7b:72:d2:63:1f:63:6a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee692a3120e2f8708b6d617165556aa78a03655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:98:99:68:dc:45:28:d9:15:3c:cd:94:50:
9f:f3:15:04:9c:10:3f:6a:b0:27:4a:57:8e:a9:1d:
7e:58:d1:4c:bf:31:a8:ee:96:db:0a:6d:a0:1c:3c:
bf:c5:f9:09:62:bf:bb:f9:c2:d4:ca:2b:fa:af:e8:
3d:d9:11:be:45:b7:dd:d6:16:56:c0:e3:3c:85:64:
46:78:00:e3:9f:96:20:aa:f1:7a:93:eb:26:0b:b5:
92:1d:09:e7:70:44:55:4f:40:56:1b:4e:3d:d7:f9:
82:49:7d:14:5b:e3:6b:9a:ba:c0:a4:53:27:83:da:
b7:30:93:71:28:0e:3c:eb:69:c6:12:ee:2b:38:8f:
3b:7b:0e:24:7b:a4:05:a2:77:46:dc:ef:fb:3e:22:
90:26:61:4c:93:b0:1e:a7:43:bc:5c:97:71:36:09:
60:08:e4:a2:af:c9:0a:d0:c2:50:87:ad:00:3e:d6:
65:d6:92:ce:19:ef:eb:4d:1e:db:dd:70:83:27:92:
e1:a8:7d:b6:1c:0d:56:4e:04:37:a9:9b:89:65:af:
25:da:01:d5:a3:8d:57:43:5a:85:cd:36:cd:4c:00:
d1:f0:f5:8a:82:2b:63:3d:ac:c7:ef:f2:27:ee:8e:
98:eb:08:f2:03:05:cd:c9:d5:16:95:e1:63:b5:1d:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:2A:31:20:E2:F8:70:8B:6D:61:71:65:55:6A:A7:8A:03:65:5E
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.236.0/22
IPv6:
2a0c:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
c9:69:1b:44:8b:4c:da:b9:f7:00:33:ee:6b:42:08:43:37:13:
db:be:3d:96:60:f8:28:0b:2b:3f:8e:21:8f:12:65:2a:6a:cf:
c1:4a:e4:bb:8d:ce:17:0d:f6:04:5c:8b:9e:0d:24:d0:b7:79:
75:99:29:d7:d9:df:83:bd:ef:d7:e2:b4:70:a9:cc:51:57:07:
e9:23:0a:54:ec:6d:c1:24:ec:85:da:de:5b:cf:fb:02:b8:38:
b0:2e:97:c5:ae:86:3c:71:24:1d:4c:c8:48:70:78:84:d5:05:
bc:52:47:eb:6c:94:fa:68:ba:b7:a9:06:84:81:5c:21:dc:5e:
9c:e9:93:9f:45:a5:a6:fb:08:a8:b4:cf:2c:7f:fe:b4:5a:54:
6f:4e:09:98:e5:02:dc:24:83:48:04:d4:f3:d9:1e:9b:68:f7:
8c:c4:aa:fa:d2:ff:68:2a:62:14:9f:57:29:49:21:df:d1:81:
78:e6:01:63:92:dd:4e:98:9c:c7:ce:bd:ba:b0:04:34:1e:db:
b4:01:1c:3c:5a:48:84:ab:b1:9a:72:ce:02:3b:3e:43:f1:68:
da:1e:79:44:c8:04:7b:f2:ac:3c:c6:b1:6f:7f:31:03:62:e8:
56:ca:10:2b:45:b5:4f:74:76:00:c3:5a:e0:ae:1d:b8:05:eb:
a5:c5:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:33:53 2025 by rpki-client