Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa
File: MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa (raw, json)
Hash identifier: 0qwECbWF3VMGBC2LqqWsoaxdyHvDL7eVoZEYdOt0I84=
Subject key identifier: 30:C5:13:A7:31:C9:0E:F3:FC:9B:DD:2B:90:AC:78:AD:14:F9:3E:FB
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 019425FDA419FA54540467E4969E7DDCE9AB
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205334
IP address blocks: 176.119.132.0/22 maxlen: 22
176.119.132.0/23 maxlen: 23
176.119.132.0/24 maxlen: 24
176.119.133.0/24 maxlen: 24
176.119.134.0/23 maxlen: 23
176.119.134.0/24 maxlen: 24
176.119.135.0/24 maxlen: 24
185.193.172.0/24 maxlen: 24
185.193.173.0/24 maxlen: 24
185.193.174.0/24 maxlen: 24
185.193.175.0/24 maxlen: 24
185.211.41.0/24 maxlen: 24
185.214.169.0/24 maxlen: 24
185.214.170.0/24 maxlen: 24
185.214.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:19:fa:54:54:04:67:e4:96:9e:7d:dc:e9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30c513a731c90ef3fc9bdd2b90ac78ad14f93efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:61:0d:96:93:cd:a5:df:5c:b6:54:ac:5c:
9a:16:b8:8d:20:5d:24:ac:80:13:58:ac:a3:89:04:
87:7a:26:64:18:bb:ca:46:f4:f3:0f:4d:10:6a:ea:
8f:0b:7e:b5:b7:77:75:7d:e5:8c:60:95:08:88:13:
02:6c:5e:aa:a9:dc:69:9c:d1:9c:9b:ae:20:b7:60:
97:8c:dd:05:75:2f:47:ee:ce:3c:38:54:68:1e:be:
f9:ea:c0:4b:8f:1a:26:5d:8c:e5:08:de:2d:d6:94:
6d:cf:5e:e3:fb:c0:e2:57:b2:2b:e5:29:09:99:df:
3e:fc:d6:df:9f:da:da:26:40:0a:1c:5f:8a:95:ae:
ca:55:e3:0d:e2:59:e0:d7:87:00:51:e1:c9:9c:4d:
02:3d:b8:1e:97:94:e6:0e:49:7f:59:2b:3e:db:3c:
df:62:73:42:ef:e9:58:ed:4c:77:b6:64:ad:c4:95:
cb:c5:0e:a8:4e:c5:58:42:0b:72:96:31:a1:48:7f:
6f:98:e8:86:a9:36:dd:d7:70:f2:26:57:54:69:d6:
72:01:21:17:5f:c7:ad:bf:57:16:de:20:41:e6:a0:
ac:1f:f0:45:d0:d1:6a:a3:73:0a:a4:0f:d1:8a:46:
3f:75:7c:86:15:9b:34:3b:b2:5f:37:26:2b:19:36:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:13:A7:31:C9:0E:F3:FC:9B:DD:2B:90:AC:78:AD:14:F9:3E:FB
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.132.0/22
185.193.172.0/22
185.211.41.0/24
185.214.169.0-185.214.171.255
Signature Algorithm: sha256WithRSAEncryption
ac:ab:02:cc:07:01:ff:2a:bb:78:e3:0a:a7:1c:9d:25:ed:36:
1f:ed:df:92:d2:d6:f5:11:ab:6e:2e:94:30:ea:56:a4:94:a4:
86:44:54:c1:8e:a4:24:b0:1d:59:8d:48:f4:cd:9b:ab:1e:75:
ef:c6:eb:91:0d:6b:74:5a:42:c9:a1:1c:4c:ec:2f:fd:11:b3:
f1:e4:5b:49:c0:9e:62:30:8f:42:50:f0:65:91:67:42:a4:49:
c3:10:2f:4e:94:0d:4e:d3:18:14:2e:2e:c9:01:21:49:00:2c:
d6:50:f6:eb:05:7e:07:37:ae:46:2d:fa:33:e4:15:68:2e:95:
0c:cc:6b:0f:a5:60:0e:03:fc:3a:7e:b1:d5:f5:8f:e6:ec:2a:
b6:7c:a3:fb:cf:30:95:cc:03:af:a2:ac:f7:58:89:4e:ce:08:
88:c4:da:0d:08:fd:dd:71:78:f8:7f:46:d7:7e:11:7d:ce:63:
bd:66:e8:be:ec:99:5e:ff:7d:0c:34:37:a4:b7:35:5a:a6:71:
92:f9:3d:db:00:07:e5:03:e5:f8:84:80:72:0f:c6:d6:c9:d2:
da:eb:d9:f8:ce:52:28:8a:33:fb:0b:18:45:37:50:20:4d:36:
b5:d5:e6:87:96:a3:cc:cd:2f:e8:33:3f:99:60:af:49:f0:94:
b6:c4:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:54 2025 by rpki-client