Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa
File: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (raw, json)
Hash identifier: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=
Subject key identifier: 99:45:42:9B:19:72:44:73:AD:42:0A:8E:D2:B5:34:55:F7:7F:27:13
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019424448C090D0C08CBADC6212CB584114F
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207767
IP address blocks: 176.119.209.0/24 maxlen: 24
185.90.44.0/22 maxlen: 24
2a0f:ffc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8c:09:0d:0c:08:cb:ad:c6:21:2c:b5:84:11:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9945429b19724473ad420a8ed2b53455f77f2713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:65:9d:d8:7b:0e:80:b5:b2:0d:f9:48:44:
52:3f:e9:bf:0c:c0:75:4e:19:43:b5:18:a6:81:ae:
db:6c:2e:30:e7:6e:7e:64:25:af:e7:30:66:ac:df:
4b:cd:60:83:33:ef:a3:66:b4:3f:fc:3c:2e:86:2d:
ba:b5:b2:dc:5b:23:9d:24:ef:c9:35:8e:06:9c:ac:
40:a8:38:5b:16:08:28:4d:86:16:13:91:ea:60:86:
fa:0b:e8:8b:0d:fb:8a:7c:6f:3b:41:22:9d:bf:20:
f9:ad:dc:90:53:bd:a3:75:46:91:b2:cd:11:7e:13:
48:ea:2c:ee:a4:97:32:e0:d4:06:c1:e7:06:13:1d:
e1:1e:c7:29:a6:5b:13:55:53:44:dd:a9:f4:69:8d:
1b:f3:7b:f3:19:a7:f5:8a:f3:e1:8b:75:37:22:ff:
ac:15:c9:1c:20:79:6a:cb:82:4f:bf:1d:ec:f2:fd:
a7:1e:bb:d4:8b:cb:1e:61:3e:92:43:4e:23:c9:c4:
3d:7c:3d:e2:93:64:e4:37:79:a3:de:0e:c2:42:76:
8f:21:a3:bf:e6:9e:bd:59:ca:e0:01:e2:76:1a:55:
01:85:b7:2e:c0:47:9c:6b:d0:cc:54:e8:2c:7d:4a:
b3:6a:93:c1:ed:13:07:03:ec:ae:9e:ed:26:0d:f8:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:45:42:9B:19:72:44:73:AD:42:0A:8E:D2:B5:34:55:F7:7F:27:13
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.209.0/24
185.90.44.0/22
IPv6:
2a0f:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
b3:1a:9b:43:55:b7:20:04:d0:dc:02:b2:f0:61:f7:a2:01:4b:
88:64:c0:e6:58:42:7c:a0:a2:1a:97:9f:e1:5f:35:a2:0d:c2:
cb:18:a1:8e:96:a3:0c:42:6c:c2:e6:6b:8f:17:01:8d:2b:53:
5f:61:55:cd:21:9e:19:49:c9:ca:de:a4:49:6f:9a:74:63:06:
6b:ed:94:b1:c9:0a:8e:2c:6d:58:0a:6c:ec:a9:ed:5a:f5:6c:
5e:24:5e:a0:2d:51:88:fd:c2:d6:0f:86:52:0e:3b:ba:69:c0:
f3:c4:28:04:82:12:82:16:59:95:fb:97:b1:10:41:a2:c5:fc:
10:a5:48:51:1f:05:ba:4d:a4:02:9a:8d:cb:8c:1a:0d:e8:3a:
b5:2c:85:2d:ef:37:b3:d9:8d:56:87:2d:47:e4:cd:6d:fd:4e:
fd:b1:40:d4:bd:00:8f:fd:54:f7:5f:d2:3e:b9:2b:43:c6:87:
e7:1f:f6:55:7d:e8:ca:2b:84:2d:37:09:25:59:6e:98:5b:d7:
75:f3:eb:2c:7e:d7:ad:a7:cd:0a:c2:39:d6:9c:87:3f:eb:ac:
cb:73:24:2b:a9:06:5f:7a:c0:5f:3f:11:a4:e6:18:b1:74:11:
f8:d9:3f:70:a9:ae:32:11:d0:57:3e:a1:65:01:4e:43:07:99:
38:79:80:a9
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQkRIwJDQwIy63GISy1hBFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3
Nzc5ZDYwHhcNMjUwMTAxMjM0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTQ1NDI5YjE5NzI0NDczYWQ0MjBhOGVkMmI1MzQ1NWY3N2YyNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyNlndh7DoC1sg35SERSP+m/DMB1
ThlDtRimga7bbC4w525+ZCWv5zBmrN9LzWCDM++jZrQ//Dwuhi26tbLcWyOdJO/J
NY4GnKxAqDhbFggoTYYWE5HqYIb6C+iLDfuKfG87QSKdvyD5rdyQU72jdUaRss0R
fhNI6izupJcy4NQGwecGEx3hHscpplsTVVNE3an0aY0b83vzGaf1ivPhi3U3Iv+s
FckcIHlqy4JPvx3s8v2nHrvUi8seYT6SQ04jycQ9fD3ik2TkN3mj3g7CQnaPIaO/
5p69WcrgAeJ2GlUBhbcuwEeca9DMVOgsfUqzapPB7RMHA+yunu0mDfhzOwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJlFQpsZckRzrUIKjtK1NFX3fycTMB8GA1UdIwQY
MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt
NTI0YzIxMDljYjA1LzEvbVVWQ214bHlSSE90UWdxTzByVTBWZmRfSnhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1
LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAsHfRAwQC
uVosMA0EAgACMAcDBQMqD//AMA0GCSqGSIb3DQEBCwUAA4IBAQCzGptDVbcgBNDc
ArLwYfeiAUuIZMDmWEJ8oKIal5/hXzWiDcLLGKGOlqMMQmzC5muPFwGNK1NfYVXN
IZ4ZScnK3qRJb5p0YwZr7ZSxyQqOLG1YCmzsqe1a9WxeJF6gLVGI/cLWD4ZSDju6
acDzxCgEghKCFlmV+5exEEGixfwQpUhRHwW6TaQCmo3LjBoN6Dq1LIUt7zez2Y1W
hy1H5M1t/U79sUDUvQCP/VT3X9I+uStDxofnH/ZVfejKK4QtNwklWW6YW9d18+ss
ftetp80KwjnWnIc/66zLcyQrqQZfesBfPxGk5hixdBH42T9wqa4yEdBXPqFlAU5D
B5k4eYCp
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:04 2025 by rpki-client