Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/pPpmoMPPkAZMgk578mv2D1Fr8uM.roa
File: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (raw, json)
Hash identifier: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=
Subject key identifier: A4:FA:66:A0:C3:CF:90:06:4C:82:4E:7B:F2:6B:F6:0F:51:6B:F2:E3
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019424B3155C420FDCB7B777BD6B8B0EF9F4
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/pPpmoMPPkAZMgk578mv2D1Fr8uM.roa
Signing time: Thu 02 Jan 2025 01:48:23 +0000
ROA not before: Thu 02 Jan 2025 01:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200645
IP address blocks: 185.100.44.0/22 maxlen: 22
185.117.136.0/22 maxlen: 22
185.174.200.0/22 maxlen: 22
185.177.156.0/22 maxlen: 22
185.179.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:15:5c:42:0f:dc:b7:b7:77:bd:6b:8b:0e:f9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Jan 2 01:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4fa66a0c3cf90064c824e7bf26bf60f516bf2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:8f:ad:a1:fc:e0:18:fc:83:ec:35:c5:42:
a4:87:58:f8:c5:f8:fc:6c:9f:6c:b3:72:8f:83:5a:
64:d1:0c:53:b8:fa:21:aa:e8:38:c1:9e:8e:fa:32:
3d:c2:4f:9b:c7:b4:36:c5:3a:2b:fc:b7:e5:8f:0c:
e8:29:d9:2d:68:da:68:a4:cc:d5:ca:43:de:2c:29:
81:e4:78:4e:d6:aa:c8:8a:e2:ac:be:c3:bb:2c:ab:
4c:91:f3:76:bf:26:7f:74:7d:5e:8f:57:57:05:40:
59:1b:57:8c:ee:03:25:0d:94:65:cc:91:c6:89:05:
41:a3:08:27:cf:32:cc:d9:ec:59:34:b5:63:df:52:
a6:f2:b9:37:a6:e1:60:8c:7a:f9:c0:dc:d2:b8:cb:
6a:93:a1:13:37:27:c9:5c:75:ab:c3:8b:7e:b8:bf:
be:ef:83:71:4c:74:84:7f:85:28:40:f1:c9:04:72:
67:6f:b6:ec:5f:d7:c0:19:9e:88:c1:2f:51:66:be:
7c:03:3f:76:64:70:41:44:0e:7b:f5:7d:e1:e2:21:
b1:15:99:9c:c0:7c:21:1a:c8:d7:dd:94:80:1f:2d:
04:41:3f:0d:bc:18:9c:38:c6:43:45:5d:55:36:1c:
eb:f6:e7:1e:73:7e:4b:fd:4b:65:e7:52:c0:ad:05:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:66:A0:C3:CF:90:06:4C:82:4E:7B:F2:6B:F6:0F:51:6B:F2:E3
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/pPpmoMPPkAZMgk578mv2D1Fr8uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.44.0/22
185.117.136.0/22
185.174.200.0/22
185.177.156.0/22
185.179.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:90:5b:dc:d3:a1:14:f3:7d:92:66:43:3c:bf:65:a1:ea:5e:
18:d6:ea:b2:42:f2:43:3f:a1:c5:c9:81:c9:7b:44:f4:21:28:
84:5a:cd:c3:65:fc:42:e0:93:21:2d:c6:46:04:bd:90:1d:ae:
8f:72:b6:e6:48:82:d0:00:5d:cb:c2:ad:96:57:76:dd:86:42:
4e:38:00:59:ce:35:70:6f:14:d9:79:3b:09:c3:bc:6b:a0:16:
76:1f:ae:00:fe:49:44:a9:6f:22:99:60:8b:eb:f9:36:e8:d5:
85:e7:46:82:7a:ed:aa:bb:33:5f:c3:a9:ad:d1:ed:12:d6:00:
8e:9f:ea:03:a2:4d:9c:48:84:2c:bc:3a:47:29:bf:26:c6:95:
61:3b:66:2b:4c:38:58:67:d1:cb:12:72:fe:e4:6b:a6:4a:fd:
1c:61:5d:95:a6:a7:e3:9a:49:cd:97:8e:df:f8:23:5d:d2:c9:
51:5c:a3:8b:97:70:eb:af:c9:af:39:62:6f:1a:38:6a:c7:8d:
8e:6d:45:50:35:38:53:19:0f:04:7d:2e:8f:6c:b1:aa:c3:2f:
eb:5a:17:cd:fa:31:96:b4:8d:f5:d8:06:18:a0:d2:fb:c4:b2:
51:d3:1b:d5:4c:af:c4:22:7c:c6:6d:3e:12:45:47:f1:91:e9:
f4:7d:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:41 2025 by rpki-client