Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/MeftFDyyKlq59H8eJ4aYSjoSMUo.roa
File: MeftFDyyKlq59H8eJ4aYSjoSMUo.roa (raw, json)
Hash identifier: Eo9hb04At0+ktvhvxxePujCRp3KNWVLXdVp0qBvoXcQ=
Subject key identifier: 31:E7:ED:14:3C:B2:2A:5A:B9:F4:7F:1E:27:86:98:4A:3A:12:31:4A
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 01941F8C9A1A28F2A96A47109895F674EB3F
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/MeftFDyyKlq59H8eJ4aYSjoSMUo.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208923
IP address blocks: 185.70.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9a:1a:28:f2:a9:6a:47:10:98:95:f6:74:eb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e7ed143cb22a5ab9f47f1e2786984a3a12314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:97:0a:a7:0b:06:cd:94:6c:5b:4e:f5:ca:
6f:2c:cb:52:88:22:0d:78:39:23:40:b2:4a:3a:c9:
83:d2:f0:b5:c7:9c:d0:40:64:c2:ad:e5:fd:9f:1b:
bd:20:ec:6d:b1:6f:04:c8:b5:9c:e7:bf:31:b7:75:
7d:08:fa:9d:b1:f9:e9:81:ca:f9:83:57:d2:1f:a0:
46:23:05:f7:50:a9:15:d7:ef:bc:4a:7d:67:0f:8b:
ef:72:04:61:92:e3:e2:d3:22:78:68:f4:d3:fc:e3:
75:54:0f:bd:35:e3:42:e1:bd:ed:a2:b1:e8:1a:98:
68:5f:e7:a5:9f:a9:56:63:a1:f0:d0:29:6d:8c:3d:
d5:1b:ef:b5:e0:74:03:e3:83:28:e0:09:c1:aa:2e:
d2:9f:99:b7:5d:eb:8f:ef:67:41:c1:26:46:4c:bf:
b3:e7:ca:5c:35:cf:2a:15:1c:61:bd:a4:05:ec:98:
1a:be:d3:fe:ba:c4:cd:5b:e6:f9:8e:d4:74:f7:8b:
65:6a:b5:70:b0:04:bf:26:69:db:e9:25:27:a4:16:
71:02:c4:ce:e7:73:f1:eb:9b:98:89:78:ec:b8:7e:
9f:7e:0d:eb:53:f8:40:a9:99:d1:82:af:1a:dc:3a:
4b:3b:e5:c5:9f:43:c3:fc:ce:5c:9e:b3:fe:fb:19:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:ED:14:3C:B2:2A:5A:B9:F4:7F:1E:27:86:98:4A:3A:12:31:4A
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/MeftFDyyKlq59H8eJ4aYSjoSMUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.227.0/24
Signature Algorithm: sha256WithRSAEncryption
67:eb:c8:38:e8:33:5b:c7:6e:70:d2:44:6d:9c:b9:3b:1b:d3:
48:09:ff:f2:83:bd:11:6a:8d:a2:b6:ec:14:0d:0e:14:9a:39:
96:d8:b7:13:7b:01:51:3f:5e:c3:9a:b5:0a:dd:e7:ec:3e:ba:
17:32:40:2f:0f:45:1a:0f:e1:39:57:c5:20:90:bd:a2:34:25:
ee:b2:f1:5b:7d:e1:a5:51:84:45:de:a8:c8:a9:df:b1:e5:9a:
20:ca:af:3c:16:f0:93:bc:cd:48:d4:cc:3c:f3:6b:59:38:1c:
bc:f2:f7:e0:d2:9f:2c:04:b2:1c:85:78:00:35:31:aa:97:00:
63:e4:b7:cb:0b:57:62:37:5f:69:2d:e7:d2:35:c3:ff:39:6e:
49:41:da:b6:c6:4f:8f:51:ec:4f:c0:6e:0b:c5:90:ba:6a:ca:
f7:1d:8e:ca:28:be:85:b1:18:4e:80:c7:81:18:19:e5:da:5c:
e7:36:ca:36:68:f1:73:de:b2:85:99:53:0d:2f:77:0f:f5:0a:
4f:ed:3e:7e:3b:fd:b5:56:c3:7d:f9:ca:7a:1f:9e:53:e9:2f:
a6:e2:8a:5a:8b:55:72:17:11:5d:8a:8e:5e:10:d3:4a:4a:98:
06:7e:2d:cb:40:a7:d5:df:a6:ba:ac:89:25:e2:26:b4:dc:59:
7b:ce:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:15 2025 by rpki-client