Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/MbIcAZoGAVfhHG9MQ2l60EAMCzM.roa
File: MbIcAZoGAVfhHG9MQ2l60EAMCzM.roa (raw, json)
Hash identifier: wdRwyI8FTU+30il47NoLO3l/QYBTDY3es+i1xkTUDIY=
Subject key identifier: 31:B2:1C:01:9A:06:01:57:E1:1C:6F:4C:43:69:7A:D0:40:0C:0B:33
Certificate issuer: /CN=b2fbfe5f059f9dc13454344c90749574ece629f5
Certificate serial: 019426D8CB9656B779EEE9344D410F56C83E
Authority key identifier: B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/MbIcAZoGAVfhHG9MQ2l60EAMCzM.roa
Signing time: Thu 02 Jan 2025 11:48:49 +0000
ROA not before: Thu 02 Jan 2025 11:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202780
IP address blocks: 185.154.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:cb:96:56:b7:79:ee:e9:34:4d:41:0f:56:c8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2fbfe5f059f9dc13454344c90749574ece629f5
Validity
Not Before: Jan 2 11:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31b21c019a060157e11c6f4c43697ad0400c0b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:4c:97:68:2f:b1:94:28:e8:89:8c:54:b5:
68:c9:cd:fe:2c:20:e0:89:85:da:ad:d0:d8:a2:77:
4d:00:fc:95:5c:f1:26:5d:d4:04:cb:2d:d0:ea:94:
3a:7f:05:b3:de:8b:6e:5f:86:be:2a:52:25:27:32:
ab:ba:c9:a8:0d:2b:4b:b3:22:6d:f3:c2:9a:2b:b6:
97:20:6b:07:08:f0:0e:f0:45:23:21:e1:0a:f4:17:
92:53:e1:9d:2e:89:e2:d0:c9:de:df:03:00:30:6a:
c1:62:a2:5b:c7:57:3a:0d:af:1e:3d:78:de:65:fc:
1e:dc:2e:e2:aa:e6:e1:ba:17:ad:86:20:49:e0:ef:
f2:63:5c:bc:6e:70:33:aa:ca:ea:d7:6f:63:e7:1d:
6b:fb:fd:91:b0:e7:bb:d3:5d:66:e0:c9:5b:f5:c0:
c6:f2:26:bc:79:3b:c7:df:6b:22:a8:59:23:95:8a:
c9:20:dc:d3:16:8a:7d:3d:82:26:2b:0e:52:da:71:
77:2d:47:ed:3c:6b:a6:ed:d6:22:3f:28:dc:8c:fe:
55:6c:86:1e:74:f0:a0:5f:c5:f1:f5:5c:d4:6e:cf:
34:cc:43:59:b9:84:e7:ce:9b:63:f0:0f:20:cf:26:
e9:37:38:24:dc:7f:82:f5:e4:ac:21:47:47:0f:d4:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B2:1C:01:9A:06:01:57:E1:1C:6F:4C:43:69:7A:D0:40:0C:0B:33
X509v3 Authority Key Identifier:
keyid:B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/MbIcAZoGAVfhHG9MQ2l60EAMCzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.228.0/22
Signature Algorithm: sha256WithRSAEncryption
68:f6:e8:bf:b9:84:1f:45:04:1e:9f:e9:5f:78:6c:a2:c1:d5:
af:ac:86:7d:82:09:a9:98:0e:3c:0c:64:3b:21:88:c7:22:06:
4f:1e:46:7e:0d:81:1f:d9:72:70:6b:20:50:f9:6c:95:98:56:
68:a4:dd:3e:1b:9d:a3:d9:e8:d6:6c:86:9c:c7:bc:cd:d4:68:
f4:5c:e3:dd:0a:a7:77:44:63:38:e2:a9:99:9f:8a:fa:f0:22:
af:b9:a7:f7:15:a3:d8:11:a7:4c:8a:f2:eb:43:45:ba:a8:cf:
ff:3d:89:79:bb:19:e2:1d:91:95:54:63:99:ba:d7:03:7a:a1:
eb:89:ce:5c:44:23:5b:0c:0f:c9:29:05:e2:b1:02:f2:5f:86:
28:bd:cb:d4:6f:05:51:94:59:b5:3b:80:7d:74:9d:6b:78:b7:
99:06:d5:25:1d:c8:73:63:fe:3b:73:63:64:b7:a2:6d:6b:ee:
14:35:85:8c:f4:33:1d:0c:ba:7a:88:df:52:4c:84:35:b0:f4:
4f:5b:99:40:82:00:7a:ff:14:42:a8:cf:9e:4e:87:99:78:ba:
ed:5d:98:33:d0:c3:8d:a9:1e:3f:2e:88:5d:44:b3:ab:7b:83:
8e:57:f1:15:91:f8:0a:d5:5f:7b:09:b1:53:a3:e1:b1:b6:b7:
92:3e:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:48 2025 by rpki-client