Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/iic_3MWvnXwRjdS-4rnJnbVlZdw.roa
File: iic_3MWvnXwRjdS-4rnJnbVlZdw.roa (raw, json)
Hash identifier: ft3o3Jhs8krX+yoAKh9srXW+5Ly/fpaA/Ux+H2kgUMA=
Subject key identifier: 8A:27:3F:DC:C5:AF:9D:7C:11:8D:D4:BE:E2:B9:C9:9D:B5:65:65:DC
Certificate issuer: /CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Certificate serial: 01942144272E1DC862F0ED6547EE80A9B8CD
Authority key identifier: 30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/iic_3MWvnXwRjdS-4rnJnbVlZdw.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60444
IP address blocks: 185.30.216.0/22 maxlen: 22
2a00:b760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:27:2e:1d:c8:62:f0:ed:65:47:ee:80:a9:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3066af73eff3ac21ff17a0952ff370e60ca44b5d
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a273fdcc5af9d7c118dd4bee2b9c99db56565dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:2c:e3:55:29:13:d3:6f:5d:42:3c:22:a7:
f6:1e:02:2a:43:39:1b:9d:fd:1b:b1:53:59:b0:54:
75:ca:03:16:b7:56:67:9a:a8:51:2e:b7:ff:a8:76:
8e:bf:cf:75:a5:33:d5:24:f4:83:d8:e3:cd:63:83:
0a:40:46:ec:f2:b1:ed:b0:60:8f:d7:f7:d6:e7:25:
50:2a:1b:f5:3a:4f:01:fd:5a:38:95:3b:10:b5:2c:
ff:34:5c:a7:cc:ea:d1:22:aa:b0:b7:dd:8b:bc:1c:
bd:93:f7:24:f6:e2:a0:25:2c:b5:24:67:e2:8e:56:
cc:e4:5d:7f:a5:71:a6:13:cd:65:52:50:04:6c:c2:
26:24:c5:d9:0e:cc:a9:3d:0a:de:4c:a0:78:a3:b3:
ff:89:59:f0:00:ca:0f:3e:7d:b8:38:81:1d:2d:d6:
e1:f5:cd:73:b2:bd:82:77:57:40:14:c3:48:98:b6:
a2:3f:14:3b:bc:96:14:93:a1:19:c2:76:39:5c:7e:
0b:45:91:f2:cd:ad:0e:bd:5f:2d:5a:e8:dd:20:0c:
06:2b:99:85:19:a1:10:64:23:56:66:f9:f3:2b:d7:
88:ef:a7:21:c4:87:a4:ea:fd:2d:12:33:f6:28:33:
cd:4c:b7:fa:26:23:c4:5b:64:d0:c4:a9:54:16:95:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:3F:DC:C5:AF:9D:7C:11:8D:D4:BE:E2:B9:C9:9D:B5:65:65:DC
X509v3 Authority Key Identifier:
keyid:30:66:AF:73:EF:F3:AC:21:FF:17:A0:95:2F:F3:70:E6:0C:A4:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGavc-_zrCH_F6CVL_Nw5gykS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/iic_3MWvnXwRjdS-4rnJnbVlZdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/232cfd-76dc-49e9-a94d-5188ea17d9a9/1/MGavc-_zrCH_F6CVL_Nw5gykS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.216.0/22
IPv6:
2a00:b760::/32
Signature Algorithm: sha256WithRSAEncryption
15:0a:61:05:fa:fc:43:85:e0:cf:99:87:b8:35:c1:f8:cc:8d:
da:cb:97:6d:a4:a3:ee:44:7b:83:6f:2a:bc:da:16:ff:40:4e:
df:e2:04:09:3c:74:10:fd:9b:5e:a6:d3:87:00:c0:48:3b:62:
9b:af:7e:5a:45:58:0a:d3:74:69:61:58:68:00:ae:09:db:30:
04:84:68:8d:78:d1:a1:ea:5d:22:89:27:c6:a0:ac:e2:54:4a:
e7:56:f8:9f:40:1a:59:9a:73:22:7b:87:ab:77:d3:0e:09:34:
ae:7d:69:1b:e2:4b:a8:12:df:97:b7:84:43:2f:40:97:0a:8e:
4c:bb:4c:03:2d:13:32:5d:03:e4:d1:df:4d:ea:88:fc:6d:89:
af:47:2e:34:fc:b6:97:e2:da:1f:e7:ba:89:56:9d:f6:4f:c9:
68:b1:24:19:2e:cc:df:b5:c4:6c:7c:f0:0b:f9:07:82:9c:52:
fd:76:5f:2d:a8:4f:48:c1:eb:18:6a:47:77:10:cd:f7:c4:19:
b2:fa:e7:60:19:8d:05:93:68:c9:ac:60:6b:66:86:6f:33:62:
c5:c3:f7:5d:c6:82:a1:74:bf:e6:37:51:2a:5f:c2:d5:47:a9:
55:ef:30:33:24:c7:81:da:21:99:99:d3:5e:d2:c3:19:db:63:
12:71:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:04 2025 by rpki-client