Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/MiVzKZibX-3It-xgfseflvN2L_A.roa
File: MiVzKZibX-3It-xgfseflvN2L_A.roa (raw, json)
Hash identifier: aH26xuV9XAHKD/zeZjQBB+/hzYVLDuUtsC+DOjTxZxI=
Subject key identifier: 32:25:73:29:98:9B:5F:ED:C8:B7:EC:60:7E:C7:9F:96:F3:76:2F:F0
Certificate issuer: /CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Certificate serial: 01942827E7A4E0063901BBD64857AFDF4C9F
Authority key identifier: FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/MiVzKZibX-3It-xgfseflvN2L_A.roa
Signing time: Thu 02 Jan 2025 17:54:51 +0000
ROA not before: Thu 02 Jan 2025 17:54:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206782
IP address blocks: 185.176.148.0/22 maxlen: 22
185.176.151.0/24 maxlen: 24
2a0a:1980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:e7:a4:e0:06:39:01:bb:d6:48:57:af:df:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcde8ca3e2ce52bbcce53c4a2926d3c9c410c04b
Validity
Not Before: Jan 2 17:54:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32257329989b5fedc8b7ec607ec79f96f3762ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:75:0b:91:92:36:38:82:79:f7:97:35:db:
d2:a8:ff:a8:8b:90:03:c1:7d:65:e0:40:b7:1d:e4:
95:11:bd:88:0f:1c:03:9b:40:c7:d2:a2:39:ee:20:
cd:12:10:a4:a9:6a:5d:10:c5:ea:80:03:46:91:e5:
73:22:f7:17:b4:a5:96:af:f0:f1:75:54:cc:a3:d5:
46:03:9c:38:56:b8:9e:8c:e7:a6:db:61:75:c9:4c:
0e:c0:05:37:ca:fc:9b:16:1c:68:38:02:25:7c:b0:
a1:a5:6b:95:51:d0:87:ab:0d:c3:52:70:df:c0:90:
dc:53:6c:48:49:c6:87:f6:a9:da:90:1f:4e:d6:18:
3a:1b:e0:7f:19:54:2d:dd:2a:be:eb:c4:bb:07:c9:
a8:bb:97:2d:fc:15:3d:3b:f6:4f:05:ef:7d:92:19:
81:94:f4:52:4f:df:7b:53:09:d4:4c:b5:62:48:12:
9e:ab:23:7a:49:b4:01:4a:1e:78:94:19:3b:02:57:
86:18:23:ca:b4:28:c2:d9:c8:77:aa:8a:8f:2e:22:
04:67:5c:4a:66:e4:ab:fb:ed:c1:cc:0f:43:9b:90:
5f:00:a3:a9:94:f0:b8:ae:1f:ed:13:bb:4e:81:e9:
4e:35:05:69:d7:90:47:af:be:33:72:e5:1d:4c:06:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:73:29:98:9B:5F:ED:C8:B7:EC:60:7E:C7:9F:96:F3:76:2F:F0
X509v3 Authority Key Identifier:
keyid:FC:DE:8C:A3:E2:CE:52:BB:CC:E5:3C:4A:29:26:D3:C9:C4:10:C0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_N6Mo-LOUrvM5TxKKSbTycQQwEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/MiVzKZibX-3It-xgfseflvN2L_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/84c76e-a15c-454f-a686-000922a5cf19/1/_N6Mo-LOUrvM5TxKKSbTycQQwEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.148.0/22
IPv6:
2a0a:1980::/29
Signature Algorithm: sha256WithRSAEncryption
a2:91:a0:40:b0:60:86:88:7c:40:06:ed:db:32:da:26:64:24:
8f:91:8b:90:62:e8:bf:e8:d7:23:4d:54:2a:36:b7:2b:78:77:
0c:23:6b:af:1e:c9:e5:8e:1f:23:fb:cc:f0:be:67:77:b2:b1:
c9:1b:89:e3:b7:a7:e8:a5:ff:54:72:6b:1a:47:28:a7:f2:e0:
8c:7e:c7:57:39:4a:34:c6:1e:3b:1c:54:bd:08:6d:db:80:bb:
96:c5:a4:00:15:3e:1f:b0:e0:fd:4a:72:8f:d2:c8:4a:45:15:
85:ab:32:57:c5:c0:92:4a:7b:77:f5:1e:76:d7:69:6c:42:aa:
ec:c6:c7:66:d1:2f:fb:fb:ec:d0:23:e5:73:76:93:d3:68:f6:
61:37:d7:77:8f:d9:e4:3d:15:d7:34:1a:33:4a:bb:05:09:5d:
42:0c:22:e4:ca:2c:0d:23:e1:49:df:e7:de:91:96:cb:59:f4:
dd:12:91:c1:60:5f:9a:24:8a:05:dc:7a:9d:aa:ac:a5:11:7b:
b0:78:2f:df:75:46:3c:08:a0:17:b9:0a:40:f9:e9:8a:e4:0d:
e6:04:4a:2e:cf:96:b5:32:60:3c:4d:b2:60:5a:8e:d0:e3:e3:
69:eb:3b:b1:90:fd:b7:6b:45:40:30:ca:05:3c:9a:74:ba:d2:
ce:ce:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:11 2025 by rpki-client