Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1MXzgBG5tScZOs0lu0mioA4XXuk.roa
File: 1MXzgBG5tScZOs0lu0mioA4XXuk.roa (raw, json)
Hash identifier: OteiHlOHet/v5aYSu4HON+K3VXouE0MmNFQzTRKwU9Q=
Subject key identifier: D4:C5:F3:80:11:B9:B5:27:19:3A:CD:25:BB:49:A2:A0:0E:17:5E:E9
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440242CB47BB85ADBF5ABD7A579287
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1MXzgBG5tScZOs0lu0mioA4XXuk.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48433
IP address blocks: 185.201.29.0/24 maxlen: 24
185.201.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:02:42:cb:47:bb:85:ad:bf:5a:bd:7a:57:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c5f38011b9b527193acd25bb49a2a00e175ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:cc:dc:73:a5:b2:83:94:b1:35:8d:0f:b0:
0c:94:a2:b1:5b:a5:f1:db:81:9a:65:86:18:64:2d:
b0:e2:e8:69:5b:0e:93:35:ee:eb:93:d1:24:f3:8d:
c4:f6:60:f7:ef:da:59:96:14:06:e8:38:78:05:8d:
35:2d:40:93:44:05:90:9c:85:8c:b8:c6:25:33:fd:
39:b6:7b:59:a2:63:3e:40:b9:a1:3d:72:0d:48:e9:
e4:a7:a9:4b:c6:28:b0:09:43:aa:53:7b:96:b6:3a:
2b:d0:50:c9:58:ed:48:f9:38:fb:47:6d:51:3d:ba:
b4:1c:0f:5e:b5:ec:1c:4a:6b:ab:9f:0e:e1:11:ae:
df:f4:69:62:89:fb:8a:3d:da:51:df:c0:66:1e:30:
d4:16:c7:82:ef:5f:29:91:6a:d9:2e:78:45:5a:31:
c6:65:c5:1f:b6:37:f0:ed:f5:61:1e:6f:35:50:aa:
8d:07:30:e7:1c:da:6f:81:81:c7:52:ab:46:c5:0b:
e5:1b:69:77:40:9f:7b:bb:f0:bb:75:e8:ea:a8:0e:
1c:7d:ff:55:fd:7c:ee:b0:73:03:1d:f9:dd:15:32:
0d:5b:38:3f:0c:0f:e7:2a:99:77:70:78:23:6c:b7:
c6:ec:f0:0d:76:18:ec:89:71:64:7b:1f:f9:df:f3:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C5:F3:80:11:B9:B5:27:19:3A:CD:25:BB:49:A2:A0:0E:17:5E:E9
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/1MXzgBG5tScZOs0lu0mioA4XXuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.29.0-185.201.30.255
Signature Algorithm: sha256WithRSAEncryption
4f:b2:79:ef:94:58:28:18:88:f6:38:5e:3d:f8:f7:38:6c:51:
60:34:2b:76:f7:1b:a1:06:96:9a:92:cf:e5:6d:df:6f:05:1b:
df:2c:06:ea:8d:28:67:c4:a3:a6:e1:34:83:b2:63:3e:9d:49:
51:d7:f7:e9:7f:7b:1f:3a:8b:cf:1f:12:29:4a:9b:76:23:c4:
49:8b:ea:8d:c6:90:7b:5b:c0:3d:8a:e3:f8:e9:92:8f:a4:ef:
45:c7:2b:2b:fb:98:83:66:c6:95:f3:ba:9c:4c:5d:55:e6:c7:
83:c8:16:6d:1e:80:5c:e7:96:98:35:7e:38:f5:15:37:2e:03:
96:56:c0:a3:ef:63:10:f9:e4:eb:cd:a2:71:a4:82:16:92:1b:
c2:8d:99:c1:33:79:cb:93:ca:fd:e0:8d:94:ca:fe:39:4c:ae:
e9:69:c7:de:d4:d7:6b:8a:90:65:7d:d7:1f:46:fe:d4:55:f9:
9b:54:39:ca:94:bf:04:40:dd:3c:18:52:33:1c:30:1c:26:2c:
27:64:97:fb:36:66:d7:1c:08:5d:9f:f6:f8:6c:88:f2:d0:22:
47:4a:06:31:b2:77:dc:dd:8f:8f:ac:27:4c:1f:76:13:fe:2b:
18:70:ed:ae:c6:9c:16:d5:67:97:b0:70:5e:68:fa:e4:32:ce:
44:70:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:22 2025 by rpki-client