Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa
File: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (raw, json)
Hash identifier: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=
Subject key identifier: 9A:E5:8A:47:85:45:BE:55:6D:24:79:89:F0:BD:0B:58:2C:0D:AC:3D
Certificate issuer: /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial: 0194228DABE0CECBBFCB1EAFF2F5FF976D54
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211533
IP address blocks: 185.154.189.0/24 maxlen: 24
2a12:dac0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ab:e0:ce:cb:bf:cb:1e:af:f2:f5:ff:97:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae58a478545be556d247989f0bd0b582c0dac3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:0b:ad:06:72:47:1d:98:10:55:00:34:f7:
e4:42:9d:e3:27:a8:cc:01:d6:83:52:c6:0a:9d:cb:
7a:bb:02:c6:35:55:75:80:72:c1:78:6b:f0:6f:f1:
b2:9e:ec:c5:fd:70:1a:2c:ac:e8:cd:cf:a8:2d:21:
a0:b6:03:06:08:a8:48:f8:16:0d:3b:e3:d6:ad:03:
97:55:fd:9b:33:e1:3a:57:9f:f7:8a:09:b7:85:e4:
0c:6a:62:2f:4f:d2:81:09:17:ac:91:16:83:32:15:
2c:4c:45:ec:79:9f:4c:fe:d7:3c:25:af:15:56:c1:
49:de:81:76:83:ce:45:2d:21:2e:15:71:1f:1a:e9:
c2:5d:dc:06:0b:63:26:73:eb:28:0c:f9:0c:29:58:
25:5b:c1:58:6c:86:91:0c:f4:8a:e4:c7:14:96:35:
55:f4:49:a2:9e:9e:25:93:48:a0:3f:14:f2:34:6f:
b9:61:ad:46:a2:81:df:3f:42:8a:9b:75:6e:81:b0:
bb:c5:8f:ed:e0:77:4e:51:59:60:32:3b:2d:0d:58:
a1:eb:dc:5f:01:cb:73:6b:5d:d3:6e:a8:93:c6:91:
a0:f6:fa:43:17:24:43:24:78:1f:47:7f:f2:97:ba:
97:56:12:2c:00:5e:be:2e:aa:46:2c:80:a3:62:d8:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:8A:47:85:45:BE:55:6D:24:79:89:F0:BD:0B:58:2C:0D:AC:3D
X509v3 Authority Key Identifier:
keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.189.0/24
IPv6:
2a12:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:06:01:c5:79:8b:b1:a9:99:e0:c0:7a:5e:de:17:67:0c:99:
f2:0a:26:33:e5:1d:b6:fd:07:5b:84:37:55:31:4e:a9:26:44:
76:67:c8:90:04:bb:bc:77:b6:0b:cf:8b:5f:76:b3:00:d4:f4:
9c:66:5e:f3:a5:20:79:46:0a:d4:17:b3:95:b2:d4:93:8e:d0:
af:b0:a4:3f:db:19:c6:93:d7:bc:26:5b:f8:60:29:df:41:66:
fe:5f:18:b2:c4:80:b6:34:6e:34:3f:d9:a4:ce:c2:7e:ba:c8:
9a:c3:bb:70:ec:ce:01:43:b2:50:f7:cc:39:3d:9b:4a:98:6e:
9d:6b:4a:3e:69:fb:5d:81:d2:bf:ce:1f:c5:48:80:9a:8c:19:
48:1d:b7:4a:8c:3c:f9:53:b0:46:06:47:55:fe:40:fc:54:4d:
85:6c:54:56:22:1e:17:c6:39:45:ad:84:82:f4:34:06:65:dd:
57:cd:6a:99:e5:55:79:de:1f:e1:22:b9:bc:e8:64:8f:68:82:
08:5f:02:01:c8:e5:60:58:5a:7f:e2:20:c9:91:85:d8:70:b1:
74:96:ec:32:92:59:80:99:c9:31:e7:78:94:94:55:1c:42:4c:
ae:b1:e8:46:21:9e:71:8d:43:04:68:8c:9b:9f:d2:b4:2d:44:
83:e6:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:42:18 2025 by rpki-client