Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/Myk-x7JFGZ-QD7gv9P00RV0PvjI.roa
File: Myk-x7JFGZ-QD7gv9P00RV0PvjI.roa (raw, json)
Hash identifier: 328xxf9QZGGg7m61rWRIeZ1jEsvvk0/kuvlftHSPZ8o=
Subject key identifier: 33:29:3E:C7:B2:45:19:9F:90:0F:B8:2F:F4:FD:34:45:5D:0F:BE:32
Certificate issuer: /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial: 019420D625CB3FEBF15073C64D438C49F1C8
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/Myk-x7JFGZ-QD7gv9P00RV0PvjI.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51172
IP address blocks: 185.150.40.0/24 maxlen: 24
195.8.218.0/23 maxlen: 23
2001:67c:218::/48 maxlen: 48
2a07:ab40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:25:cb:3f:eb:f1:50:73:c6:4d:43:8c:49:f1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33293ec7b245199f900fb82ff4fd34455d0fbe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:a3:60:7c:49:8a:02:9c:68:76:13:93:ef:
12:7c:bd:78:72:2d:88:11:23:9f:d2:b4:da:0c:16:
0a:39:01:27:7b:9b:05:9b:ba:f1:ad:09:cf:99:d5:
7f:31:92:06:3a:15:e3:bd:de:74:24:a2:89:07:bd:
c6:75:bb:e0:ed:19:42:4a:23:ff:63:4a:ea:cb:ba:
ab:41:fd:31:a1:97:28:a0:08:36:09:4c:32:46:cb:
c2:e9:ea:d4:f5:4f:2a:1a:fe:28:e6:a3:89:6b:02:
c1:03:c8:f9:77:26:ab:70:06:f7:5f:b5:5e:76:85:
7f:a1:f8:7b:db:8d:07:08:db:c2:54:45:0f:96:f6:
c1:27:12:80:d2:39:48:de:fa:94:6a:d3:06:56:96:
b8:d3:08:61:92:37:9c:04:79:71:ea:d3:8c:23:ab:
34:c1:37:29:88:c1:43:bb:9d:2a:5e:e8:17:d5:69:
57:1b:81:f3:64:28:1d:bf:4d:e4:01:c4:aa:0f:72:
a7:65:48:90:ae:a9:7d:3f:f8:46:5e:ab:83:97:92:
ce:f4:fb:3f:4e:a7:d9:15:69:00:9c:87:5f:bd:8b:
86:c1:01:32:90:d3:06:dc:fb:63:c5:7f:66:ee:84:
a3:d9:76:52:a8:f7:5d:db:3a:52:84:e4:34:39:8d:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:29:3E:C7:B2:45:19:9F:90:0F:B8:2F:F4:FD:34:45:5D:0F:BE:32
X509v3 Authority Key Identifier:
keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/Myk-x7JFGZ-QD7gv9P00RV0PvjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.40.0/24
195.8.218.0/23
IPv6:
2001:67c:218::/48
2a07:ab40::/48
Signature Algorithm: sha256WithRSAEncryption
14:fe:a4:e1:f4:43:d8:a2:06:84:0c:1a:93:a2:3b:27:c4:af:
f6:35:f4:a3:95:02:e8:8a:7f:2d:65:ed:bb:e3:7c:41:17:15:
af:e6:9f:b3:a3:d6:43:c5:7c:96:08:66:d8:49:d8:e5:01:44:
0c:e8:15:20:b5:d3:4c:8d:42:31:00:c5:08:c9:db:97:22:80:
bd:af:e2:ff:ec:d2:fa:df:d1:35:8d:6a:d6:27:ee:6f:d6:f1:
38:9d:53:8f:09:61:08:79:a6:1d:cf:67:bc:cc:4d:54:6d:58:
22:10:cd:e3:8d:32:ce:16:1b:e2:2c:bf:bb:23:3f:b2:d7:ad:
24:40:75:62:d7:30:c3:02:0b:3e:52:54:9f:73:c0:0c:09:4f:
44:df:b7:8b:df:50:c7:05:43:86:ac:ee:3a:17:0c:84:99:70:
b4:1c:59:ae:c2:0b:be:01:4f:ff:d2:eb:1e:b5:49:8b:a8:77:
4a:c3:a5:86:16:a6:9d:db:e8:98:99:09:bc:1d:5f:92:61:87:
52:e2:3a:64:f3:76:b2:8d:bd:f0:80:56:91:52:a3:af:b2:95:
e4:73:d8:1f:78:4a:6c:96:65:6a:7d:3a:85:9d:11:cd:4a:57:
ad:51:fa:64:39:3b:8e:fc:da:75:94:1f:7b:b5:6a:55:02:c5:
11:c2:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:47 2025 by rpki-client