Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa
File: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (raw, json)
Hash identifier: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=
Subject key identifier: 76:C3:13:3C:B8:DF:68:DB:D3:A9:0A:5D:6E:DB:AF:19:6B:E6:E8:79
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 0194266C44E7E4DBC66DA64CFA36AC209B40
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199791
IP address blocks: 81.175.16.0/22 maxlen: 22
147.111.0.0/16 maxlen: 16
147.111.0.0/18 maxlen: 18
147.111.64.0/18 maxlen: 18
147.111.128.0/18 maxlen: 18
147.111.192.0/18 maxlen: 18
185.45.36.0/22 maxlen: 22
2a01:79e0::/32 maxlen: 32
2a01:79e0:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:44:e7:e4:db:c6:6d:a6:4c:fa:36:ac:20:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76c3133cb8df68dbd3a90a5d6edbaf196be6e879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:4f:96:c5:58:3c:dd:5b:ff:0f:4b:c8:f3:
70:ce:19:14:1f:71:2d:04:02:85:99:35:b0:0f:0c:
aa:dc:f0:2a:a9:f7:c2:cf:1f:56:6b:0c:ab:33:32:
dc:9c:ff:08:20:86:8e:90:18:cf:33:4a:01:f2:ec:
93:d9:c7:7e:93:9b:77:c4:26:49:7c:a5:48:67:6c:
ec:08:0a:2b:c1:cc:6c:6d:bf:7a:88:ce:4b:4f:90:
8a:6e:e6:ae:fd:22:12:73:cd:fd:13:c5:76:7e:1d:
72:4d:eb:9e:50:34:89:74:20:b3:46:ab:08:76:81:
40:df:c4:b2:a5:8b:37:57:6d:76:a6:09:b3:7a:d6:
fd:d9:f0:15:ab:e0:55:c3:5e:7b:15:e9:95:09:36:
79:d0:56:82:18:71:a9:0a:e4:8f:f1:2e:8c:d2:ee:
2c:c2:16:1c:c8:56:d6:e1:fa:8a:80:a6:4e:b3:7b:
72:87:03:b1:ca:44:78:4c:59:7b:43:06:97:14:eb:
46:24:c3:ac:c5:00:a4:c6:ab:a4:d4:67:b2:d0:57:
6b:a5:c2:53:ea:f9:41:7c:94:4a:0c:ef:59:ed:0c:
db:61:1e:d7:bb:b6:28:69:c0:19:a7:8f:75:3b:ae:
a1:d9:45:bb:5c:13:b0:b1:c4:03:ab:dc:ca:4b:b8:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:13:3C:B8:DF:68:DB:D3:A9:0A:5D:6E:DB:AF:19:6B:E6:E8:79
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.175.16.0/22
147.111.0.0/16
185.45.36.0/22
IPv6:
2a01:79e0::/32
Signature Algorithm: sha256WithRSAEncryption
32:34:c5:36:5a:80:22:70:31:e3:8b:34:f1:20:a3:28:19:15:
34:4e:c5:db:13:92:38:22:71:d9:f1:24:54:0c:e8:04:56:d6:
30:33:fc:16:01:f5:fa:bb:bc:ce:99:84:dc:11:23:58:ee:6e:
da:01:46:45:e0:df:46:ec:d0:ba:c1:da:fc:66:7c:a4:21:52:
24:55:92:79:24:6e:fe:de:20:ea:ca:fc:11:71:48:ec:56:56:
59:e3:8d:dc:ef:04:74:d9:3a:a5:1a:50:7a:f7:23:da:de:b3:
ff:d8:a1:89:59:9c:a1:aa:bc:e2:74:9b:6c:33:05:49:f1:61:
c6:3e:fb:00:85:aa:b0:b6:91:37:de:86:bd:cd:14:cb:a4:6e:
23:f9:6c:09:0d:f1:d0:46:2c:2a:85:20:b9:ea:0e:bf:d4:05:
18:1f:79:34:84:76:77:b5:07:42:16:87:c1:30:72:e6:2b:37:
43:74:0f:52:4b:6c:ed:fb:35:14:12:49:41:e4:c0:57:33:2b:
c0:96:12:56:84:a2:69:7a:19:a7:43:30:da:27:c1:b2:cb:3f:
ff:74:8a:e0:24:0c:e1:9e:7c:b3:55:76:c7:ab:b3:96:a6:61:
79:2f:fc:de:b9:8f:93:9a:59:f6:2b:17:ed:43:92:db:f6:10:
83:fd:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:48 2025 by rpki-client