Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/_MMbboen6fjGZxdl1sjrAWa0F6o.roa
File: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (raw, json)
Hash identifier: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=
Subject key identifier: FC:C3:1B:6E:87:A7:E9:F8:C6:67:17:65:D6:C8:EB:01:66:B4:17:AA
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 0194252145CBFBDBB2FB019158F7B5008F55
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/_MMbboen6fjGZxdl1sjrAWa0F6o.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206382
IP address blocks: 185.186.129.0/24 maxlen: 24
185.186.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:45:cb:fb:db:b2:fb:01:91:58:f7:b5:00:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcc31b6e87a7e9f8c6671765d6c8eb0166b417aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:81:b3:08:37:39:e9:4e:48:36:76:02:ec:
4e:63:63:f3:ea:d5:1b:df:ea:20:0e:7b:00:bb:70:
27:84:10:40:cf:58:9d:59:8d:67:fd:e4:ef:d2:d8:
4e:3a:b2:b9:cf:c1:68:0f:77:24:93:f5:c7:45:1e:
38:db:7e:54:6a:1d:71:71:31:b6:8b:39:b6:67:36:
e5:8a:de:cd:78:e8:6c:60:b3:c3:a2:34:35:6f:7d:
b7:46:08:e6:68:c4:2d:19:90:61:fe:da:04:6e:2c:
95:2c:c0:9b:d7:32:07:fb:c3:14:46:92:e5:73:64:
d3:bd:f5:1f:a5:e2:ae:c0:ca:af:70:99:46:2d:04:
cf:f1:23:51:73:fc:fc:8b:df:63:ba:6d:10:65:aa:
a8:fa:f3:e1:d1:dc:17:71:26:70:dc:db:4c:e6:b6:
72:f5:e6:e6:4b:fd:44:48:53:f0:04:b1:02:1e:2c:
7a:c1:92:8c:c6:97:2e:6b:23:38:49:7c:85:0e:37:
7d:93:54:e5:b5:0e:e8:9a:d4:43:ff:f4:69:89:d6:
25:de:b9:9f:48:ac:c5:53:7f:2c:31:a8:ae:bd:a3:
4d:22:95:6e:4c:19:53:9a:36:5f:63:5b:93:18:12:
c5:06:94:ad:08:5e:01:3c:e9:17:5e:52:ac:9e:2c:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:1B:6E:87:A7:E9:F8:C6:67:17:65:D6:C8:EB:01:66:B4:17:AA
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/_MMbboen6fjGZxdl1sjrAWa0F6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.129.0-185.186.131.255
Signature Algorithm: sha256WithRSAEncryption
c8:61:bc:75:e6:6c:ca:44:78:01:c4:97:a2:2d:aa:8c:cb:73:
e0:14:67:cd:21:99:12:08:34:a3:38:fb:88:4c:75:a6:30:a3:
e7:1e:2c:e4:a0:34:e5:23:36:7c:6a:c1:cc:78:24:25:70:a9:
94:97:fa:92:ab:94:85:43:b3:c0:b0:f1:2d:b7:16:71:fb:05:
a0:7d:3b:6c:14:83:6a:e0:55:e8:9e:52:80:18:9f:e5:d9:49:
24:c5:c0:03:4e:d0:25:6c:c9:2f:18:52:f5:7b:06:2c:7f:23:
54:bd:6c:48:48:03:ef:13:79:63:48:fd:1e:12:43:00:1f:fa:
87:95:ae:0d:e7:47:19:21:f6:62:d3:4b:62:45:8d:05:ff:5b:
a9:8e:24:f6:43:ec:fb:43:e6:2d:e0:1e:16:06:ce:c4:b3:06:
6b:d1:49:6f:01:ad:f2:2a:b7:72:54:5b:bc:d1:be:72:88:d4:
aa:02:b6:b8:21:f2:95:b5:45:48:79:5a:52:0a:08:2b:bd:97:
8c:c5:84:1f:76:cc:af:6f:b1:ba:4b:51:ab:58:25:73:08:6a:
df:73:c8:b7:13:db:8b:3b:40:1a:03:f4:39:d9:c5:11:6d:d7:
ef:29:25:29:54:1c:81:3f:49:91:4c:2c:0d:97:bc:9f:a6:e8:
19:e5:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:55:28 2025 by rpki-client