Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa
File: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (raw, json)
Hash identifier: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=
Subject key identifier: 98:46:BB:72:2F:46:C6:C7:26:46:C9:3E:A0:D7:27:5F:FB:47:D5:6B
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0194228D639D8AE8AD5897B9CC17DC182D6E
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204139
IP address blocks: 185.110.0.0/23 maxlen: 23
185.110.2.0/24 maxlen: 24
185.110.3.0/24 maxlen: 24
185.116.174.0/24 maxlen: 24
185.122.124.0/23 maxlen: 23
185.122.126.0/23 maxlen: 23
185.122.128.0/23 maxlen: 23
185.123.240.0/23 maxlen: 23
185.123.242.0/23 maxlen: 23
185.123.248.0/22 maxlen: 22
185.123.252.0/22 maxlen: 22
185.127.44.0/23 maxlen: 23
185.127.46.0/23 maxlen: 23
185.128.134.0/23 maxlen: 23
185.128.176.0/23 maxlen: 23
185.128.178.0/23 maxlen: 23
185.129.20.0/23 maxlen: 23
185.129.22.0/23 maxlen: 23
185.132.8.0/23 maxlen: 23
185.132.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:63:9d:8a:e8:ad:58:97:b9:cc:17:dc:18:2d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9846bb722f46c6c72646c93ea0d7275ffb47d56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:3e:91:1a:40:b7:37:cf:f0:87:c2:e1:e9:
49:79:21:0a:2e:2c:7c:7d:a2:17:10:c9:52:87:f5:
ba:ca:b7:f2:67:b7:07:d9:67:66:bb:5f:6f:ca:76:
ba:7f:d7:a3:a6:a3:72:69:d0:b1:95:26:d1:dd:ea:
ff:8f:f7:50:6a:c6:80:fc:8a:c8:ee:05:be:62:83:
aa:18:28:a5:85:0a:04:f8:7e:51:0a:99:58:55:02:
48:cd:db:95:72:75:13:10:70:01:eb:4c:76:be:93:
1d:5c:dd:72:1d:ff:73:6d:39:3e:41:12:9a:e9:2c:
b8:c2:af:f7:0a:9f:c6:bc:3e:18:a6:5e:b4:38:7b:
59:88:6d:e7:66:bc:1b:f7:f7:0e:74:83:34:68:d9:
96:c5:74:52:2c:12:c1:2a:98:b3:6b:1d:9e:1b:51:
d7:f1:ae:b1:51:67:36:db:8c:db:40:4f:12:1a:66:
e8:89:ac:17:4f:c6:4c:ee:c4:e9:6c:9a:dd:6e:d9:
22:b9:1d:be:a5:18:bf:51:b1:89:31:85:9a:8b:72:
0d:7b:d6:fd:55:91:2b:78:0f:88:e9:13:21:05:91:
4f:c2:fc:23:69:55:16:12:c3:84:c6:12:be:3b:4b:
97:83:ee:0e:00:38:b2:48:d1:47:c3:2e:b6:91:f3:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:BB:72:2F:46:C6:C7:26:46:C9:3E:A0:D7:27:5F:FB:47:D5:6B
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.0.0/22
185.116.174.0/24
185.122.124.0-185.122.129.255
185.123.240.0/22
185.123.248.0/21
185.127.44.0/22
185.128.134.0/23
185.128.176.0/22
185.129.20.0/22
185.132.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:6a:df:63:e7:62:93:3e:7b:f9:ea:f9:94:4f:7c:83:ad:fa:
ff:80:60:33:eb:36:0f:6f:bb:1d:3f:ca:af:a7:f5:3b:58:04:
3f:dc:f0:cb:d3:2f:e3:d4:1f:96:52:75:4c:1c:67:79:7a:af:
07:08:f0:a3:70:22:33:54:6b:04:1a:14:95:ae:b4:c4:d3:68:
0b:89:11:8b:43:f5:04:ce:c5:3d:0a:ae:45:d4:5a:c2:66:7c:
b5:e2:b4:9c:d4:7e:2f:25:f3:f2:41:6c:3f:92:23:e5:c7:d4:
c1:ad:07:9e:a9:b2:1a:fb:d9:76:a1:89:8f:c6:9c:37:47:e0:
39:73:bf:9d:39:e8:c3:c4:d8:0f:69:ac:67:b1:75:33:71:92:
d6:a4:f1:92:7c:4e:9f:46:46:31:27:db:de:2c:ca:2f:e1:f9:
4c:72:4f:a3:88:1b:a1:4f:47:ea:d7:a8:b1:c6:f2:df:5b:e3:
32:a8:9f:de:1f:58:4e:66:92:b4:8a:3a:31:b9:6f:7d:2f:0a:
0e:89:1f:62:34:6a:ce:f2:29:06:ec:34:d5:50:a1:ea:4e:7d:
c5:b5:aa:47:58:7c:20:d5:55:d6:67:a4:eb:4a:2d:62:92:c8:
a2:c4:70:de:57:7c:2b:d0:51:b6:c5:07:ef:43:32:f1:fb:8c:
f4:5a:5c:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:49 2025 by rpki-client