Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/MT9vPInoaysz5wep7peoXlzT3YM.roa
File: MT9vPInoaysz5wep7peoXlzT3YM.roa (raw, json)
Hash identifier: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=
Subject key identifier: 31:3F:6F:3C:89:E8:6B:2B:33:E7:07:A9:EE:97:A8:5E:5C:D3:DD:83
Certificate issuer: /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial: 01941FFA0B99CECF5D735741DC96A0323C46
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/MT9vPInoaysz5wep7peoXlzT3YM.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205805
IP address blocks: 185.246.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0b:99:ce:cf:5d:73:57:41:dc:96:a0:32:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=313f6f3c89e86b2b33e707a9ee97a85e5cd3dd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:bc:d3:5a:e2:4a:37:1e:6c:b9:48:18:ab:
0d:13:ab:0c:38:65:ef:f9:a5:8b:8a:b6:af:aa:f7:
34:8f:fd:2c:cd:ba:35:a8:60:3c:74:08:03:1f:90:
d2:9d:a4:64:e5:21:6f:66:07:53:d3:cd:3b:f6:ca:
bf:68:22:4b:b8:fc:b9:b9:84:ea:78:5c:18:33:f1:
dc:08:78:a4:8f:06:4d:4d:ec:84:b0:d7:6d:75:03:
61:73:15:87:c6:95:f9:3c:58:de:15:14:44:07:52:
4b:98:ef:42:16:0b:6e:56:1b:4f:22:89:2b:17:df:
19:22:54:b5:a5:c3:50:82:d7:ce:c1:36:e3:d5:b2:
a3:34:ba:3e:b3:88:74:77:15:16:0e:b4:e2:c2:4e:
7f:17:54:d0:85:9f:c3:7c:cf:d3:a6:68:99:83:b2:
29:5e:d0:50:58:60:96:ed:68:d6:c7:32:ca:94:12:
96:9e:62:a2:80:fd:4c:86:3c:ab:57:14:2d:3b:a0:
0b:d6:66:7a:79:ec:ab:bb:75:c0:83:0d:69:e5:3d:
79:37:fb:9b:fe:72:b8:4f:51:1c:9f:7c:11:01:f0:
76:f5:81:f1:77:80:23:78:80:ba:b2:52:ed:0f:77:
0d:a1:c8:76:24:d3:1f:b7:bb:89:b7:e2:a7:d8:47:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:6F:3C:89:E8:6B:2B:33:E7:07:A9:EE:97:A8:5E:5C:D3:DD:83
X509v3 Authority Key Identifier:
keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/MT9vPInoaysz5wep7peoXlzT3YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:30:ee:0d:66:fc:cb:7f:29:a6:b9:72:60:ee:ab:86:ed:fe:
68:47:53:d4:bd:ff:95:fe:61:08:6c:2b:f3:c3:88:31:98:f1:
ba:59:f2:85:73:c9:31:6a:d4:c1:92:92:2c:e0:b4:86:de:cd:
67:af:e6:fc:6e:b1:f7:4a:92:05:5a:b1:a3:12:9b:e3:bd:a1:
88:c0:5e:f4:81:e4:32:18:9d:d5:9e:10:65:ab:00:5e:40:83:
48:b5:4a:8c:f9:cc:c3:ba:bc:14:b4:89:7d:9f:af:2c:16:89:
d3:e1:ba:19:9b:d9:ef:c8:55:69:6e:80:ca:b5:3d:23:3a:84:
e4:73:e7:ca:76:31:d7:4c:34:1a:05:37:50:48:20:af:5c:09:
ea:c6:49:ea:1a:fa:de:6d:1b:79:6f:85:6e:0f:9b:20:e3:b0:
27:58:da:76:1c:70:a7:91:29:33:2e:d5:be:21:2b:22:da:8e:
2d:0f:25:14:21:39:59:4a:43:f3:63:aa:23:37:d0:0d:37:0c:
e5:9d:45:d4:98:ab:cc:a9:d8:0a:66:63:fd:2b:71:36:0a:6e:
8b:77:19:48:08:4b:c5:a2:7a:f1:82:da:3a:c6:49:4f:56:05:
e9:67:b8:14:1f:b6:89:59:fd:3b:a7:56:cb:de:25:2a:e0:a0:
d6:c2:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:35 2025 by rpki-client