Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa
File: Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa (raw, json)
Hash identifier: EI7XvBXkkd55hdBHcnfva3vB3xf9LKxoCK2MkhKmBG0=
Subject key identifier: 32:9D:BA:48:30:48:BE:05:6A:67:65:06:26:8B:68:25:41:6B:41:86
Certificate issuer: /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial: 019425214BCC3A89E464717710295F059768
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57090
IP address blocks: 185.143.28.0/22 maxlen: 24
185.143.29.0/24 maxlen: 24
185.143.30.0/23 maxlen: 24
185.143.31.0/24 maxlen: 24
194.53.208.0/22 maxlen: 24
194.53.209.0/24 maxlen: 24
194.53.210.0/23 maxlen: 24
194.53.211.0/24 maxlen: 24
2001:67c:28f0::/48 maxlen: 48
2a03:a8e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4b:cc:3a:89:e4:64:71:77:10:29:5f:05:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=329dba483048be056a676506268b6825416b4186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:47:48:37:d2:66:ad:b7:d2:fd:e4:d1:37:
ba:89:ec:8f:a4:24:92:55:a2:b3:72:b2:16:65:58:
d6:72:de:d6:aa:8d:54:b4:70:aa:dd:62:bb:0e:0c:
55:c3:a3:49:81:57:da:05:23:2e:02:06:b5:4a:b7:
e0:a1:db:36:15:1b:cb:3f:c1:e5:3f:71:5c:32:3e:
03:1e:9e:63:89:ec:f3:96:ee:16:de:fa:88:c2:85:
75:3a:3e:c1:b1:6a:17:e3:62:6b:33:15:12:99:8f:
00:55:6a:92:40:f7:96:2a:94:c6:ec:fb:2b:01:23:
5b:0f:97:1e:f7:36:15:16:a4:68:82:f0:d1:1e:3a:
fb:93:ef:5a:96:7e:21:86:23:e8:c6:2f:5f:53:d9:
7c:2d:64:9b:98:75:f3:4c:89:9b:dd:9c:83:7f:db:
f6:64:f4:7b:40:1f:50:da:6b:74:2f:0f:c9:7f:e6:
34:b9:65:02:fd:fd:96:cb:2b:cf:4c:ac:11:63:2e:
a4:64:2c:2f:f6:7d:9f:cc:33:14:7e:f2:2f:56:97:
7a:fe:e2:d5:c3:0f:bd:4c:96:0c:24:0e:dc:ab:b4:
7f:69:50:c9:7a:26:44:7d:e6:98:f2:89:0a:e3:4f:
37:c0:84:7c:60:bf:de:81:9e:25:fa:08:a8:f7:b8:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:BA:48:30:48:BE:05:6A:67:65:06:26:8B:68:25:41:6B:41:86
X509v3 Authority Key Identifier:
keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/Mp26SDBIvgVqZ2UGJotoJUFrQYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.28.0/22
194.53.208.0/22
IPv6:
2001:67c:28f0::/48
2a03:a8e0::/32
Signature Algorithm: sha256WithRSAEncryption
49:bc:a6:25:a3:fe:30:47:13:ab:2f:f3:b1:2e:4b:60:c0:8a:
ad:50:4b:6a:e3:07:09:2c:bd:b1:76:90:ef:0b:1e:2c:72:ce:
a2:fb:d9:91:b4:6e:b2:3e:34:a7:4b:7b:89:36:64:3e:1d:b3:
c4:3e:e7:49:5e:49:df:10:be:3f:4c:ff:91:d5:59:15:2b:6e:
3d:4b:5e:4f:3e:de:5d:2b:9c:f8:2a:d0:cd:49:21:37:e4:22:
b0:07:2a:45:af:75:d6:07:3e:e1:95:59:06:66:9e:ae:1a:8a:
49:ae:e6:5d:e9:95:2c:7b:20:ff:ca:8d:d6:ce:52:c2:c0:54:
4d:ce:3e:b5:0b:86:54:33:fc:55:d0:93:e1:96:19:2e:6f:92:
06:60:a3:7d:b3:d5:ed:fb:e4:ea:75:53:4e:76:20:b6:08:f8:
14:e7:9b:c1:7d:64:b9:9e:32:b0:16:2a:83:66:9b:56:1f:79:
8e:ff:fb:f5:d4:28:57:e3:bb:3a:6b:f0:5a:29:8c:98:38:01:
23:30:4c:e4:52:16:4b:18:38:65:d1:1a:c1:76:78:d5:0a:f3:
b4:8b:d0:fd:2f:85:f0:1f:e2:41:0e:38:3e:fc:b9:14:8d:3f:
20:eb:4d:00:a4:7e:46:a7:d9:00:27:96:df:9a:f6:c0:82:db:
c2:7e:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:37:06 2025 by rpki-client