Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mFWcHlcWBe9wYTg69c6ouVugpNw.roa
File: mFWcHlcWBe9wYTg69c6ouVugpNw.roa (raw, json)
Hash identifier: q2ErNp39epQbnTMcpPCyqsqatEdKpJetzV/+N0laYuY=
Subject key identifier: 98:55:9C:1E:57:16:05:EF:70:61:38:3A:F5:CE:A8:B9:5B:A0:A4:DC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7858A0759532B1BCA141F9BDE9D9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mFWcHlcWBe9wYTg69c6ouVugpNw.roa
Signing time: Thu 02 Jan 2025 07:48:10 +0000
ROA not before: Thu 02 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60024
IP address blocks: 37.123.192.0/21 maxlen: 24
82.115.30.0/23 maxlen: 24
185.148.12.0/22 maxlen: 24
185.212.60.0/22 maxlen: 24
185.218.4.0/22 maxlen: 24
212.107.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:78:58:a0:75:95:32:b1:bc:a1:41:f9:bd:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98559c1e571605ef7061383af5cea8b95ba0a4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:c3:c2:de:8b:0b:e0:43:ec:2b:05:3a:11:
36:a0:40:63:28:1e:44:41:39:66:1f:86:d6:b6:11:
9d:47:b9:a5:2d:ef:3d:2e:14:71:e2:66:ad:dc:cf:
29:52:9d:82:17:ad:80:19:4c:e9:5e:1a:5e:04:bd:
c4:76:49:f9:5c:07:60:e2:f4:12:c4:e4:c0:e3:10:
db:1b:d4:76:18:b5:6f:c3:49:13:e7:f1:85:f1:a1:
c6:37:8e:68:d7:67:03:da:eb:5c:61:3f:c4:cc:e1:
88:5d:84:8e:8a:a2:6f:52:50:1e:8f:75:d9:9a:c7:
5c:3f:85:57:1d:f4:65:af:84:2a:49:82:ac:2c:00:
73:f4:43:29:71:1a:c1:2d:10:df:19:2d:61:a3:1e:
ee:aa:2a:40:b8:02:67:d6:1c:e8:f2:2f:e5:d0:b8:
0c:3e:8a:3e:07:91:e0:43:f6:5a:1c:c6:44:75:f2:
f1:5d:58:fa:77:16:36:eb:f5:d9:1e:96:f6:77:72:
09:e4:28:29:cd:b4:16:8c:21:30:65:1f:6c:3f:91:
0d:29:11:36:20:71:27:0d:01:56:40:81:4d:c9:b8:
b7:15:ee:46:77:d0:1c:65:67:76:ac:32:58:50:c3:
77:b5:28:1e:13:fe:01:66:23:e2:b7:e9:ba:09:73:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:55:9C:1E:57:16:05:EF:70:61:38:3A:F5:CE:A8:B9:5B:A0:A4:DC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mFWcHlcWBe9wYTg69c6ouVugpNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.192.0/21
82.115.30.0/23
185.148.12.0/22
185.212.60.0/22
185.218.4.0/22
212.107.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:6a:b9:39:39:89:3c:ad:b5:ed:24:f5:96:23:7a:f8:82:c5:
4b:b7:eb:01:c3:08:01:95:34:b3:1a:4b:e0:28:59:68:27:e4:
5a:f9:07:36:84:6d:13:2e:fc:19:44:cd:ae:17:74:28:87:a9:
60:ee:b7:d9:ed:9c:98:4b:3a:ad:6d:9a:b9:ae:d2:7d:d9:69:
ef:69:0a:da:29:69:2d:e5:de:a8:ee:12:3d:a9:a6:b1:34:f1:
6d:2d:1a:ec:d0:5e:d4:1b:da:70:42:41:8e:04:fd:0b:c3:c5:
0a:2a:ed:92:2b:c6:ce:3c:24:70:20:4a:20:3a:7a:22:d8:46:
05:5b:83:20:92:1e:5a:c6:4e:ff:36:e2:cf:c5:e1:d5:8d:8c:
9b:d8:e9:51:51:61:76:67:21:7e:df:d3:0a:23:c1:ba:e4:e7:
95:9d:28:d2:60:7f:a8:d7:f4:60:85:a4:2b:30:4d:9e:b3:c9:
17:22:ca:f6:04:6d:0c:bf:07:0f:02:c4:1b:4a:cf:80:f2:b5:
91:ec:33:e9:da:56:0c:3e:df:e7:bc:dc:15:24:42:19:aa:b8:
f2:e3:24:72:e2:9d:f4:48:bd:91:58:73:6d:b5:c2:3d:51:5f:
5d:d7:29:d9:28:e9:92:5d:6f:50:87:c0:1f:31:ac:fa:92:a3:
a7:56:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:03 2025 by rpki-client