Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/2MQH2kgzZx-iz0uzyQvjNP6NZKs.roa
File: 2MQH2kgzZx-iz0uzyQvjNP6NZKs.roa (raw, json)
Hash identifier: 6psrdA3QAHlOiAt8PxOccfZJ3IkT0VS11C37ojgqkDg=
Subject key identifier: D8:C4:07:DA:48:33:67:1F:A2:CF:4B:B3:C9:0B:E3:34:FE:8D:64:AB
Certificate issuer: /CN=680121b199b291de7763d8c1caa7b3cdc3561810
Certificate serial: 0190C0B1C638E31DFCCE6B9BD29C10D2F425
Authority key identifier: 68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/2MQH2kgzZx-iz0uzyQvjNP6NZKs.roa
Signing time: Wed 17 Jul 2024 12:36:34 +0000
ROA not before: Wed 17 Jul 2024 12:36:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138997
IP address blocks: 185.128.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:b1:c6:38:e3:1d:fc:ce:6b:9b:d2:9c:10:d2:f4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680121b199b291de7763d8c1caa7b3cdc3561810
Validity
Not Before: Jul 17 12:36:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c407da4833671fa2cf4bb3c90be334fe8d64ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:f3:40:b7:0e:6b:4c:fe:dd:15:3b:3a:d8:
fb:70:46:60:d1:06:d0:e1:bf:ac:94:13:05:65:f2:
26:66:65:67:66:f4:03:1c:7d:2c:64:3a:f7:39:03:
8c:ba:0f:b4:05:1b:de:f3:29:79:23:53:bf:80:9d:
f4:df:5c:45:9c:ec:95:c6:9d:14:ff:aa:c1:c1:6f:
bc:7d:75:12:22:5e:22:40:4c:2e:02:9b:be:3f:11:
4a:73:40:1f:7a:b6:22:49:90:b6:ca:b8:fb:ee:46:
5c:38:5c:7d:f4:02:06:46:80:6e:cb:2b:7f:e0:d9:
6e:3b:98:f2:70:8f:ea:b0:4c:68:6c:69:fa:6c:aa:
c2:4c:a8:86:68:c2:73:3d:60:1f:01:ff:cf:46:e3:
8a:05:36:61:c5:9c:a6:4f:50:30:af:6f:10:8e:5d:
9a:3b:a0:ce:7d:88:15:26:b2:0a:5e:30:7e:72:26:
a2:73:44:46:f7:4e:35:26:1f:02:f6:0d:b2:c0:53:
76:2b:48:a8:f3:a0:a2:dc:10:f0:d7:ad:52:88:64:
a7:7d:72:15:9f:84:b0:b4:f6:3e:aa:53:38:84:f2:
b7:02:07:15:30:0b:c0:ea:51:67:fd:d4:11:ed:56:
e2:6d:0e:1d:47:2d:ed:bc:31:21:c0:ef:cf:39:62:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:07:DA:48:33:67:1F:A2:CF:4B:B3:C9:0B:E3:34:FE:8D:64:AB
X509v3 Authority Key Identifier:
keyid:68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/2MQH2kgzZx-iz0uzyQvjNP6NZKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f4:91:f6:00:29:b7:f0:5e:f2:c1:e4:82:fa:a9:78:26:94:
b7:b0:79:be:80:ec:2a:5f:fe:26:c4:1b:26:c3:55:68:a7:25:
cf:61:f7:e3:bc:e8:09:5b:e2:b3:4a:52:41:00:b7:5b:8c:7f:
e4:b3:89:05:35:4e:6c:9f:37:38:64:db:d1:a2:62:db:14:7b:
42:ab:0f:4e:ce:07:d6:76:4f:f7:41:2b:68:7e:e7:5b:f4:1e:
d7:08:e6:e8:a0:39:14:90:cf:e1:47:3c:ca:b3:97:61:54:a8:
8c:65:de:5b:b8:58:90:1c:0d:02:89:4b:d8:f7:84:6f:cd:1b:
f9:4c:93:d0:eb:09:0a:70:f7:bd:45:01:2c:80:40:76:f6:cd:
06:da:a4:01:2d:64:fb:44:e3:40:27:23:89:2e:23:d9:d8:06:
34:81:8c:b6:fd:39:b8:98:be:ca:54:5c:71:de:a6:67:84:71:
6e:62:f7:21:6d:42:a2:5a:24:a0:5f:e5:6b:5d:25:6e:23:84:
15:84:88:4c:b0:73:cc:f0:5e:13:3c:fd:21:e7:96:07:e1:5c:
b0:66:75:ec:df:c6:56:fe:c6:63:11:af:53:70:db:ca:c4:f7:
cc:b9:87:bf:92:b4:66:a4:bc:e2:2b:d8:12:1e:d2:05:e0:04:
33:2c:06:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDAscY44x38zmub0pwQ0vQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MDEyMWIxOTliMjkxZGU3NzYzZDhjMWNhYTdiM2NkYzM1
NjE4MTAwHhcNMjQwNzE3MTIzNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGM0MDdkYTQ4MzM2NzFmYTJjZjRiYjNjOTBiZTMzNGZlOGQ2NGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AbzQLcOa0z+3RU7Otj7cEZg0QbQ
4b+slBMFZfImZmVnZvQDHH0sZDr3OQOMug+0BRve8yl5I1O/gJ3031xFnOyVxp0U
/6rBwW+8fXUSIl4iQEwuApu+PxFKc0AferYiSZC2yrj77kZcOFx99AIGRoBuyyt/
4NluO5jycI/qsExobGn6bKrCTKiGaMJzPWAfAf/PRuOKBTZhxZymT1Awr28Qjl2a
O6DOfYgVJrIKXjB+ciaic0RG9041Jh8C9g2ywFN2K0io86Ci3BDw161SiGSnfXIV
n4SwtPY+qlM4hPK3AgcVMAvA6lFn/dQR7VbibQ4dRy3tvDEhwO/POWJC/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjEB9pIM2cfos9Ls8kL4zT+jWSrMB8GA1UdIwQY
MBaAFGgBIbGZspHed2PYwcqns83DVhgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUFFaHNabXlrZDUzWTlqQnlxZXp6Y05XR0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yZGNlZTctYjBjNS00MWM4LWEzNmMt
YmFkZDFjZDJkY2VjLzEvMk1RSDJrZ3paeC1pejB1enlRdmpOUDZOWktzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8yZGNlZTctYjBjNS00MWM4LWEzNmMtYmFkZDFjZDJkY2Vj
LzEvYUFFaHNabXlrZDUzWTlqQnlxZXp6Y05XR0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYDiMA0G
CSqGSIb3DQEBCwUAA4IBAQBp9JH2ACm38F7yweSC+ql4JpS3sHm+gOwqX/4mxBsm
w1VopyXPYffjvOgJW+KzSlJBALdbjH/ks4kFNU5snzc4ZNvRomLbFHtCqw9OzgfW
dk/3QStofudb9B7XCObooDkUkM/hRzzKs5dhVKiMZd5buFiQHA0CiUvY94RvzRv5
TJPQ6wkKcPe9RQEsgEB29s0G2qQBLWT7RONAJyOJLiPZ2AY0gYy2/Tm4mL7KVFxx
3qZnhHFuYvchbUKiWiSgX+VrXSVuI4QVhIhMsHPM8F4TPP0h55YH4VywZnXs38ZW
/sZjEa9TcNvKxPfMuYe/krRmpLziK9gSHtIF4AQzLAZo
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:21:00 2025 by rpki-client