Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/MKj1D95IscsnJcwFu1G_QR6ra0Y.roa
File: MKj1D95IscsnJcwFu1G_QR6ra0Y.roa (raw, json)
Hash identifier: fa1NTOC8gwDd/cU25OwEYI6M+pi4vH6HCYjqk3JwdQU=
Subject key identifier: 30:A8:F5:0F:DE:48:B1:CB:27:25:CC:05:BB:51:BF:41:1E:AB:6B:46
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 019421B1976F976897B6A2C16CACDAD8E779
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/MKj1D95IscsnJcwFu1G_QR6ra0Y.roa
Signing time: Wed 01 Jan 2025 11:47:54 +0000
ROA not before: Wed 01 Jan 2025 11:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.169.181.0/24 maxlen: 24
185.174.22.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:97:6f:97:68:97:b6:a2:c1:6c:ac:da:d8:e7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 11:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30a8f50fde48b1cb2725cc05bb51bf411eab6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:b6:98:bc:15:d8:9c:54:8c:6c:e5:89:fa:
d4:8c:83:80:9b:d8:b1:27:bb:c5:74:dc:07:04:24:
5a:14:d3:78:4b:87:26:25:05:e4:65:30:83:c7:7f:
fa:79:9c:f4:e1:b3:8d:6a:75:ed:60:82:9e:88:8c:
26:a0:bb:31:a5:2f:5d:bb:f2:8c:d4:1f:57:f8:48:
5c:5d:2d:f3:57:1a:59:bb:df:2a:c7:9e:fe:26:ab:
58:90:33:01:9b:0e:ce:23:fd:64:05:52:4a:db:23:
07:b2:d7:0a:4a:dc:83:99:39:1f:28:6a:dc:62:73:
0c:be:36:9c:95:d6:ac:b2:dc:61:1d:bd:ca:df:ea:
4f:15:8d:2c:d7:a6:cf:f9:9b:1a:c5:ce:f8:63:80:
f6:b5:27:9c:cf:b7:67:cf:b5:c3:57:fb:2c:bb:09:
9e:d1:85:1a:63:9d:e0:2d:6e:7e:af:78:28:ab:78:
11:f0:fa:07:06:44:41:51:34:e4:38:bc:f7:b5:44:
5a:c3:1b:23:f4:d5:fd:61:1a:1e:ff:a9:0f:ee:79:
3c:16:d9:75:d7:65:ac:67:dc:55:91:15:a6:6e:6c:
b2:12:80:3d:2f:a1:06:84:b8:cb:af:1d:ba:19:3a:
e5:1c:18:ad:49:d7:81:8c:b9:bd:a4:ca:cd:41:38:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:F5:0F:DE:48:B1:CB:27:25:CC:05:BB:51:BF:41:1E:AB:6B:46
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/MKj1D95IscsnJcwFu1G_QR6ra0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.181.0/24
185.174.22.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:8d:eb:1f:ee:62:07:26:5f:e2:33:44:d4:b6:8a:c3:62:f4:
3b:d6:f7:c1:38:99:e5:84:1f:f5:84:14:8f:14:2d:d0:d9:ff:
a6:43:96:bc:a4:ea:8f:a1:93:de:76:62:0b:c1:a2:fa:58:b3:
90:44:fa:8c:e6:91:a5:86:d7:45:ef:93:38:a9:7d:bd:89:01:
6d:1b:d3:01:06:c8:76:b6:9b:a2:22:67:c6:ca:cb:13:77:d6:
d6:74:5f:a1:75:20:60:d2:b5:de:1f:e7:ac:a1:20:ce:b8:a0:
13:c3:35:72:c9:59:8c:b2:53:8b:96:41:82:dd:55:90:91:48:
8a:c5:fb:96:52:bb:23:66:d5:45:24:bf:85:fc:1e:91:00:a9:
ae:e4:f7:6e:d5:0a:d2:d3:cd:b7:18:96:2c:8f:d5:b0:e4:f2:
95:54:0c:d3:7f:b5:2f:0e:06:4c:33:79:4f:e6:6d:a6:65:f5:
1f:39:fb:29:e4:5b:f2:0e:97:35:43:87:5f:c5:91:6d:44:9b:
26:33:00:f2:2b:76:7b:b7:bc:56:c8:d9:57:48:8c:7f:d0:06:
fc:df:4e:4b:81:83:36:ba:ae:2e:f3:3c:ed:57:5a:71:dd:85:
ea:b6:7c:66:13:92:8c:7f:4f:ee:d2:25:df:a1:3c:b4:cf:ee:
36:a9:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:32:00 2025 by rpki-client