Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/MkhY8Wq6vpbqUA8JYFIfnWPN1Xc.roa
File: MkhY8Wq6vpbqUA8JYFIfnWPN1Xc.roa (raw, json)
Hash identifier: P1izD/bPbpYCMheG0o/h8Q5qxusjF76rS35X5Ps2VoI=
Subject key identifier: 32:48:58:F1:6A:BA:BE:96:EA:50:0F:09:60:52:1F:9D:63:CD:D5:77
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 01944F8673C674FB7FF182E1DFE1A93A2FEC
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/MkhY8Wq6vpbqUA8JYFIfnWPN1Xc.roa
Signing time: Fri 10 Jan 2025 09:23:19 +0000
ROA not before: Fri 10 Jan 2025 09:23:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8899
IP address blocks: 46.245.216.0/21 maxlen: 21
94.31.64.0/18 maxlen: 23
94.31.67.0/24 maxlen: 24
94.31.68.0/22 maxlen: 22
94.31.72.0/22 maxlen: 22
94.31.80.0/20 maxlen: 20
94.31.92.0/23 maxlen: 23
94.31.94.0/23 maxlen: 23
94.31.96.0/20 maxlen: 20
94.31.108.0/22 maxlen: 22
94.31.112.0/23 maxlen: 23
94.31.114.0/23 maxlen: 23
94.31.116.0/22 maxlen: 22
150.5.0.0/18 maxlen: 24
185.7.196.0/22 maxlen: 22
185.22.44.0/22 maxlen: 22
185.22.44.0/24 maxlen: 24
185.22.45.0/24 maxlen: 24
185.22.140.0/22 maxlen: 22
185.113.120.0/22 maxlen: 22
185.158.40.0/22 maxlen: 22
185.158.41.0/24 maxlen: 24
2a00:1f38::/32 maxlen: 32
2a00:6020::/32 maxlen: 32
2a00:6020:0:21::/64 maxlen: 64
2a00:61e0::/32 maxlen: 32
2a03:fc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:86:73:c6:74:fb:7f:f1:82:e1:df:e1:a9:3a:2f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Jan 10 09:23:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=324858f16ababe96ea500f0960521f9d63cdd577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:17:b8:ad:c5:66:95:0c:f7:83:ce:38:66:
0a:f9:2f:ce:fc:80:d0:af:2e:c5:9c:f3:22:c1:d0:
1f:84:70:ec:a9:e7:e4:ac:d3:6e:79:09:57:c4:9f:
7e:8a:87:5f:59:b8:f1:40:98:7f:ad:be:32:1a:60:
28:ba:d0:11:2c:27:e2:09:9f:a5:c1:c8:03:14:25:
45:92:0d:d9:d1:d7:68:97:87:de:1d:45:4f:59:aa:
db:73:3e:1d:81:07:12:9a:fa:bd:81:63:61:26:52:
ee:d9:56:1a:27:01:23:e1:7b:3e:03:61:00:01:b4:
60:96:8c:9a:5c:47:14:9c:d6:e1:48:47:cb:1b:03:
19:9e:33:88:1e:4b:62:04:74:05:48:7c:73:ba:47:
3f:41:0e:c1:93:99:0b:7d:f9:a9:33:cb:68:60:6a:
e7:3d:56:da:55:2d:07:ac:46:96:af:c6:4b:a7:7e:
d8:cc:fc:a6:23:96:a8:a4:39:eb:5b:aa:a1:b2:e2:
48:98:66:34:ff:93:c4:cf:1e:27:00:27:48:c8:ee:
a0:0a:13:e3:00:57:9d:51:0e:25:94:3e:d6:df:34:
0c:be:24:e3:22:d8:6d:c0:4e:20:01:55:0b:c8:07:
af:db:48:4b:ff:51:b7:30:16:c4:1b:58:7a:08:2f:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:48:58:F1:6A:BA:BE:96:EA:50:0F:09:60:52:1F:9D:63:CD:D5:77
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/MkhY8Wq6vpbqUA8JYFIfnWPN1Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.216.0/21
94.31.64.0/18
150.5.0.0/18
185.7.196.0/22
185.22.44.0/22
185.22.140.0/22
185.113.120.0/22
185.158.40.0/22
IPv6:
2a00:1f38::/32
2a00:6020::/32
2a00:61e0::/32
2a03:fc0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:f7:e6:11:b4:56:f2:21:d1:8b:a1:d8:5f:32:c5:c1:e8:3e:
e7:43:77:af:52:4e:fb:aa:2a:21:a5:35:8f:5d:ac:50:da:2f:
0a:ca:0d:89:de:ce:65:a5:0f:3e:6c:e5:99:95:ba:f2:16:37:
2c:02:00:a7:6c:44:ce:2b:da:a1:73:30:a5:90:43:16:cb:21:
43:4f:20:35:49:b8:fc:66:19:b3:f3:8d:96:9a:c3:06:68:2b:
36:e5:ae:1d:b0:bd:13:09:af:c2:46:c6:81:6c:93:e0:4f:1a:
70:66:97:6f:20:bb:e4:30:f5:da:5f:01:11:a5:4f:64:2d:60:
4b:c4:59:95:f5:32:ce:46:6d:ab:e7:d8:92:0f:5a:6e:ef:af:
62:5d:ed:55:02:d2:55:85:96:7b:0a:cf:20:dc:51:c6:70:f2:
2e:0c:85:69:b3:db:21:34:27:c2:db:ae:e6:ee:33:7d:d5:43:
56:9f:57:6e:01:be:0a:21:d4:bc:f1:7e:2f:59:4a:38:fc:73:
12:9b:1b:05:1d:ba:67:a1:27:93:4b:33:9f:06:c4:53:33:9b:
5c:a3:73:94:90:87:de:eb:26:4a:79:60:ac:8d:85:94:58:d8:
45:33:c2:90:0c:ab:cf:4f:9a:3d:7d:1e:0c:10:50:16:cc:52:
cd:48:2a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:31 2025 by rpki-client