Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/4in_MuHKKTofxeC0GNnkZQgqzos.roa
File: 4in_MuHKKTofxeC0GNnkZQgqzos.roa (raw, json)
Hash identifier: UqmJZKo8HH99QGUUYifQW7Jr1FD5FrWiTWus6JXbUPs=
Subject key identifier: E2:29:FF:32:E1:CA:29:3A:1F:C5:E0:B4:18:D9:E4:65:08:2A:CE:8B
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019424B3D1CE1A819A4247B9FAC436206A0B
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/4in_MuHKKTofxeC0GNnkZQgqzos.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 185.85.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d1:ce:1a:81:9a:42:47:b9:fa:c4:36:20:6a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e229ff32e1ca293a1fc5e0b418d9e465082ace8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:bd:17:d4:a7:c3:89:8d:5d:d8:f1:12:f4:
bd:37:42:10:f8:87:f5:a6:cd:b7:60:9e:63:be:45:
99:49:d9:eb:ff:df:28:9d:09:1a:a2:8b:22:f7:2a:
d9:c5:19:ba:61:df:cc:1f:3e:d2:3a:49:d3:a7:3c:
11:7d:08:3b:51:2b:27:ff:7d:46:93:ba:ce:49:51:
e5:40:8a:3b:72:b2:08:e9:e8:e6:56:3b:1b:ce:9e:
f6:15:e0:9b:c0:5a:80:7c:a5:33:b7:f2:f3:bd:fa:
fe:87:ff:6f:c7:f3:86:4a:ec:9e:d6:37:a3:4a:a3:
00:cb:af:bd:94:72:7b:33:37:70:e2:fa:ed:ca:ab:
5c:24:e5:7c:f6:d7:0b:9e:6e:6e:c4:b4:b6:af:f7:
0a:38:96:70:47:11:84:f2:01:54:53:87:b2:97:d1:
10:4b:c6:a9:75:d3:1b:7d:9f:5d:63:95:66:9a:5c:
b6:f9:f1:27:6b:df:55:c1:cf:80:6b:37:42:ba:18:
b8:4e:ae:39:90:ea:f1:a5:77:7b:64:be:a8:66:14:
84:a1:11:a7:b7:7f:30:8d:68:ac:ce:b8:50:ed:4e:
87:72:b0:f4:38:94:1c:7f:9f:a9:c4:da:65:b8:28:
d8:22:9f:82:e9:6b:c5:a3:e8:d7:d3:0b:9a:a8:a0:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:29:FF:32:E1:CA:29:3A:1F:C5:E0:B4:18:D9:E4:65:08:2A:CE:8B
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/4in_MuHKKTofxeC0GNnkZQgqzos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.128.0/22
Signature Algorithm: sha256WithRSAEncryption
95:0e:a4:5f:6b:95:f3:77:26:3a:a4:6e:b5:b4:3e:15:b7:95:
89:19:cd:0b:96:e7:65:25:61:d2:cc:89:1f:51:d9:0e:3c:a4:
00:0c:26:e3:28:4b:1b:1a:80:07:9f:3d:28:13:f9:47:e8:f1:
45:4f:48:4f:ac:f7:d0:33:68:32:97:23:c0:32:d8:c0:c0:b0:
f2:46:05:5d:bf:45:a4:c4:36:5b:be:fe:d7:6b:7d:97:5a:36:
25:dd:e7:30:bb:8b:ab:b1:72:7b:92:33:0b:88:79:fe:d6:c4:
d6:5f:a5:1a:ba:ce:20:76:3a:15:16:1c:89:92:f9:60:d7:09:
a6:fe:e0:d6:91:05:ee:4f:01:67:0a:aa:1d:1c:93:1e:81:ce:
b5:ab:49:7c:5c:eb:1e:a2:ae:37:2c:6d:6e:5c:92:2d:13:b6:
a5:b0:f6:3a:04:8b:01:1d:1e:4e:b0:bc:98:e1:ee:e0:3a:5e:
c5:d7:24:f3:6e:a3:b0:93:e3:f3:12:88:7d:eb:09:91:be:57:
95:c9:75:2f:ac:c9:2c:d1:8a:52:90:fc:fb:0d:9e:d1:f9:a7:
8d:fa:bf:3b:92:d4:ef:99:7c:d5:a9:27:27:1d:7c:09:dd:ad:
ed:4a:94:96:a4:76:1d:9f:a9:f2:fe:59:5d:47:c6:d2:54:d9:
aa:93:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:13 2025 by rpki-client