Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/MEAkdZUly6pmlRGy9tjcJy4HYWM.roa
File: MEAkdZUly6pmlRGy9tjcJy4HYWM.roa (raw, json)
Hash identifier: AlmI7g0v70LUtvS/pZrDij+xZBD42RbEZgm7eDTI0QA=
Subject key identifier: 30:40:24:75:95:25:CB:AA:66:95:11:B2:F6:D8:DC:27:2E:07:61:63
Certificate issuer: /CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Certificate serial: 03F0B5
Authority key identifier: 7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/MEAkdZUly6pmlRGy9tjcJy4HYWM.roa
Signing time: Fri 18 Feb 2022 12:01:53 +0000
ROA not before: Fri 18 Feb 2022 12:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59460
IP address blocks: 91.241.32.0/22 maxlen: 22
91.241.32.0/24 maxlen: 24
91.241.33.0/24 maxlen: 24
91.241.34.0/24 maxlen: 24
91.241.35.0/24 maxlen: 24
185.135.192.0/22 maxlen: 22
185.135.192.0/24 maxlen: 24
185.135.193.0/24 maxlen: 24
185.135.194.0/24 maxlen: 24
185.135.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258229 (0x3f0b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Validity
Not Before: Feb 18 12:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=304024759525cbaa669511b2f6d8dc272e076163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:56:49:e1:5b:72:ad:0a:2d:87:5f:3d:84:
72:41:f5:e1:c9:48:68:4b:67:b3:b7:d9:3e:54:97:
5b:16:f4:b3:ad:de:29:46:12:eb:16:a8:fb:ca:f0:
5a:7f:32:21:1f:e5:02:e2:b2:ff:76:3d:5f:ab:8d:
6b:90:49:64:4f:82:2b:01:c7:28:6b:21:da:23:36:
0d:de:35:4f:44:24:8c:91:49:0c:08:cc:b2:6c:52:
9a:df:a0:ac:28:61:02:f0:2c:8c:70:45:8d:82:47:
79:c1:51:e6:47:4a:f6:32:02:73:b2:d6:b0:73:c6:
dd:b0:21:da:31:50:dd:b9:dc:5c:d5:80:8e:fe:83:
6d:f4:3d:f8:65:5b:84:a5:93:12:c5:1e:78:5f:33:
fa:e0:e6:2b:71:7d:8c:44:50:d3:8b:87:c5:bd:a7:
01:a5:1b:99:47:8a:eb:b1:2c:20:e8:87:19:4d:bd:
b1:c8:7b:0e:07:b3:9f:ed:9a:77:87:b4:00:8d:1b:
3a:75:73:c0:d9:1d:66:23:1d:55:72:61:81:64:87:
6c:11:99:0f:27:d2:48:50:b6:6d:95:c8:82:06:1c:
84:ed:2a:63:67:df:6a:36:25:3a:d2:fe:11:ba:5e:
5c:d8:17:33:40:da:60:45:2b:42:92:a7:22:da:d5:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:40:24:75:95:25:CB:AA:66:95:11:B2:F6:D8:DC:27:2E:07:61:63
X509v3 Authority Key Identifier:
keyid:7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/MEAkdZUly6pmlRGy9tjcJy4HYWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.32.0/22
185.135.192.0/22
Signature Algorithm: sha256WithRSAEncryption
67:37:ab:ad:c0:a8:0d:9c:f3:91:27:41:11:66:15:e6:af:79:
a0:e5:b3:23:1d:ec:6a:f0:c2:ea:89:a7:ac:77:89:2a:84:19:
9c:49:a1:c4:30:a7:20:7d:c3:04:3b:73:f9:ab:3a:06:e5:2f:
ee:2e:ed:1e:08:db:8d:92:ad:ab:33:14:a0:46:60:e7:e0:2a:
b3:b5:e3:40:e4:88:c1:d6:43:59:03:ba:54:20:bf:8e:c8:ba:
7c:f7:13:f1:c3:cc:65:22:0f:a1:e3:8b:93:f4:23:ff:dc:e5:
23:9c:05:1f:5d:c2:90:2f:0c:60:4d:37:b4:84:09:2c:35:f0:
d9:6f:07:82:7c:02:d4:4b:e0:2a:82:4f:c7:c7:80:ac:bd:3b:
92:56:cd:26:e2:3c:5a:29:b1:43:e7:12:48:9e:7d:70:38:9e:
70:23:73:3a:cd:fc:16:d0:66:fd:7b:b7:62:aa:5c:eb:e4:cf:
50:fd:99:9f:aa:74:fd:73:d7:0e:1d:5e:d9:13:26:88:2b:eb:
e0:c0:fd:10:40:8c:9d:48:ff:87:69:fb:4a:80:5e:10:51:e8:
93:ce:e6:cf:b6:28:7c:fc:ce:71:53:ad:4c:1f:1b:1a:cc:9c:
d6:4e:0c:bc:4f:91:9c:00:b4:4b:7f:bc:bd:ec:8d:b2:48:76:
9a:81:4e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:52 2025 by rpki-client