Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/1Mvkcjy8YJu1Gepz9iuHkWX19Jk.roa
File: 1Mvkcjy8YJu1Gepz9iuHkWX19Jk.roa (raw, json)
Hash identifier: aGljfBqjYGm+/GE40YNz+cCvhAsXDiIceTCEARB2KNk=
Subject key identifier: D4:CB:E4:72:3C:BC:60:9B:B5:19:EA:73:F6:2B:87:91:65:F5:F4:99
Certificate issuer: /CN=c485c1c3921e190fbb2a40eb0e0d509f7415a0eb
Certificate serial: 018CC64B6461869D7D07A5B0A12F805AF4C2
Authority key identifier: C4:85:C1:C3:92:1E:19:0F:BB:2A:40:EB:0E:0D:50:9F:74:15:A0:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/1Mvkcjy8YJu1Gepz9iuHkWX19Jk.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62440
IP address blocks: 185.35.129.0/24 maxlen: 24
185.35.128.0/24 maxlen: 24
185.35.128.0/22 maxlen: 22
185.35.131.0/24 maxlen: 24
185.35.130.0/24 maxlen: 24
212.94.30.0/24 maxlen: 24
212.94.29.0/24 maxlen: 24
212.94.25.0/24 maxlen: 24
212.94.31.0/24 maxlen: 24
212.94.27.0/24 maxlen: 24
212.94.26.0/24 maxlen: 24
212.94.28.0/24 maxlen: 24
212.94.16.0/24 maxlen: 24
212.94.16.0/20 maxlen: 20
212.94.17.0/24 maxlen: 24
212.94.23.0/24 maxlen: 24
212.94.22.0/24 maxlen: 24
212.94.18.0/24 maxlen: 24
212.94.24.0/24 maxlen: 24
212.94.20.0/24 maxlen: 24
212.94.19.0/24 maxlen: 24
212.94.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:64:61:86:9d:7d:07:a5:b0:a1:2f:80:5a:f4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c485c1c3921e190fbb2a40eb0e0d509f7415a0eb
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4cbe4723cbc609bb519ea73f62b879165f5f499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:84:f2:cd:7b:24:1a:a2:82:5d:17:f1:35:
72:b6:0d:73:47:d2:0d:02:02:73:a9:39:5c:e1:0d:
e3:78:90:d9:ef:c8:05:8e:db:53:d8:7f:e5:d1:d3:
62:a9:e8:06:af:17:8f:4a:2c:de:63:53:4c:f4:ae:
25:50:ae:c3:e3:a1:a7:18:0a:80:8c:cc:27:d8:15:
12:98:f1:be:72:36:af:a4:6b:37:aa:1b:dc:86:ce:
0d:48:aa:a9:34:b8:da:18:03:55:30:60:32:03:f9:
fc:5a:47:de:74:1e:05:97:19:5f:6b:ce:f6:88:9c:
77:6f:26:6d:94:a7:79:79:e9:ee:79:4e:88:34:99:
a5:34:b7:9d:4e:ac:56:cf:b0:82:bd:73:c6:80:ec:
82:0b:8b:6a:93:bf:a0:48:26:30:53:c4:cf:d6:12:
a9:a7:2d:1e:78:61:ec:b7:b6:d7:d4:e8:c9:62:2d:
85:a2:d5:97:25:d1:89:26:d2:fb:29:af:ea:77:94:
84:17:9e:62:de:57:a7:ba:4c:79:a2:73:2c:75:a3:
fc:64:65:df:b9:b3:ec:e6:35:9a:43:ec:ed:fb:e8:
14:46:62:ea:b3:09:d1:9a:9e:ac:71:09:d5:b9:25:
5c:36:c4:51:16:8b:ea:8a:28:77:22:f2:9c:af:91:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:E4:72:3C:BC:60:9B:B5:19:EA:73:F6:2B:87:91:65:F5:F4:99
X509v3 Authority Key Identifier:
keyid:C4:85:C1:C3:92:1E:19:0F:BB:2A:40:EB:0E:0D:50:9F:74:15:A0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/1Mvkcjy8YJu1Gepz9iuHkWX19Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.128.0/22
212.94.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:49:8a:70:cd:56:4f:71:fa:26:62:8f:19:78:4e:8d:fc:8a:
2e:fb:8a:9c:10:fa:99:5a:79:c4:f2:5d:79:e0:69:23:07:82:
f5:2c:30:b2:fc:18:d4:a1:18:cc:02:e7:cc:c9:5c:c1:d8:2a:
99:6e:90:9c:bc:0b:7e:cc:1e:03:95:c7:df:b4:e2:c3:5a:a4:
c9:b1:81:ae:63:ab:2a:b6:6d:80:b9:88:f2:4f:71:05:3e:32:
5e:4b:37:b4:58:52:21:56:2a:4a:64:58:b9:15:fe:ca:37:c3:
7d:84:f0:ff:04:19:df:23:c5:cb:12:06:a2:76:fc:b2:44:a3:
fa:04:d2:af:d3:a2:7b:4c:f0:da:5d:63:ce:aa:a9:f3:d0:62:
94:13:1e:a3:15:fb:c2:9a:2e:66:2b:48:d1:98:94:ef:aa:5f:
b3:8e:32:2e:3f:b6:bc:02:34:f6:c5:3c:d3:07:64:e5:cd:1a:
8e:46:e2:6e:24:31:b4:40:0f:9f:04:59:de:70:f5:73:53:c3:
27:4e:fd:ac:b5:bf:e9:ba:c5:b6:5b:5c:18:29:81:9e:8c:bb:
64:a5:8f:98:0e:34:bb:dc:fd:11:60:94:57:e0:46:ef:9d:fb:
6f:32:e3:ce:10:1d:9f:9e:a5:ef:56:2b:6c:4f:44:4e:66:b8:
b7:b3:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:17 2025 by rpki-client