Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/mkkB-YpG25cP7YMLB0NnIIqxeMQ.roa
File: mkkB-YpG25cP7YMLB0NnIIqxeMQ.roa (raw, json)
Hash identifier: T3sUhGoUDamDIssa512ScKsVlOwp9XbfImMbSWA0XWI=
Subject key identifier: 9A:49:01:F9:8A:46:DB:97:0F:ED:83:0B:07:43:67:20:8A:B1:78:C4
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0335929A
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/mkkB-YpG25cP7YMLB0NnIIqxeMQ.roa
Signing time: Mon 28 Mar 2022 22:37:28 +0000
ROA not before: Mon 28 Mar 2022 22:37:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 193.160.68.0/23 maxlen: 24
176.118.191.0/24 maxlen: 24
185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53842586 (0x335929a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Mar 28 22:37:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a4901f98a46db970fed830b074367208ab178c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:cc:12:24:4c:66:7c:7f:16:16:d7:e5:3e:
64:f3:ab:e7:15:2f:2c:cc:30:ef:0f:c9:2e:9e:5f:
81:94:36:e2:4e:f3:75:e4:42:b5:f6:16:a9:fa:ed:
63:88:21:8a:3d:f1:2b:39:a8:d3:d8:9f:92:8f:b9:
84:d6:18:f2:62:e4:cd:40:f3:c6:8f:c8:2d:fb:01:
e6:81:5d:90:3b:67:b9:bb:e5:5b:c9:f2:f2:24:6c:
25:78:07:0f:71:01:29:b4:0b:95:55:6e:9c:0d:33:
75:a5:bf:ac:3a:ef:d4:5e:ed:24:51:e3:f3:e6:88:
81:20:be:93:d0:65:59:1e:e5:c9:c7:32:67:32:18:
7f:bf:e3:36:08:bb:ba:db:14:cc:17:16:98:a4:7b:
f5:1e:5a:f5:08:f3:ad:c3:cc:20:ce:5e:3c:7f:ed:
76:30:c3:47:9a:48:4f:9b:30:d1:50:09:d9:03:aa:
b2:9a:df:98:da:45:73:32:db:5b:a3:af:d6:1e:dd:
8b:a5:b5:59:40:39:64:d4:f9:7e:6e:dc:cd:f9:0a:
e6:8f:fe:ab:f0:5b:ea:67:23:4a:2f:1f:d0:ed:ae:
ba:66:fe:46:20:84:9a:79:d1:15:b3:39:95:29:03:
15:84:af:c2:56:59:ff:f3:e6:a4:61:af:3b:bb:02:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:49:01:F9:8A:46:DB:97:0F:ED:83:0B:07:43:67:20:8A:B1:78:C4
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/mkkB-YpG25cP7YMLB0NnIIqxeMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.191.0/24
185.177.78.0/23
193.160.68.0/23
Signature Algorithm: sha256WithRSAEncryption
46:41:86:4b:ea:4b:88:db:19:7d:f8:a8:61:af:fe:6a:89:60:
ae:8a:14:e3:99:83:78:ec:c6:70:c1:b8:3e:cc:92:a6:e3:9b:
6b:38:80:25:44:6a:3c:70:48:6e:88:8c:85:68:2e:d9:a9:d6:
c0:fa:2d:cb:5f:c9:a7:87:97:5c:3b:6a:92:0a:73:8e:15:f8:
c7:95:d1:5f:ed:18:48:e1:c6:92:18:30:b3:80:47:22:f8:ed:
95:fc:85:b5:41:ba:d3:85:16:2b:eb:7b:4f:39:b1:2c:8d:c2:
b7:08:2f:bb:ea:ab:27:13:7b:75:95:f8:9c:b8:b4:25:eb:4e:
99:3a:3c:04:ff:01:47:9c:99:c0:51:1b:f5:70:7a:65:99:ba:
7d:30:bd:85:f0:2b:c4:f4:71:ae:18:32:1a:00:3f:07:ac:54:
33:14:eb:0e:ba:a3:23:24:53:43:15:4b:c3:56:d4:8f:f4:95:
f6:b1:2f:4e:db:b0:b4:54:9d:bc:0c:f0:61:45:b7:4a:6a:8c:
84:4d:9a:52:aa:2a:8b:b3:bc:aa:45:74:4a:53:4d:b4:d0:54:
4f:8b:0e:f7:04:79:c3:78:6d:0a:eb:55:ce:5b:e7:1f:09:65:
d7:e0:ba:2b:16:ca:7f:af:60:e8:3e:8f:6a:35:cb:17:71:dc:
de:b0:b8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:36 2025 by rpki-client