Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/MuDm6qOBJ8xkrh2L926I8rpU5do.roa
File: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (raw, json)
Hash identifier: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=
Subject key identifier: 32:E0:E6:EA:A3:81:27:CC:64:AE:1D:8B:F7:6E:88:F2:BA:54:E5:DA
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 0194282797A2203C3D5D81F3C29DD746C26E
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/MuDm6qOBJ8xkrh2L926I8rpU5do.roa
Signing time: Thu 02 Jan 2025 17:54:30 +0000
ROA not before: Thu 02 Jan 2025 17:54:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 185.164.72.0/24 maxlen: 24
185.164.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:97:a2:20:3c:3d:5d:81:f3:c2:9d:d7:46:c2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jan 2 17:54:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32e0e6eaa38127cc64ae1d8bf76e88f2ba54e5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:c1:f6:e3:ae:ab:d3:90:50:83:eb:7b:da:
2c:07:31:8f:89:4a:43:19:f0:3b:99:7d:af:6f:43:
24:1e:4e:be:d7:15:35:a2:6c:07:4e:38:14:79:32:
73:ab:3d:87:18:a3:34:cd:ee:b6:72:7f:59:3a:3a:
56:97:a2:22:65:c9:ff:72:45:91:2c:1d:ef:b5:f6:
1b:73:94:16:ec:8f:fd:b6:f1:d5:f9:00:0c:f6:12:
df:7f:53:cc:a3:5f:a7:ca:f8:ee:ff:a8:de:41:c8:
71:ab:1a:b6:c3:e0:b2:07:b7:d7:1c:ab:98:87:9f:
b3:c7:6a:a2:c9:ad:39:a3:cf:64:cd:12:42:84:f7:
00:f6:b6:9a:be:33:ae:6c:2c:2a:10:81:bc:62:98:
fd:d0:bc:d9:48:08:82:82:94:20:13:5d:11:93:15:
5c:19:1f:82:78:07:3c:e5:0f:1c:82:c5:bb:d7:89:
c0:4c:a1:65:ba:0a:df:fe:f0:70:3a:f1:db:55:dc:
ea:a6:e3:cc:6a:2a:9d:05:18:a5:12:27:a2:bc:ca:
5a:15:25:86:4d:a1:5f:c0:13:d8:eb:e6:72:cd:08:
33:62:26:96:a0:8d:9c:ea:81:31:c1:37:86:fb:39:
11:16:aa:62:92:fa:e2:62:46:98:82:bb:27:d9:f5:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:E6:EA:A3:81:27:CC:64:AE:1D:8B:F7:6E:88:F2:BA:54:E5:DA
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/MuDm6qOBJ8xkrh2L926I8rpU5do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.72.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:f9:6a:04:7b:9f:9c:ed:11:c9:d0:1f:d1:a6:3d:bd:45:69:
a5:1b:95:58:de:6c:bc:a9:70:1a:2e:83:67:79:a9:f2:05:73:
50:3c:ec:00:35:b7:75:e9:e6:1c:3c:cd:4f:2f:bd:2f:5d:dd:
29:5c:92:88:c7:78:45:f6:38:09:77:8a:66:53:13:9f:7c:60:
f1:8c:44:f0:13:de:1d:a4:1b:9f:8e:46:29:64:b4:c1:e4:bc:
ce:7f:25:88:03:86:78:be:29:41:87:fb:e6:05:57:bf:c4:51:
32:07:e6:c7:de:50:54:90:d9:9a:01:95:51:33:24:9d:ce:88:
5f:94:d3:e3:1a:2c:aa:0a:e5:08:1c:e4:90:20:17:74:49:fd:
ce:d6:63:8b:99:9b:35:d0:d1:4f:e1:d9:b2:ca:dc:37:47:9d:
97:a1:0e:ec:67:e6:91:ec:da:f4:c3:5f:e5:af:9f:84:7e:4c:
88:a0:d1:b7:5c:74:32:d8:e3:52:55:db:ef:e9:39:46:b1:58:
7f:7d:47:80:16:26:44:95:2c:eb:e4:02:40:9b:6f:34:7c:68:
6d:f9:8a:db:46:fb:3c:e4:4a:cb:af:fe:ca:49:5b:cb:3b:84:
4d:30:cf:af:5c:fc:a2:ec:57:10:13:e8:29:cb:ce:52:08:5c:
38:14:aa:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ5eiIDw9XYHzwp3XRsJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3
NmNjNDAwHhcNMjUwMTAyMTc1NDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmUwZTZlYWEzODEyN2NjNjRhZTFkOGJmNzZlODhmMmJhNTRlNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOXB9uOuq9OQUIPre9osBzGPiUpD
GfA7mX2vb0MkHk6+1xU1omwHTjgUeTJzqz2HGKM0ze62cn9ZOjpWl6IiZcn/ckWR
LB3vtfYbc5QW7I/9tvHV+QAM9hLff1PMo1+nyvju/6jeQchxqxq2w+CyB7fXHKuY
h5+zx2qiya05o89kzRJChPcA9raavjOubCwqEIG8Ypj90LzZSAiCgpQgE10RkxVc
GR+CeAc85Q8cgsW714nATKFlugrf/vBwOvHbVdzqpuPMaiqdBRilEieivMpaFSWG
TaFfwBPY6+ZyzQgzYiaWoI2c6oExwTeG+zkRFqpikvriYkaYgrsn2fUCwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLg5uqjgSfMZK4di/duiPK6VOXaMB8GA1UdIwQY
MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt
YTljMzg0MTI4ZDQyLzEvTXVEbTZxT0JKOHhrcmgyTDkyNkk4cnBVNWRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy
LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaRIMA0G
CSqGSIb3DQEBCwUAA4IBAQBa+WoEe5+c7RHJ0B/Rpj29RWmlG5VY3my8qXAaLoNn
eanyBXNQPOwANbd16eYcPM1PL70vXd0pXJKIx3hF9jgJd4pmUxOffGDxjETwE94d
pBufjkYpZLTB5LzOfyWIA4Z4vilBh/vmBVe/xFEyB+bH3lBUkNmaAZVRMySdzohf
lNPjGiyqCuUIHOSQIBd0Sf3O1mOLmZs10NFP4dmyytw3R52XoQ7sZ+aR7Nr0w1/l
r5+EfkyIoNG3XHQy2ONSVdvv6TlGsVh/fUeAFiZElSzr5AJAm280fGht+YrbRvs8
5ErLr/7KSVvLO4RNMM+vXPyi7FcQE+gpy85SCFw4FKrf
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:18 2025 by rpki-client