Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/1-nMAZc-5nMETLGR20qQodJXwzWs.roa
File: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (raw, json)
Hash identifier: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=
Subject key identifier: FA:73:00:65:CF:B9:9C:C1:13:2C:64:76:D2:A4:28:74:95:F0:CD:6B
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019425FD3B713D5AF6ACB069C6C0A120EFB1
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/1-nMAZc-5nMETLGR20qQodJXwzWs.roa
Signing time: Thu 02 Jan 2025 07:49:00 +0000
ROA not before: Thu 02 Jan 2025 07:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44217
IP address blocks: 185.181.110.0/24 maxlen: 24
185.181.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:3b:71:3d:5a:f6:ac:b0:69:c6:c0:a1:20:ef:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Jan 2 07:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa730065cfb99cc1132c6476d2a4287495f0cd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:9d:d6:31:a4:57:e6:61:0b:3c:f1:61:01:
48:07:ed:1b:29:67:f8:05:57:8a:c7:2b:f4:9c:46:
fe:16:60:2b:c0:37:a2:0c:10:03:21:99:ca:cc:e3:
95:d2:05:e4:47:39:d3:22:5c:1e:f0:21:62:cf:10:
f4:a2:29:a9:b5:a0:a9:a2:c7:4a:9d:49:6a:71:cf:
04:b0:15:61:46:9c:97:ea:0b:22:00:01:01:fc:71:
f0:32:90:b2:bd:fd:8c:a2:4d:46:8f:ec:6e:76:1f:
9d:7f:ff:13:7d:b1:77:15:70:fc:eb:d6:f7:99:e9:
ea:89:a5:ef:da:02:dc:fa:dc:03:95:fa:e4:8d:45:
ae:f9:3a:32:41:e5:d3:81:b4:a6:ef:17:f4:d0:e8:
cd:4b:5b:96:79:ab:e2:c5:a7:36:36:e6:45:4a:07:
9d:d8:46:cb:20:ec:7f:ae:e2:c8:e3:dd:de:0d:18:
84:1b:5b:e6:14:1a:ed:21:1a:c9:8e:a9:93:2e:60:
f3:4e:f2:13:47:ae:2e:5c:5e:20:56:ee:ed:99:7d:
1c:c9:ce:82:6b:e8:1d:2d:fc:a0:a5:87:b3:80:ad:
2a:dd:e7:eb:33:8f:b9:da:eb:08:6d:72:34:4d:ff:
9a:ce:0f:53:4c:72:c4:77:38:df:b5:dd:ee:bf:37:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:73:00:65:CF:B9:9C:C1:13:2C:64:76:D2:A4:28:74:95:F0:CD:6B
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/1-nMAZc-5nMETLGR20qQodJXwzWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.110.0/23
Signature Algorithm: sha256WithRSAEncryption
44:c5:86:ab:7f:05:bc:a1:32:89:d0:d6:38:24:dd:fb:c2:a8:
fd:2c:b1:54:65:33:0d:b9:e3:df:b2:78:74:96:37:99:f7:65:
86:2b:58:ee:88:77:cf:82:07:ab:72:3b:ff:39:fc:42:f3:19:
52:73:b5:ae:b0:22:5d:1b:88:a5:c6:9c:f3:47:c4:15:20:88:
7e:b9:75:40:a2:31:0e:f5:25:d3:0a:ff:f5:a1:73:ed:99:f3:
45:85:c9:81:50:6d:f1:7f:9f:92:0f:2f:0c:3e:a3:f4:23:76:
8b:87:28:63:f9:48:ea:49:f7:9f:09:15:19:e9:49:26:d2:70:
de:b7:3a:cb:92:5e:40:b6:65:0a:aa:65:0e:d2:32:ed:80:38:
a7:de:82:c3:a9:8b:33:62:2a:8b:e4:12:d7:40:2f:98:32:3e:
6a:88:63:e5:36:5b:1b:2e:78:ac:83:08:61:e9:5e:ec:ca:fe:
92:77:2a:e3:a3:63:ca:53:39:48:a7:3e:f4:5b:7f:ff:71:be:
05:c6:19:c2:33:1b:ce:5c:8e:25:dd:ad:22:f6:33:58:96:db:
e7:95:69:34:cc:8e:be:67:67:6b:61:75:1c:af:d9:cb:ae:f6:
2e:e6:dd:8e:16:0a:ec:b8:d7:e4:c9:87:66:c2:1b:82:3e:6c:
6c:18:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:52 2025 by rpki-client