Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/McuIy92u51PD1-a8im_adJGuEsA.roa
File: McuIy92u51PD1-a8im_adJGuEsA.roa (raw, json)
Hash identifier: o1VltrxsrtaALmvL/piX3cnNbNUncoop3xxH57ohjF4=
Subject key identifier: 31:CB:88:CB:DD:AE:E7:53:C3:D7:E6:BC:8A:6F:DA:74:91:AE:12:C0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 018CC94D7A75C0060F8B825A31E3EC6768CD
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/McuIy92u51PD1-a8im_adJGuEsA.roa
Signing time: Tue 02 Jan 2024 08:32:27 +0000
ROA not before: Tue 02 Jan 2024 08:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206492
IP address blocks: 185.185.32.0/22 maxlen: 22
185.185.32.0/24 maxlen: 24
5.154.170.0/24 maxlen: 24
2a0b:4d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7a:75:c0:06:0f:8b:82:5a:31:e3:ec:67:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31cb88cbddaee753c3d7e6bc8a6fda7491ae12c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:ae:85:a8:3a:92:d1:37:6f:e6:5a:8e:cd:
27:46:24:37:dc:90:3f:99:4c:c6:6a:df:cb:22:2e:
6d:d0:b6:54:f2:59:9a:ba:78:b8:df:07:7a:f1:d1:
7f:f2:d9:8d:32:c5:64:0b:44:54:41:79:b6:e4:53:
7b:47:78:16:ee:ae:b2:50:23:11:2c:8a:ff:64:6a:
e5:a7:5d:35:b0:62:9f:25:02:be:c0:d7:1e:7b:e8:
9a:fe:65:15:22:d7:6d:b3:c2:3a:3e:b4:25:dd:43:
f4:d5:4e:47:b6:87:c1:c7:79:e0:a4:39:46:18:8a:
2a:48:e4:82:c7:72:fc:47:c5:a3:41:71:24:8d:85:
2f:b7:ef:fd:0e:69:77:a8:f9:de:dc:aa:6e:f9:f9:
8a:9e:66:e6:af:be:69:f8:1b:b5:f4:4f:e5:c2:6f:
7c:dc:7e:e6:de:1e:a8:75:d5:69:8a:a5:e4:d9:f0:
fc:fc:fa:26:85:0d:0b:62:09:9c:e7:be:bd:76:f0:
ff:dd:33:39:a4:63:d9:43:38:7a:2e:f2:e9:8c:b6:
91:80:db:73:b3:ac:61:b4:d7:fa:59:93:7d:47:08:
68:d0:aa:15:f0:92:eb:89:06:86:7e:bb:71:d2:0d:
62:61:b5:4b:f3:30:de:5d:37:42:8b:44:ee:8d:b2:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:88:CB:DD:AE:E7:53:C3:D7:E6:BC:8A:6F:DA:74:91:AE:12:C0
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/McuIy92u51PD1-a8im_adJGuEsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.170.0/24
185.185.32.0/22
IPv6:
2a0b:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
9b:3a:b1:61:4f:91:61:dd:3f:55:17:bd:9c:75:59:f0:3d:b8:
bd:c0:f0:70:e4:47:6c:7d:df:e8:6e:75:24:8b:d0:b6:d6:52:
b2:3b:75:81:67:a8:90:60:5d:ef:93:1e:2d:d5:f5:0f:2b:9e:
2c:ba:7a:7b:e2:7d:78:7c:0c:02:16:d7:f2:36:80:82:b1:28:
25:53:79:7e:02:5d:ee:4a:eb:e8:89:38:f2:54:e5:b2:0a:3f:
37:9b:41:c2:8e:e1:02:7c:f8:4f:fa:c8:86:28:5b:87:40:00:
bf:18:0a:23:9e:e4:95:83:37:6c:1a:0f:c3:dc:3c:8e:dd:0f:
7b:3a:05:75:e2:57:9a:9d:0b:5d:79:e9:a2:2d:71:c9:ff:4f:
e2:30:de:69:16:4c:26:cc:d9:05:d2:80:b6:70:cc:97:13:b9:
79:31:0d:64:56:bb:fd:42:7e:4b:84:00:49:2e:27:90:da:7b:
d9:ae:6f:da:33:69:e3:7f:0d:e6:58:b3:5b:bf:21:17:d0:ad:
1b:b2:26:02:b0:80:ac:f1:96:b8:b3:d4:eb:43:53:f8:89:ce:
57:3d:57:4c:ed:4b:8f:98:42:6f:75:ab:c4:94:c4:ff:71:1e:
94:6d:c2:e1:52:b0:8e:e8:c0:dd:19:09:d4:eb:7f:19:d2:15:
46:2f:ea:93
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJTXp1wAYPi4JaMePsZ2jNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjQwMTAyMDgzMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWNiODhjYmRkYWVlNzUzYzNkN2U2YmM4YTZmZGE3NDkxYWUxMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjquhag6ktE3b+Zajs0nRiQ33JA/
mUzGat/LIi5t0LZU8lmauni43wd68dF/8tmNMsVkC0RUQXm25FN7R3gW7q6yUCMR
LIr/ZGrlp101sGKfJQK+wNcee+ia/mUVItdts8I6PrQl3UP01U5HtofBx3ngpDlG
GIoqSOSCx3L8R8WjQXEkjYUvt+/9Dml3qPne3Kpu+fmKnmbmr75p+Bu19E/lwm98
3H7m3h6oddVpiqXk2fD8/PomhQ0LYgmc5769dvD/3TM5pGPZQzh6LvLpjLaRgNtz
s6xhtNf6WZN9Rwho0KoV8JLriQaGfrtx0g1iYbVL8zDeXTdCi0TujbK10QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDHLiMvdrudTw9fmvIpv2nSRrhLAMB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvTWN1SXk5MnU1MVBEMS1hOGltX2FkSkd1RXNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQABZqqAwQC
ubkgMA0EAgACMAcDBQMqC02AMA0GCSqGSIb3DQEBCwUAA4IBAQCbOrFhT5Fh3T9V
F72cdVnwPbi9wPBw5Edsfd/obnUki9C21lKyO3WBZ6iQYF3vkx4t1fUPK54sunp7
4n14fAwCFtfyNoCCsSglU3l+Al3uSuvoiTjyVOWyCj83m0HCjuECfPhP+siGKFuH
QAC/GAojnuSVgzdsGg/D3DyO3Q97OgV14leanQtdeemiLXHJ/0/iMN5pFkwmzNkF
0oC2cMyXE7l5MQ1kVrv9Qn5LhABJLieQ2nvZrm/aM2njfw3mWLNbvyEX0K0bsiYC
sICs8Za4s9TrQ1P4ic5XPVdM7UuPmEJvdavElMT/cR6UbcLhUrCO6MDdGQnU638Z
0hVGL+qT
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:46 2025 by rpki-client