Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/mVZaVH1Pcezupl88BB4A9aDh2ik.roa
File: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (raw, json)
Hash identifier: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=
Subject key identifier: 99:56:5A:54:7D:4F:71:EC:EE:A6:5F:3C:04:1E:00:F5:A0:E1:DA:29
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0194221FC3AA4CED2F0E85C3F459F6675A48
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/mVZaVH1Pcezupl88BB4A9aDh2ik.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24931
IP address blocks: 185.54.72.0/22 maxlen: 22
2a01:ba20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c3:aa:4c:ed:2f:0e:85:c3:f4:59:f6:67:5a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99565a547d4f71eceea65f3c041e00f5a0e1da29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:73:29:1b:ea:b8:7d:5f:b8:5a:d5:45:dc:
4b:a5:67:55:35:87:b9:d6:4b:b9:87:ce:b9:0e:bd:
40:b6:14:ae:ed:52:a9:af:bf:5e:81:e1:3e:2e:f9:
98:32:5a:cf:c7:ed:1c:94:16:36:ba:a8:bb:75:0f:
a3:e6:2c:3b:38:18:8e:a5:b7:61:6d:94:c9:8a:5e:
d7:dc:54:7c:9f:b0:cd:5f:41:dc:19:05:57:b5:bb:
df:34:76:64:15:61:37:56:8d:9d:ce:4c:0a:0f:70:
4a:1f:de:27:e8:9e:be:de:1e:76:fc:76:c3:8f:f5:
23:cc:17:4f:3b:06:dc:1f:35:a1:5a:77:d0:30:74:
23:6c:3e:41:2d:8f:29:9b:78:2c:c9:96:e2:98:ec:
26:55:5e:34:c6:0d:d0:89:41:1d:cb:50:67:ba:17:
c7:61:89:86:77:e6:50:a2:3c:00:b7:29:e9:14:7c:
02:78:ff:de:60:38:68:6f:e5:28:4e:2c:c0:00:80:
96:19:17:bd:43:ca:aa:58:92:7d:8a:ad:3d:04:1f:
d2:1c:79:44:61:43:07:b7:a6:57:60:ad:12:f6:3d:
33:ae:04:2e:e6:6d:b9:98:d5:21:bf:fc:46:8b:3d:
1a:08:d3:a8:b4:58:07:ec:96:3d:45:9f:c9:1d:9c:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:5A:54:7D:4F:71:EC:EE:A6:5F:3C:04:1E:00:F5:A0:E1:DA:29
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/mVZaVH1Pcezupl88BB4A9aDh2ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.72.0/22
IPv6:
2a01:ba20::/32
Signature Algorithm: sha256WithRSAEncryption
65:38:43:f0:3f:b8:26:4c:99:c0:6e:52:32:ec:89:16:f6:d7:
a7:11:ef:b0:42:8c:00:ad:9e:4f:6f:ab:8f:12:09:e2:3c:ff:
9f:61:2e:2c:f5:6a:bf:8e:25:28:ad:e4:7b:16:74:88:be:44:
ce:37:8d:0d:9f:dd:1d:b3:a9:a6:84:16:c1:7e:f9:20:35:b5:
a0:b3:5e:0a:70:ed:bd:be:34:5c:29:0c:d3:05:e3:de:86:5c:
3e:d6:ce:fd:b0:e2:cb:59:95:a4:fd:52:c7:cc:cd:a1:2c:78:
68:69:db:ff:52:a3:01:23:c2:f1:8e:c5:05:fe:ba:fb:bf:80:
a1:a8:67:c8:cc:c0:54:2d:31:23:73:0c:48:e2:6e:e2:cd:3d:
c7:76:56:e5:44:26:0d:b9:94:23:e4:2d:68:24:b0:32:eb:69:
f9:62:ac:b6:ee:9c:44:df:bb:f6:c7:15:a4:5e:fb:c5:56:3d:
2e:b7:60:57:6c:fa:e4:50:66:ad:7e:2b:18:eb:6c:e6:91:93:
fb:b8:43:3b:25:98:96:ec:cd:a8:2f:d9:f1:aa:3a:0a:84:20:
18:c1:df:1c:ff:67:ca:b2:5e:a3:fe:74:84:71:a5:e9:db:a0:
6a:be:5a:02:14:2f:b2:3b:3e:5a:55:5b:1a:fe:b2:7c:42:e1:
9b:45:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:15 2025 by rpki-client