Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/McPECbWiOZZptuHIWFrOcEgtdOI.roa
File: McPECbWiOZZptuHIWFrOcEgtdOI.roa (raw, json)
Hash identifier: xHYw+KJVEhQFDVEUioGvFwcLa2C5OgHkMSM0z9hHgHY=
Subject key identifier: 31:C3:C4:09:B5:A2:39:96:69:B6:E1:C8:58:5A:CE:70:48:2D:74:E2
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 01942521D8060E2B2F1DC389CAB0C006C9B6
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/McPECbWiOZZptuHIWFrOcEgtdOI.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204995
IP address blocks: 45.13.220.0/22 maxlen: 24
45.13.220.0/24 maxlen: 24
185.184.8.0/24 maxlen: 24
185.184.9.0/24 maxlen: 24
185.184.11.0/24 maxlen: 24
2a0b:2180:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d8:06:0e:2b:2f:1d:c3:89:ca:b0:c0:06:c9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31c3c409b5a2399669b6e1c8585ace70482d74e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:d2:9f:ab:65:e2:4f:68:17:85:d3:12:f1:
a9:1e:ac:be:a4:82:1d:2f:b6:1d:62:0a:8e:49:40:
4b:3f:0a:23:c2:8b:b8:68:38:fb:e1:66:1c:65:45:
a4:c3:21:4a:d5:84:11:5d:d6:35:c5:86:9b:54:58:
fb:ba:fc:9a:db:d9:96:34:a9:02:be:81:d6:33:bf:
e7:87:35:a7:6d:16:1e:44:90:29:05:83:4f:dd:17:
ff:82:bd:cd:7d:12:c4:04:01:78:ab:36:a2:dd:4c:
fd:11:94:76:34:2d:af:90:bf:1a:98:e2:7d:17:22:
02:f2:77:27:2b:fb:42:b8:40:bc:5b:54:8b:aa:d4:
a9:e4:00:24:c4:a5:a3:66:ee:5d:8b:4c:4d:e3:09:
fe:9b:4d:d2:51:42:25:d3:a3:28:6b:98:f0:b3:47:
c1:ba:c8:2e:e4:ce:82:7e:d5:2c:05:dd:a5:b6:56:
92:1c:64:42:1e:ec:f2:aa:f9:4e:53:e0:5f:5d:31:
70:76:77:38:e9:b9:9d:79:29:21:e1:71:9b:d9:65:
d6:25:a7:22:6e:39:ea:e8:98:38:56:01:7e:4e:5f:
33:25:24:46:b5:8d:e0:b8:7d:83:7d:b1:e2:88:2d:
1e:03:8a:96:b5:b6:15:63:7d:0e:6e:bd:05:ea:0f:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C3:C4:09:B5:A2:39:96:69:B6:E1:C8:58:5A:CE:70:48:2D:74:E2
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/McPECbWiOZZptuHIWFrOcEgtdOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.220.0/22
185.184.8.0/23
185.184.11.0/24
IPv6:
2a0b:2180:1::/48
Signature Algorithm: sha256WithRSAEncryption
51:74:a5:53:aa:98:94:29:9c:a5:08:de:72:df:02:7b:18:ef:
f5:a0:92:a2:9d:03:0f:e3:5d:a8:2c:af:b4:fc:ae:89:78:a3:
31:bf:58:b1:b1:d9:23:53:5f:42:b3:f0:26:be:51:6d:fb:12:
a5:5d:0f:6b:92:d2:03:e4:00:89:79:95:ce:4a:65:04:4f:e8:
1e:1a:ab:f2:4f:62:89:34:0e:aa:93:ac:72:99:07:9c:de:98:
bb:0b:dd:39:b4:e7:de:36:3e:4a:e9:34:8f:4a:f3:67:07:d2:
0c:0f:e6:2d:ef:3c:6e:2a:58:30:63:f6:7d:35:a6:3f:9b:ea:
c1:5e:9f:9d:54:45:53:af:69:93:5d:0b:cc:0e:2b:fe:7b:e0:
ce:a7:69:ff:e9:e5:e2:43:ec:7b:08:a0:31:47:a8:c5:89:02:
70:62:66:62:86:60:2a:1e:91:d3:2d:21:07:e9:c6:1d:4a:37:
6e:10:83:44:c1:7b:5a:4a:8e:ad:63:70:e5:29:16:08:8c:e0:
df:0f:e3:27:48:40:70:da:39:c9:55:1b:1f:cc:15:9d:d2:12:
e1:74:2a:0c:52:8f:79:6a:61:b6:75:37:76:25:2f:9b:d7:b4:
a3:45:2e:d8:67:6c:cd:ed:fb:a6:d6:d5:e1:b9:ef:f4:eb:9b:
74:1e:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:33 2025 by rpki-client