Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mu5mHLw2JMCg9MT79-oHm8EKH_Q.roa
File: mu5mHLw2JMCg9MT79-oHm8EKH_Q.roa (raw, json)
Hash identifier: J53pKnuyYfPShOJgT9LUgDx0NqIDq+UGZoddrWxNCUE=
Subject key identifier: 9A:EE:66:1C:BC:36:24:C0:A0:F4:C4:FB:F7:EA:07:9B:C1:0A:1F:F4
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D4B0F0F582D7EC84362A9DFE34FA
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mu5mHLw2JMCg9MT79-oHm8EKH_Q.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59633
IP address blocks: 185.149.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d4:b0:f0:f5:82:d7:ec:84:36:2a:9d:fe:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aee661cbc3624c0a0f4c4fbf7ea079bc10a1ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:44:74:14:1c:49:94:b4:a3:7d:cb:cd:90:
26:ae:3d:48:82:8a:bc:3e:cb:0a:11:8e:df:bd:b4:
4b:00:2d:cd:9d:c4:40:06:f0:ab:58:d5:a5:94:69:
a1:6b:48:67:1a:6f:e9:f6:40:d1:30:c0:a5:49:ce:
49:92:2c:7e:db:e6:c4:ce:f1:f4:6d:7b:df:dc:9e:
b0:29:bf:b0:4f:4b:d3:54:37:30:74:83:bd:67:88:
1a:5c:c0:b5:2b:c0:8c:09:e7:bb:27:47:ce:2b:90:
e0:71:e1:f8:ac:d2:74:28:60:42:d9:3e:f3:30:43:
f4:f7:ab:ba:2d:fa:31:a2:81:3b:2c:2e:f9:cd:65:
82:bc:76:25:45:09:97:ff:af:16:c2:b7:8c:db:75:
71:15:9d:35:b8:a0:ec:8c:59:90:96:a4:35:72:0d:
52:3f:bf:9f:07:ee:66:21:c8:6d:24:64:98:f7:60:
4c:85:cc:64:bd:57:cf:ab:8c:01:b3:de:eb:79:3d:
ba:7d:29:bb:4a:ab:f0:ae:91:e1:8f:28:7d:8f:be:
7b:92:d6:e2:6e:30:9b:35:5e:8a:ce:7b:3f:7a:c0:
e5:a0:f1:8b:0e:bf:59:3f:ca:ff:c6:f1:36:e6:dc:
e7:6f:51:93:7c:c0:3a:91:63:53:78:9a:3f:09:5d:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:66:1C:BC:36:24:C0:A0:F4:C4:FB:F7:EA:07:9B:C1:0A:1F:F4
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/mu5mHLw2JMCg9MT79-oHm8EKH_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.122.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bd:cf:aa:ec:ca:cb:39:6d:88:54:f4:97:a2:f0:6d:3a:1e:
66:47:cb:15:f3:9a:41:df:34:23:b0:6a:52:f7:55:fb:7c:d7:
2d:84:8d:88:e8:89:c3:51:94:d7:da:54:d5:ec:ab:bf:0f:97:
88:67:e8:e8:54:a0:b4:ed:1b:fa:5f:8f:db:bb:ee:58:d9:a1:
1a:dd:9a:6a:76:91:27:16:c1:7e:42:99:91:7b:63:e2:c2:5d:
0c:15:f4:d8:d7:dd:46:a2:50:1c:5c:9c:30:bc:64:24:88:d7:
db:6f:f2:64:8e:b9:de:00:fe:be:38:b9:9d:f1:90:48:83:38:
da:4b:29:b7:8e:2f:67:38:7a:ca:0e:48:92:26:2a:a4:94:3e:
3a:2a:bf:a5:30:1b:0f:3a:e7:c3:26:a6:85:8a:7f:b8:0c:af:
79:a5:bd:f6:57:35:28:25:a1:56:27:14:cf:c8:fc:0a:46:9b:
02:6d:87:db:23:86:d6:e2:4c:6c:44:0b:40:72:2c:48:cb:74:
5a:6b:c9:1f:04:86:bb:bd:1b:4b:31:89:96:49:83:86:c3:4d:
b7:75:d7:f8:9f:2e:7a:91:c7:95:ca:96:e0:30:a9:d6:e5:4c:
76:9a:1a:e6:aa:44:70:b6:b9:0b:a2:50:32:26:c5:87:cb:02:
57:09:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:02 2025 by rpki-client