Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MM8jZ53FYfCieKNozl9Q2Z3RgbU.roa
File: MM8jZ53FYfCieKNozl9Q2Z3RgbU.roa (raw, json)
Hash identifier: AWVUwljuUr2zz+M9XCx+WdFrtnuUx0ygTS6ZfFdlvMA=
Subject key identifier: 30:CF:23:67:9D:C5:61:F0:A2:78:A3:68:CE:5F:50:D9:9D:D1:81:B5
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A7A873C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MM8jZ53FYfCieKNozl9Q2Z3RgbU.roa
Signing time: Sat 01 Jan 2022 04:51:59 +0000
ROA not before: Sat 01 Jan 2022 04:51:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60468
IP address blocks: 81.15.206.0/23 maxlen: 23
88.220.144.0/22 maxlen: 22
81.15.248.0/22 maxlen: 22
194.183.44.0/22 maxlen: 22
88.220.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981108540 (0x3a7a873c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30cf23679dc561f0a278a368ce5f50d99dd181b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:16:b0:6e:01:2f:2f:da:43:74:1a:d5:2c:
44:42:77:b6:3b:e9:2e:4f:52:bc:9b:d9:05:71:f3:
51:3a:cc:cc:3c:e5:28:50:0c:64:05:4d:45:5b:70:
b7:9c:33:88:58:68:39:1c:2c:56:90:4d:82:f2:ca:
42:e5:e1:10:94:7e:38:9c:c7:f9:53:2f:56:1e:3f:
d8:36:5c:cc:99:a5:36:b7:09:92:47:a2:ef:6f:69:
08:0d:f7:39:0d:1c:76:84:87:6a:84:22:fa:70:5d:
87:b3:e2:15:34:1a:71:b1:45:8f:21:46:d5:88:8d:
02:c3:07:9f:78:e8:61:e5:fb:86:ac:5f:04:dc:70:
67:96:f8:3e:bd:04:b8:2e:6e:7b:ef:35:3c:88:34:
b8:d3:67:6a:ea:ad:0b:0c:a8:3c:1e:85:17:e5:4f:
8f:4d:6d:44:14:9f:58:99:ce:91:69:cf:16:11:3e:
52:9a:25:7e:a9:21:67:19:fa:ea:62:bd:ac:78:64:
59:28:36:16:0f:a3:29:d2:3a:29:aa:b8:0e:d2:d2:
16:be:a8:04:80:3b:51:b0:4f:9c:7f:aa:de:cd:aa:
1b:92:ec:db:98:e7:b0:e6:a6:72:57:e4:40:03:43:
62:c9:d7:14:30:dc:66:12:67:40:b1:c2:b8:94:b7:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:23:67:9D:C5:61:F0:A2:78:A3:68:CE:5F:50:D9:9D:D1:81:B5
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/MM8jZ53FYfCieKNozl9Q2Z3RgbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.206.0/23
81.15.248.0/22
88.220.86.0/23
88.220.144.0/22
194.183.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:29:89:52:24:93:42:37:86:45:43:82:b3:6a:38:cc:e0:53:
bb:e1:9a:e7:6f:ab:6e:2e:3e:0f:9f:d9:2e:b4:70:3b:ca:26:
64:db:ed:3d:1c:5c:b6:34:c1:2e:0b:a4:25:ad:69:d2:6e:67:
71:86:6e:c2:10:71:90:1f:6f:cc:ef:b6:70:31:71:bc:46:42:
94:5e:bd:de:00:ff:e9:c9:b6:b1:f1:4c:50:02:1c:ad:84:74:
99:89:38:34:88:33:0e:5d:0b:73:b0:c3:2d:50:44:87:58:e4:
b3:08:b1:1a:7e:d4:97:85:3b:50:40:e5:b9:0a:a9:ba:b1:db:
3c:ce:4a:68:40:8f:1f:d4:8a:64:df:f3:47:91:7a:42:99:b6:
7b:40:dd:8f:cf:3b:f6:83:38:9d:1f:88:d7:91:24:28:0e:4a:
3d:bb:fb:5e:29:db:62:28:18:0d:6e:fa:30:c6:7b:eb:fb:74:
01:b1:13:22:40:50:79:fc:71:82:d4:3c:fc:16:b4:76:3b:81:
1a:9a:42:26:2e:66:d2:bf:6a:97:b4:3d:20:a0:99:b2:c2:13:
02:a6:48:6d:f1:0e:28:7c:e2:26:8a:a6:f7:98:0d:86:c7:bc:
cb:fe:ef:7e:d8:59:c0:5d:27:4c:52:26:0a:3e:29:b5:5b:7c:
c3:08:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:17 2025 by rpki-client