Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/MMEvS-6SPClHfQzk1vrzx0fn7zg.roa
File: MMEvS-6SPClHfQzk1vrzx0fn7zg.roa (raw, json)
Hash identifier: WxKts/9VBpm4kj3r1ZB52Le9AVT6JynTw+FucSBw9lw=
Subject key identifier: 30:C1:2F:4B:EE:92:3C:29:47:7D:0C:E4:D6:FA:F3:C7:47:E7:EF:38
Certificate issuer: /CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Certificate serial: 01845499D7DB6503408E5688B162A153CF84
Authority key identifier: D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/MMEvS-6SPClHfQzk1vrzx0fn7zg.roa
Signing time: Tue 08 Nov 2022 00:17:59 +0000
ROA not before: Tue 08 Nov 2022 00:17:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31246
IP address blocks: 95.82.128.0/18 maxlen: 18
83.240.0.0/17 maxlen: 17
46.39.160.0/19 maxlen: 19
185.51.240.0/22 maxlen: 22
2a01:4240::/32 maxlen: 32
2001:4cc8::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:54:99:d7:db:65:03:40:8e:56:88:b1:62:a1:53:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff0fecd7bf44148931788dfe7f20d67a67a0db
Validity
Not Before: Nov 8 00:17:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30c12f4bee923c29477d0ce4d6faf3c747e7ef38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:19:0e:cc:74:df:82:e0:1f:8e:8c:59:23:
59:68:d5:6b:b7:16:0b:a2:0d:85:73:05:b1:14:2b:
1d:c7:b6:30:5d:8d:48:ab:f5:87:1d:9c:99:a1:8f:
59:22:30:2a:2f:2f:6e:d7:de:0d:55:f9:63:23:d2:
61:ae:a8:6c:68:02:a1:57:9d:38:d7:b0:d9:5e:78:
f3:90:ea:19:fc:27:5b:79:b2:a9:43:52:7a:73:51:
5d:ec:09:bf:47:ca:2a:37:00:a6:0c:96:4d:e7:a6:
30:b5:84:21:17:9f:f2:d7:84:9a:8d:aa:91:1b:db:
b6:0b:ee:0b:f9:ad:aa:9c:a1:0e:3a:aa:09:f9:97:
41:f9:78:c2:cc:17:b5:06:48:e7:77:bb:f4:b2:55:
48:ff:48:fe:0f:8d:2d:e2:c5:0a:d5:c5:1d:1c:c8:
44:be:e4:ab:64:1f:af:d1:18:52:41:8b:1a:7a:03:
4f:d1:37:2a:ba:ac:69:64:e4:6b:63:de:f3:e5:91:
a9:46:4f:e9:bd:a7:9a:86:8e:a3:aa:8c:d3:1d:ed:
3e:5a:02:80:32:d4:a5:f6:14:85:6f:05:82:2a:a7:
d2:2b:21:92:85:0d:ca:62:54:22:ff:dc:77:f9:42:
0f:18:67:20:70:ae:69:8a:d0:40:8b:8d:e7:fb:26:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C1:2F:4B:EE:92:3C:29:47:7D:0C:E4:D6:FA:F3:C7:47:E7:EF:38
X509v3 Authority Key Identifier:
keyid:D4:FF:0F:EC:D7:BF:44:14:89:31:78:8D:FE:7F:20:D6:7A:67:A0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P8P7Ne_RBSJMXiN_n8g1npnoNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/MMEvS-6SPClHfQzk1vrzx0fn7zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0c0c65-9f82-4450-9165-f0c21f8186f0/1/1P8P7Ne_RBSJMXiN_n8g1npnoNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.39.160.0/19
83.240.0.0/17
95.82.128.0/18
185.51.240.0/22
IPv6:
2001:4cc8::/31
2a01:4240::/32
Signature Algorithm: sha256WithRSAEncryption
ba:db:46:c4:e2:a2:ad:50:81:f9:a1:c6:f8:06:5c:d5:a0:61:
9e:ac:a3:16:2b:0d:83:07:b8:29:e7:6d:a9:a4:4d:07:c2:56:
89:29:da:fb:ae:54:84:27:0f:c7:35:11:31:e6:64:75:a5:6a:
c1:2d:bf:ae:ac:0f:70:ed:77:d0:60:de:2f:0f:06:ab:17:7b:
2e:10:33:e2:b1:fe:95:0b:15:ed:77:7d:4c:2d:e8:e7:c2:86:
a7:5e:dc:60:c5:74:aa:3d:37:9d:2f:dd:09:e1:f2:20:ce:88:
86:bd:0b:0c:07:97:4c:55:e9:13:3d:c7:94:d4:dc:7f:2e:a2:
ed:9d:c7:fc:1b:4b:21:ca:0d:d6:9f:38:76:2c:45:18:0a:df:
27:20:6e:55:46:a6:1f:fb:36:0c:79:26:47:9a:aa:3c:ba:f7:
08:94:ff:fb:cf:c5:56:b3:3b:3d:08:17:09:14:19:f9:45:fe:
8c:0b:b2:ca:6f:46:bf:9d:98:9d:af:22:ba:a2:b3:ad:c9:71:
30:c4:cb:17:fa:8d:b1:8e:fa:7b:9f:93:b0:9d:1c:63:93:40:
44:5e:f3:5f:42:d8:0d:48:5e:09:c1:da:a5:25:6e:a4:6f:0b:
7d:1e:6d:b3:c2:31:ea:62:cc:5d:7e:87:18:40:82:92:70:25:
67:ad:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:33 2025 by rpki-client