
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/miFtnjs24Q4-RR01JpCMeAQD8WI.roa
File: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (raw, json)
Hash identifier: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=
Subject key identifier: 9A:21:6D:9E:3B:36:E1:0E:3E:45:1D:35:26:90:8C:78:04:03:F1:62
Certificate issuer: /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial: 0194252235F122DB9939A89159F5E385A631
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/miFtnjs24Q4-RR01JpCMeAQD8WI.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24971
IP address blocks: 185.145.160.0/22 maxlen: 22
2a07:4880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:f1:22:db:99:39:a8:91:59:f5:e3:85:a6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a216d9e3b36e10e3e451d3526908c780403f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:9a:c3:4a:6c:d5:fe:8c:c6:52:ec:a7:e2:
84:b0:70:6b:5d:3c:0f:92:04:9c:50:de:23:37:fb:
7a:4d:a4:0c:3a:d4:d0:40:e1:a9:84:98:e8:4a:85:
a9:9f:d0:33:07:77:90:a0:bc:24:c5:35:a4:a0:f2:
b3:64:70:04:57:19:f7:a9:27:20:22:ba:d1:ef:08:
3a:88:e7:1f:3a:f3:02:22:95:79:80:76:dc:fa:d7:
1a:7a:fa:36:01:82:00:a5:e8:5f:98:89:e5:c4:2b:
8b:c7:be:7e:f6:9c:fa:ff:3a:5e:81:f4:af:92:f5:
b9:ab:10:35:be:ff:cb:e4:74:50:d3:67:90:85:70:
2e:d6:9d:c6:1e:cd:e6:ae:ef:99:c3:a0:e3:40:6d:
36:d7:f8:b5:1f:58:7b:66:74:36:29:f4:1e:c2:8b:
1f:ce:f4:1d:d0:24:1f:1e:05:05:7c:28:c3:2c:da:
72:c8:24:b4:d5:c7:04:df:e1:38:dd:e3:28:f6:95:
4a:5d:d1:8e:1d:65:6e:f8:5a:73:ef:73:07:a6:2d:
7d:ae:6a:0a:b4:88:6d:32:bb:54:52:5e:6c:3e:a6:
df:b7:f0:d5:6b:dd:a7:4c:98:2f:4d:e6:ab:1e:2d:
46:73:67:46:02:c6:f6:a3:55:ae:ab:5d:09:07:c7:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:6D:9E:3B:36:E1:0E:3E:45:1D:35:26:90:8C:78:04:03:F1:62
X509v3 Authority Key Identifier:
keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/miFtnjs24Q4-RR01JpCMeAQD8WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.160.0/22
IPv6:
2a07:4880::/29
Signature Algorithm: sha256WithRSAEncryption
11:f1:8d:f1:0c:c5:46:47:3c:88:af:56:5e:8d:d0:88:d5:aa:
ca:14:31:7c:54:64:73:75:81:1f:10:a8:44:32:8e:97:ff:af:
aa:6e:97:64:56:95:5b:8c:73:3e:96:39:22:e2:77:44:87:fc:
41:b8:3c:ab:b0:a4:cf:38:dc:2b:20:28:05:a1:41:a8:ae:de:
ea:6f:8e:ee:5d:07:a6:cb:b3:da:ee:4b:82:e4:f9:54:2e:a8:
2e:89:0d:76:b4:00:09:65:a5:1b:a1:59:42:fa:b2:ba:4f:6c:
9b:77:ae:ca:19:b9:81:ae:ed:a4:32:a8:22:95:de:8b:ae:99:
48:51:90:6a:43:4b:a1:27:c5:d3:c5:31:b8:23:9d:02:81:a2:
53:ea:dd:af:0b:53:83:d8:1f:13:a5:9b:65:3a:f4:a8:e8:6e:
a0:7e:c2:cb:db:ee:e9:98:ef:e4:a7:c2:4e:82:ef:3d:a8:66:
9f:92:94:4b:db:b9:81:fd:af:c3:00:44:a9:37:b9:34:7f:4f:
f3:ef:9a:24:47:5f:25:8a:30:c7:40:a6:2a:3b:d1:69:c7:16:
a2:bf:b9:63:6f:b2:2f:af:88:08:2d:b7:e4:30:72:35:05:e0:
52:a5:f9:16:c3:fd:5d:9d:38:fd:04:4e:ee:5d:54:71:d6:e5:
93:86:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:00 2025 by rpki-client