Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Mjp1Kp6Ar5I3gsAUAbPvZkKT9f0.roa
File: Mjp1Kp6Ar5I3gsAUAbPvZkKT9f0.roa (raw, json)
Hash identifier: 0uQChkPP387oCFA1g6HbdvCAf7TYPAgIYE3q1Aa3PwQ=
Subject key identifier: 32:3A:75:2A:9E:80:AF:92:37:82:C0:14:01:B3:EF:66:42:93:F5:FD
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0194F8D8C251B1B684153A2EABA20B3E606F
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Mjp1Kp6Ar5I3gsAUAbPvZkKT9f0.roa
Signing time: Wed 12 Feb 2025 06:29:02 +0000
ROA not before: Wed 12 Feb 2025 06:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214790
IP address blocks: 5.181.201.0/24 maxlen: 24
45.12.28.0/24 maxlen: 24
89.22.192.0/23 maxlen: 24
185.36.140.0/23 maxlen: 24
185.36.142.0/23 maxlen: 24
185.225.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:d8:c2:51:b1:b6:84:15:3a:2e:ab:a2:0b:3e:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Feb 12 06:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=323a752a9e80af923782c01401b3ef664293f5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:8c:4e:3c:a1:24:17:d6:6c:ad:f7:2f:c6:
b6:da:9f:75:e4:5b:f6:7f:09:60:ea:b2:99:5c:ee:
39:d6:b9:7f:6c:e6:20:45:cb:41:a0:ac:66:e9:86:
72:41:61:8a:c9:42:1c:64:e2:f7:1a:e7:47:84:cb:
3b:22:87:e9:6b:30:62:f7:d2:50:b5:63:2c:e5:65:
17:9a:5b:a2:ef:8e:17:32:2f:04:17:8f:45:a2:67:
76:c7:d2:b6:9d:e2:58:95:6e:15:30:6e:37:5b:ff:
81:ae:e8:7c:60:52:b2:5e:6d:b2:ea:72:d6:55:b0:
b0:8e:cd:2a:44:34:58:66:14:f3:c4:1e:7e:53:36:
76:42:71:53:8c:76:ce:82:74:96:81:50:4d:bd:7b:
96:35:60:f1:3a:14:d6:0c:ef:b9:e6:19:d1:d5:eb:
9f:27:fe:0a:fe:e3:bb:cc:22:03:77:36:c2:5c:7e:
18:4c:6d:8c:2e:3f:83:11:50:23:cc:f0:ef:61:c3:
87:bc:c3:94:ea:69:a6:63:9e:30:e1:ed:11:3b:b6:
6c:f5:52:18:59:d1:f5:55:33:c5:7f:44:bf:2e:35:
e4:45:89:39:cc:83:2f:4f:b1:5e:8d:35:2c:03:b6:
ef:45:2e:4b:de:86:5c:79:ab:3e:ec:c5:de:2a:db:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:75:2A:9E:80:AF:92:37:82:C0:14:01:B3:EF:66:42:93:F5:FD
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Mjp1Kp6Ar5I3gsAUAbPvZkKT9f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.201.0/24
45.12.28.0/24
89.22.192.0/23
185.36.140.0/22
185.225.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3f:1d:4e:16:86:bb:63:4c:92:65:3a:7e:d1:f3:01:cf:4e:
8b:f7:1b:ed:e0:e1:2b:a7:26:7f:3b:83:e0:5d:61:60:c8:6a:
c1:f2:bf:ff:0f:fe:bc:49:5f:88:a0:36:ed:ad:3d:ee:8d:00:
4c:38:ac:53:51:79:06:64:e2:83:1e:67:45:8c:e9:71:40:11:
f9:d4:bf:ba:ba:a1:80:b7:80:1b:8e:00:c7:88:27:b5:7f:a3:
15:13:83:1d:3b:38:a0:30:e5:ba:8b:f9:9a:b2:b1:1e:dd:05:
63:4a:f1:1e:21:b6:1b:28:18:59:04:f8:47:3e:5c:63:d2:5c:
3c:82:46:f8:05:9e:b6:33:50:f1:fe:d2:92:d1:22:d6:66:b6:
51:a2:a1:26:b8:07:65:72:e2:ce:10:38:2b:11:15:10:b3:c2:
36:b9:b4:ef:12:7f:15:4b:77:bc:65:85:75:19:51:e8:e0:1e:
73:3b:25:9c:d0:f6:fd:94:6c:04:a8:16:df:b1:b5:52:67:f8:
f4:15:25:80:db:3e:0e:eb:39:ca:7a:e0:b5:5d:d5:17:aa:37:
d8:c6:b8:0e:ab:29:fd:8b:58:58:5a:a2:a5:0d:ed:fd:57:9d:
c7:ee:d8:a9:7d:db:17:ad:7d:5e:31:ff:21:c8:d0:8b:46:fd:
e2:f0:b5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:52 2025 by rpki-client