Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa
File: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (raw, json)
Hash identifier: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=
Subject key identifier: 98:C9:A8:B6:E0:F4:4D:92:9D:89:C4:03:7D:9E:99:FC:DD:F9:66:A2
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0194282800F3D667C5B5947E5F46832FAA6B
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa
Signing time: Thu 02 Jan 2025 17:54:57 +0000
ROA not before: Thu 02 Jan 2025 17:54:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 31.129.22.0/24 maxlen: 24
45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
92.118.112.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:00:f3:d6:67:c5:b5:94:7e:5f:46:83:2f:aa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 2 17:54:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98c9a8b6e0f44d929d89c4037d9e99fcddf966a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:1c:c7:4f:a6:22:19:c2:a0:29:09:5f:8c:
37:39:13:03:b6:0d:74:2d:fb:01:eb:27:ad:39:20:
17:65:43:58:27:9f:50:d1:53:6a:f1:84:0d:47:84:
6a:f7:e6:ea:45:05:d3:d4:70:10:99:0c:93:d2:13:
80:5d:c2:fc:3e:69:c4:1b:d8:51:09:ae:aa:60:9c:
9f:66:e3:96:07:de:6f:9c:88:3e:b2:57:04:2b:3c:
ed:b7:19:f1:19:68:2d:34:a7:5e:f6:06:c8:88:b3:
ec:7e:ff:ef:79:ea:6b:16:12:68:18:65:e3:4c:76:
da:4a:c9:3a:61:7c:86:01:29:19:cd:1c:15:8d:c1:
3b:a6:57:52:7b:22:63:72:a7:b1:41:0d:49:7b:0d:
6b:3b:e7:01:b0:92:04:90:af:47:b4:aa:76:4c:29:
7a:db:07:db:d9:aa:0c:3a:d8:17:19:04:1d:50:65:
f9:09:58:66:d2:0a:f7:73:75:0a:25:ab:40:c6:98:
e8:af:39:35:aa:b1:99:fb:d4:73:24:65:94:a9:d7:
33:c6:3e:95:93:a1:de:c1:7c:3b:26:8f:61:6a:27:
22:23:4a:a2:6e:3c:c8:7e:5b:87:b8:3d:a4:0d:ae:
30:6a:e4:94:72:fd:33:79:89:19:fc:f1:19:bf:1d:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C9:A8:B6:E0:F4:4D:92:9D:89:C4:03:7D:9E:99:FC:DD:F9:66:A2
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.22.0/24
45.95.232.0/23
77.83.116.0/24
89.191.232.0/24
92.118.112.0/24
141.98.233.0-141.98.234.255
185.247.184.0/24
194.28.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:de:8b:2e:b0:51:92:64:93:8b:a0:29:34:73:c5:4d:a4:a7:
bb:0f:ce:c8:8d:19:39:a4:24:39:4f:77:8a:d7:9d:b6:c3:0b:
da:d1:e4:a1:6c:fb:86:77:f3:6f:9b:71:6d:9f:d2:d0:3d:04:
ee:0c:27:27:a0:48:9c:f2:e5:65:3a:ca:e2:97:b2:c5:65:e1:
2a:4b:03:d9:9c:cb:ab:30:59:5e:f5:a6:65:1f:03:96:99:f3:
52:64:16:5a:97:20:48:c3:33:0a:66:8f:f1:d3:4c:52:91:c3:
bb:df:03:a3:cd:8d:95:a8:30:d2:22:4c:44:3b:f9:54:a1:a6:
13:ab:d5:63:32:e9:8d:97:9e:6e:d6:b3:a2:03:f5:9f:b1:42:
45:5d:55:5f:e5:7a:e6:e9:e4:cf:b5:a9:b0:45:a9:d0:4b:7a:
6c:7b:5d:f2:a7:cc:10:1f:73:6c:b6:e8:c5:78:33:18:ac:fb:
fb:d0:4a:a5:a4:88:f4:4f:47:de:5f:3f:86:8e:7a:45:7c:eb:
43:16:2c:83:b6:09:b6:81:bb:6a:31:ce:4c:dd:c4:da:c7:17:
c5:22:0a:8a:b1:3d:db:5f:45:54:89:f4:6d:89:89:91:d5:c5:
36:b5:93:5d:34:c9:a2:6d:95:67:99:6c:43:aa:e0:39:24:57:
77:7e:67:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:41 2025 by rpki-client