Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/RMEEjlIMkQn-eVpgsZKUIgD2naA.roa
File: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (raw, json)
Hash identifier: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=
Subject key identifier: 44:C1:04:8E:52:0C:91:09:FE:79:5A:60:B1:92:94:22:00:F6:9D:A0
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 0194228DB163F790705C0A32A90E8963D7F7
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/RMEEjlIMkQn-eVpgsZKUIgD2naA.roa
Signing time: Wed 01 Jan 2025 15:48:18 +0000
ROA not before: Wed 01 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15725
IP address blocks: 185.98.236.0/22 maxlen: 24
217.17.192.0/20 maxlen: 24
2001:4bd8::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b1:63:f7:90:70:5c:0a:32:a9:0e:89:63:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jan 1 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44c1048e520c9109fe795a60b192942200f69da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:48:ef:0b:05:22:7f:88:f9:7b:36:6b:40:
de:e1:75:87:da:5f:8d:8a:92:41:bc:94:dc:2b:29:
2a:af:3a:65:d6:09:1c:1c:01:58:f6:a8:38:63:48:
9d:70:4f:aa:a5:cb:65:30:51:31:e8:df:2c:db:09:
b1:b0:63:60:21:27:50:f8:98:97:c1:62:00:7e:49:
56:5c:e5:6d:80:e6:9c:c8:02:39:7d:1e:db:8a:94:
a2:3e:2f:db:46:49:3c:fc:35:23:a2:65:04:71:c3:
c6:d8:d9:85:c5:6f:e0:bf:3c:9f:65:16:34:ff:2d:
b2:bc:74:78:7c:1f:7c:5a:a7:bc:ad:16:cf:39:49:
0a:dd:9f:34:08:26:5c:b6:4f:9a:4f:3c:eb:91:ea:
a5:bd:76:7a:22:b5:cf:ad:53:07:00:27:6a:15:34:
74:34:f3:22:d3:b8:cb:b7:d1:ba:d6:41:70:c7:90:
9a:9f:02:c7:d9:fe:fb:a6:db:96:bd:4f:fa:3b:d8:
e2:2a:d9:de:dc:3b:67:2e:05:79:30:5e:44:98:3a:
5a:99:63:75:12:e0:24:0c:57:1a:52:8b:8f:b7:27:
d6:c1:10:10:91:43:a9:1b:d1:ed:e1:4f:87:41:44:
32:0e:72:41:22:be:1a:c8:66:6f:19:47:40:59:12:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C1:04:8E:52:0C:91:09:FE:79:5A:60:B1:92:94:22:00:F6:9D:A0
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/RMEEjlIMkQn-eVpgsZKUIgD2naA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.236.0/22
217.17.192.0/20
IPv6:
2001:4bd8::/29
Signature Algorithm: sha256WithRSAEncryption
54:21:47:5d:7c:c6:a2:d0:2a:fe:f9:94:af:23:e1:c9:11:b6:
a4:ad:1d:02:67:5f:83:ac:e3:72:6d:b7:f1:a5:af:93:59:4c:
8d:5d:d4:f6:7f:b5:f3:a4:08:fe:ac:a6:b9:e8:4c:f9:22:0a:
d6:10:f3:4f:b8:cc:d6:06:70:c0:00:99:4a:bd:78:94:02:f9:
26:f6:64:fd:1a:b8:d2:57:d7:f8:95:20:22:63:cb:ff:ca:4e:
e1:35:9b:6e:1b:d2:21:83:8d:3d:a0:7e:c2:e7:98:93:7a:91:
c9:fb:f7:79:09:1d:f0:06:6c:5c:7a:c5:6a:50:2d:3e:9f:0f:
32:20:21:5b:e0:9a:47:c3:2b:81:07:30:54:f4:6b:58:90:c0:
d2:70:71:01:61:62:7c:62:6b:d1:43:93:1b:f0:ab:bb:70:d6:
ff:89:99:ef:81:e4:1f:ad:00:27:eb:6e:aa:f8:55:25:0a:8a:
24:cb:06:81:f1:83:08:4f:96:31:10:84:5b:f1:c2:09:d7:db:
f8:79:6e:8c:13:7a:af:41:67:1b:ae:d2:b6:de:44:ef:93:d0:
cb:2b:be:c6:d2:d2:a4:22:70:1b:e8:ba:ef:a4:14:3b:3c:5d:
f7:d2:1f:39:29:82:fc:37:da:86:92:fa:ed:44:b1:af:ae:2a:
89:7c:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:15 2025 by rpki-client