Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RP3MriRyIIT5fW2WlyQ4FOpXy3E.roa
File: RP3MriRyIIT5fW2WlyQ4FOpXy3E.roa (raw, json)
Hash identifier: aHnrwILWzkDyGWfcploTPthz2NifBoFltEYi7L1SmJ8=
Subject key identifier: 44:FD:CC:AE:24:72:20:84:F9:7D:6D:96:97:24:38:14:EA:57:CB:71
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0922C2E4
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RP3MriRyIIT5fW2WlyQ4FOpXy3E.roa
Signing time: Sat 29 Jan 2022 08:52:54 +0000
ROA not before: Sat 29 Jan 2022 08:52:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.116.224.0/21 maxlen: 24
89.116.60.0/22 maxlen: 22
89.117.152.0/22 maxlen: 22
86.38.232.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153273060 (0x922c2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 29 08:52:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44fdccae24722084f97d6d9697243814ea57cb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d7:02:6f:d2:7b:61:4a:d7:47:61:82:5b:4c:
fb:08:72:32:e9:43:c7:8a:ec:05:fe:7a:0d:ad:d7:
fb:2a:f7:89:65:3a:26:fe:d1:0c:a0:1b:82:a0:81:
98:68:69:76:da:ee:eb:b7:c3:72:67:ae:ed:e3:40:
44:f8:a8:75:c3:78:13:07:32:48:72:05:93:a1:bd:
d4:75:bb:6b:65:d4:94:38:ca:d2:02:72:db:f2:50:
d1:5b:08:e3:74:dc:8e:ff:5e:56:7f:ec:39:8a:d5:
e7:4e:b6:2b:0d:e9:98:3d:3d:60:c1:e8:b9:89:48:
61:be:3b:1b:ee:c9:7f:e7:00:56:2d:8d:bb:51:68:
c4:da:23:c5:e4:da:da:a1:bf:e3:74:e4:2b:02:e7:
c2:15:56:0e:0e:8f:4a:e8:00:13:9e:24:ba:40:3b:
5f:d4:d1:65:1e:bb:d1:74:27:5f:c3:88:a4:57:10:
ef:28:ba:1f:b7:15:9a:ef:cf:ba:e8:41:be:60:be:
ae:4f:bb:8d:10:3e:76:ff:be:ce:fd:97:92:32:e0:
68:68:78:e8:b8:4e:0a:a1:6b:0b:64:0e:38:97:49:
b4:c2:56:09:60:9d:ee:ce:d2:27:26:1c:f8:90:a4:
8c:1d:d4:74:06:8f:a8:9f:42:77:ad:21:22:6a:67:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FD:CC:AE:24:72:20:84:F9:7D:6D:96:97:24:38:14:EA:57:CB:71
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RP3MriRyIIT5fW2WlyQ4FOpXy3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.232.0/24
89.116.60.0/22
89.116.224.0/21
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:2e:b8:e3:d6:4a:dd:23:0a:6e:d5:d7:cd:5f:71:95:6c:40:
9f:6c:03:7d:6a:59:81:f9:78:34:5b:bd:dd:3d:ba:9b:ea:c7:
d5:08:0e:e1:1f:8f:35:0d:4f:f0:c0:62:1f:d4:04:23:e2:a6:
44:08:10:55:8b:cd:c3:8a:ac:e1:10:7c:fd:d3:f5:0c:a0:fa:
cd:f4:36:44:b3:14:98:74:27:a5:b8:50:ff:99:f7:f9:bd:8c:
df:a5:bc:d8:5a:f2:26:dc:75:76:cd:7f:0d:93:7d:6b:f6:6b:
7a:3a:48:cf:a8:81:0b:5e:14:bd:c6:40:56:52:e3:fe:ce:c7:
43:37:48:9f:ee:70:16:5b:68:08:2d:3c:53:45:5a:fa:44:e5:
b9:03:a3:82:77:e7:c7:ed:77:ae:a1:93:fe:26:02:f6:7f:61:
9b:bc:23:0a:18:70:74:09:45:a0:2c:19:fa:ea:7b:d5:9e:4e:
b1:3d:45:01:ff:d5:a3:14:33:2a:b1:dc:3c:be:a1:91:dd:ab:
f4:f9:87:e6:2b:bf:d8:33:f3:cd:5c:c2:00:b2:1a:bf:8e:55:
49:f7:89:56:8b:59:89:07:a8:75:93:e7:24:8f:b5:48:e3:64:
b2:83:77:da:a7:03:b1:97:d8:31:c7:f9:81:8d:fc:2e:b0:e5:
2f:b1:78:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:55 2025 by rpki-client