Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/mVkotRg_jnYAZxmS56-NJP6dC90.roa
File: mVkotRg_jnYAZxmS56-NJP6dC90.roa (raw, json)
Hash identifier: IBFQ1yjofeWot/ZONkzfIQ1EBWv5WiCX3Lu+aNRg4V8=
Subject key identifier: 99:59:28:B5:18:3F:8E:76:00:67:19:92:E7:AF:8D:24:FE:9D:0B:DD
Certificate issuer: /CN=2ed318ba1e8542312c47e9a3510ba21b1efaa8d7
Certificate serial: 0182CEC24F913DE38D6BEF3DDBE6F5BDA984
Authority key identifier: 2E:D3:18:BA:1E:85:42:31:2C:47:E9:A3:51:0B:A2:1B:1E:FA:A8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtMYuh6FQjEsR-mjUQuiGx76qNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/mVkotRg_jnYAZxmS56-NJP6dC90.roa
Signing time: Wed 24 Aug 2022 07:30:16 +0000
ROA not before: Wed 24 Aug 2022 07:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31653
IP address blocks: 217.149.12.0/24 maxlen: 24
217.149.14.0/24 maxlen: 24
217.149.13.0/24 maxlen: 24
217.149.15.0/24 maxlen: 24
217.149.4.0/24 maxlen: 24
217.149.0.0/24 maxlen: 24
217.149.2.0/24 maxlen: 24
217.149.1.0/24 maxlen: 24
217.149.3.0/24 maxlen: 24
217.149.5.0/24 maxlen: 24
217.149.11.0/24 maxlen: 24
217.149.7.0/24 maxlen: 24
217.149.6.0/24 maxlen: 24
217.149.9.0/24 maxlen: 24
217.149.8.0/24 maxlen: 24
217.149.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:c2:4f:91:3d:e3:8d:6b:ef:3d:db:e6:f5:bd:a9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed318ba1e8542312c47e9a3510ba21b1efaa8d7
Validity
Not Before: Aug 24 07:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=995928b5183f8e7600671992e7af8d24fe9d0bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:d0:cd:04:ea:82:2e:a6:aa:00:01:d5:8f:
fb:97:c8:76:c9:89:41:14:f4:61:10:ec:02:06:16:
06:0a:4c:a4:9d:a1:44:ac:f1:e1:0e:65:f4:37:be:
2d:37:fe:a9:fa:ea:cc:fa:25:d0:3e:90:87:5c:cc:
82:f0:d5:75:5c:56:54:30:8a:13:6c:7e:74:b9:fe:
9c:6c:98:50:cc:e6:47:06:c3:dc:7f:fc:7d:4a:18:
54:88:46:cc:3a:50:0b:7c:d1:9f:5c:8b:b5:e4:87:
18:f9:0d:4e:7b:ba:9f:f6:7b:c3:86:bc:c0:ff:e4:
e0:b5:cc:e1:ff:f3:55:03:4c:05:31:ba:c3:35:d1:
ae:cd:b6:fb:9a:60:33:35:22:75:30:e8:64:7e:a4:
7b:c7:32:5b:88:7a:ca:0b:4a:cb:8e:e8:e8:7a:38:
3d:2c:8f:d6:5e:97:e5:26:2b:6d:1a:2c:1c:aa:42:
1a:68:5b:e3:3a:46:66:56:0b:be:91:2d:49:b2:f4:
f1:04:35:85:bb:0a:72:43:9d:fb:46:72:5b:71:d3:
a1:27:84:ad:63:41:7b:de:4e:5e:79:45:01:2b:a8:
b4:28:6d:33:4c:00:8c:b7:ba:d2:ef:dd:be:9a:28:
01:6d:5e:7c:af:ed:43:91:38:f5:47:6f:fe:33:d9:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:59:28:B5:18:3F:8E:76:00:67:19:92:E7:AF:8D:24:FE:9D:0B:DD
X509v3 Authority Key Identifier:
keyid:2E:D3:18:BA:1E:85:42:31:2C:47:E9:A3:51:0B:A2:1B:1E:FA:A8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtMYuh6FQjEsR-mjUQuiGx76qNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/mVkotRg_jnYAZxmS56-NJP6dC90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d197da-9714-4227-a726-1cc6afb5fd92/1/LtMYuh6FQjEsR-mjUQuiGx76qNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.149.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:9a:1e:2f:d5:6a:71:0a:20:70:a2:62:e4:06:42:56:9a:ed:
06:f3:7f:c6:0b:51:eb:4f:e9:9e:20:43:6c:2a:b3:56:a5:36:
ad:3e:05:4b:e8:10:c5:4c:6d:56:19:d1:f2:36:49:86:1f:51:
ac:56:b9:8b:d3:1b:69:2b:3e:cd:5e:94:91:58:f1:82:84:7d:
10:ba:f8:4d:43:b2:4e:38:52:0c:62:45:36:13:40:c2:ce:31:
79:31:58:75:bd:3f:13:53:97:69:8f:b3:32:be:ea:e5:26:51:
c6:c3:5b:49:c7:ab:70:f2:fc:ad:79:ea:79:66:0a:09:4f:59:
8e:59:8d:76:50:ad:aa:f9:a8:6a:e6:71:b7:39:40:69:77:56:
b5:0d:95:3f:12:23:05:6e:53:0a:44:46:dd:74:59:dd:62:65:
78:5d:bb:52:fc:aa:7e:e7:71:47:8b:e2:4b:08:e7:56:ee:7b:
29:03:bb:1f:ee:32:da:c7:c7:bc:b6:e8:54:d0:ce:88:21:09:
c9:85:c4:91:95:ce:45:9a:db:a2:9d:1d:6d:89:ba:9d:20:db:
40:4e:01:21:ad:6e:79:9b:52:db:7d:23:b8:99:81:b4:42:bf:
c7:b1:ca:18:80:ac:ba:7a:4d:a2:6a:4e:2a:37:dc:a6:01:59:
af:e5:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:22:24 2025 by rpki-client