Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/MNaMRPeSME_XYwjj2iW6Vinmifg.roa
File: MNaMRPeSME_XYwjj2iW6Vinmifg.roa (raw, json)
Hash identifier: /1QrovjxUCyErSvoCQnPnqMxU5YJcSU6R6BPRoCuQcg=
Subject key identifier: 30:D6:8C:44:F7:92:30:4F:D7:63:08:E3:DA:25:BA:56:29:E6:89:F8
Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial: 0194228D9465C0826F04B554E6285AB623E4
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/MNaMRPeSME_XYwjj2iW6Vinmifg.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.88.184.0/24 maxlen: 24
185.88.185.0/24 maxlen: 24
185.88.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:94:65:c0:82:6f:04:b5:54:e6:28:5a:b6:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30d68c44f792304fd76308e3da25ba5629e689f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:65:b2:e5:3a:44:9d:a6:fc:11:55:2b:47:
d4:ad:ae:3a:af:4e:89:de:02:50:4d:40:06:a9:3c:
9d:c8:f1:d1:c3:04:a0:a7:8e:70:eb:cb:a3:eb:09:
19:57:a7:91:0d:82:e8:85:b4:10:83:09:e6:37:12:
6f:db:06:de:1e:ae:6b:eb:2a:c6:af:8e:bb:06:58:
ba:1b:24:27:54:1b:e7:7d:dc:4f:ee:d4:8b:8b:60:
4f:07:96:0b:9c:54:40:b1:e8:b1:50:91:1b:e2:d2:
b0:03:e6:9d:fa:04:14:cd:b6:c9:c1:74:a0:67:65:
a0:f1:a6:a4:f9:ff:3a:02:04:fc:c0:d1:55:a1:1b:
3f:11:c1:25:27:c1:67:7a:89:65:36:e6:28:0f:de:
dd:c2:bf:4c:ad:72:4b:0f:91:79:dc:e2:19:54:57:
8c:55:f1:5f:46:ae:34:ab:8e:e9:93:6b:87:6e:f8:
95:b4:05:a5:db:f6:04:ea:0a:a2:4e:f4:41:0d:2b:
ba:19:3e:d5:d5:34:87:24:c6:f5:8c:cc:45:21:dd:
80:2c:34:3a:f2:6c:85:69:87:4c:21:7d:26:c3:32:
19:e2:43:64:6d:79:eb:95:63:fe:8f:43:4c:39:f7:
c7:af:83:f7:89:b2:5b:42:f2:c7:10:08:37:e1:3c:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:8C:44:F7:92:30:4F:D7:63:08:E3:DA:25:BA:56:29:E6:89:F8
X509v3 Authority Key Identifier:
keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/MNaMRPeSME_XYwjj2iW6Vinmifg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.184.0-185.88.186.255
Signature Algorithm: sha256WithRSAEncryption
92:1d:70:8a:33:6c:7f:a6:f3:a3:7b:51:ab:f8:f7:d3:98:c3:
f9:cd:b6:02:3b:53:3b:3d:3a:66:dd:ab:f5:6e:fc:07:b0:65:
cf:fb:f7:84:18:ef:8e:b7:2c:dc:72:9e:47:f6:e8:49:99:52:
74:8c:00:09:b4:da:74:81:36:2d:0e:ac:90:3e:7f:c1:8e:47:
42:6a:4c:81:77:c0:1b:d6:1a:c3:2f:49:6c:b3:59:4d:28:91:
41:fa:f7:05:f1:6f:55:30:27:dc:4f:a2:71:d7:ef:ba:eb:67:
6b:03:05:48:74:65:f7:73:e6:8d:1f:f3:e4:d3:02:1a:e5:92:
d9:fb:43:25:68:0b:be:30:ae:78:2b:41:21:7e:12:b9:e8:ce:
6f:60:ca:07:36:c7:50:a0:80:d4:84:0f:6a:b4:2a:55:58:83:
a1:5e:2e:bc:a9:95:d0:66:1b:62:e6:15:be:62:92:70:a5:f7:
59:dd:a0:e8:54:44:07:51:04:fe:2f:ab:37:1b:b0:23:5f:28:
51:b8:a1:75:d9:17:1c:c9:11:4a:a8:cd:da:82:51:2d:3e:f8:
8d:a2:4a:8b:e4:15:34:b5:05:26:44:0b:21:30:a5:64:1f:95:
76:06:6e:19:f4:0c:40:82:7a:f4:f5:4d:e9:ba:b6:ad:3e:35:
2b:58:32:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:16 2025 by rpki-client