Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/McVxZBryvkmuF-bPA73IcMB_mpE.roa
File: McVxZBryvkmuF-bPA73IcMB_mpE.roa (raw, json)
Hash identifier: 7+xtvFjet//s2uRKJ1wBI0T1fYDSY0TcheSLEY2WY4U=
Subject key identifier: 31:C5:71:64:1A:F2:BE:49:AE:17:E6:CF:03:BD:C8:70:C0:7F:9A:91
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27EA53B5
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/McVxZBryvkmuF-bPA73IcMB_mpE.roa
Signing time: Sat 01 Jan 2022 13:00:24 +0000
ROA not before: Sat 01 Jan 2022 13:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39847
IP address blocks: 89.185.160.0/19 maxlen: 19
178.18.176.0/20 maxlen: 20
185.150.120.0/22 maxlen: 22
2a00:b280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669668277 (0x27ea53b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31c571641af2be49ae17e6cf03bdc870c07f9a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:f8:1b:b4:70:ff:2e:e2:6a:6a:8f:68:c8:
b4:29:2d:b9:ea:b8:ff:e9:a1:0f:b8:4c:de:14:a5:
09:4b:9e:c4:da:b8:4b:90:e2:8b:b2:3e:7f:ea:8b:
d9:3e:4d:dc:cb:18:e8:bb:2c:06:ce:60:b0:5d:91:
68:be:31:29:4d:85:78:c7:95:dd:72:2e:69:b0:06:
38:c4:9b:90:73:84:89:af:12:d1:79:37:56:89:be:
51:48:47:ec:3a:f3:01:3d:36:1c:2e:64:f0:2b:cc:
59:bd:61:90:df:b3:5e:39:ca:85:d6:6b:5b:41:ac:
97:f0:e6:94:95:32:29:3b:71:bb:c9:6e:93:61:8e:
0c:98:86:2e:9b:d9:27:29:0c:48:f5:9c:00:9f:14:
68:a5:0c:e8:44:40:89:67:21:fa:d6:b7:44:2b:e2:
0d:d8:fa:52:91:71:a6:71:5b:8b:d1:24:44:b1:16:
89:88:d8:78:a0:c1:1d:2b:c6:a1:e9:06:1e:73:61:
73:36:dd:21:38:32:02:80:79:8b:d4:02:40:08:88:
78:8d:05:f2:28:e6:05:5d:bc:ff:db:21:75:9d:62:
37:71:f8:66:db:ef:04:0f:c8:f7:36:2e:81:13:a9:
44:d5:31:d6:87:d0:8c:dc:0c:a0:25:1a:5a:90:6b:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:71:64:1A:F2:BE:49:AE:17:E6:CF:03:BD:C8:70:C0:7F:9A:91
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/McVxZBryvkmuF-bPA73IcMB_mpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.160.0/19
178.18.176.0/20
185.150.120.0/22
IPv6:
2a00:b280::/32
Signature Algorithm: sha256WithRSAEncryption
2f:e1:04:f5:e5:7a:13:c5:87:8b:00:a4:90:4e:55:51:49:30:
7f:d2:55:e6:98:84:93:75:01:03:a0:57:c1:01:a4:f9:06:b2:
16:9d:45:e6:28:9a:f5:46:8f:e9:53:69:91:1d:3d:3d:a8:b4:
46:43:d4:63:51:33:4b:83:ab:89:9c:ca:89:12:c8:65:fb:05:
36:4f:30:d9:f3:27:12:bb:71:c7:85:13:39:ac:a6:1d:31:f9:
8b:7b:5e:32:b0:1a:5c:9d:e8:45:ca:89:94:0e:60:c7:d7:ce:
ff:51:c2:9e:e1:6f:54:f5:5e:83:8a:a2:2a:80:ad:11:5d:d2:
d5:6d:4f:df:4c:b4:18:e1:f5:c3:00:85:8b:30:4c:76:1c:0c:
64:10:2a:ef:0e:21:5e:6d:22:72:6b:69:3a:55:6c:5a:33:b2:
09:7c:3a:80:31:b6:5a:13:9f:2b:ca:1d:42:6f:70:8c:c8:f3:
88:45:ab:6d:59:bb:2d:9e:74:92:8a:91:61:26:ed:39:40:10:
70:30:7e:e9:29:64:fc:e8:cf:47:83:52:7a:5f:39:0a:03:b3:
56:0d:eb:af:d5:d4:f8:cf:3d:fc:0a:2b:6e:19:50:fb:9f:8b:
53:07:19:c1:70:0a:9b:d5:2f:9d:a3:6e:29:92:27:87:55:16:
e3:fb:90:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:35 2025 by rpki-client