Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/mxOxKrBmnmPClr9Kc96iEdW6XUE.roa
File: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (raw, json)
Hash identifier: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=
Subject key identifier: 9B:13:B1:2A:B0:66:9E:63:C2:96:BF:4A:73:DE:A2:11:D5:BA:5D:41
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 019427B625CBC17DE138D3B8BCC606E7C6ED
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/mxOxKrBmnmPClr9Kc96iEdW6XUE.roa
Signing time: Thu 02 Jan 2025 15:50:36 +0000
ROA not before: Thu 02 Jan 2025 15:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209390
IP address blocks: 185.108.64.0/22 maxlen: 22
185.108.64.0/24 maxlen: 24
185.108.65.0/24 maxlen: 24
185.108.66.0/24 maxlen: 24
2a06:6280::/29 maxlen: 29
2a06:6280:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:25:cb:c1:7d:e1:38:d3:b8:bc:c6:06:e7:c6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b13b12ab0669e63c296bf4a73dea211d5ba5d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:d3:2a:bc:1a:be:76:69:bf:c7:f7:63:29:
bc:81:94:3d:93:d5:da:60:cc:be:b7:6f:4a:02:88:
a3:ce:0d:70:ab:10:85:6b:e2:72:94:5f:97:98:8f:
b1:02:42:c4:30:04:20:82:7b:74:e4:a4:38:1c:a7:
1f:cf:ec:9d:86:60:5e:17:0c:ff:9c:eb:a2:d4:a6:
16:c3:d6:49:07:39:b9:aa:dd:45:ee:1d:92:b6:8d:
d1:3e:3c:3c:a8:83:d1:f7:29:11:d5:f9:b6:13:32:
d0:eb:56:a2:fa:03:3e:bf:d2:2f:07:e8:17:44:04:
30:9d:12:59:bb:30:75:c8:d0:33:54:64:1d:ff:66:
34:14:34:13:f3:1f:59:72:d1:2c:9e:4f:2a:fe:59:
73:3e:85:11:c0:76:35:bc:14:ed:48:17:76:1e:f8:
26:95:ef:bc:d0:e7:8d:5a:e4:7b:0f:eb:3a:31:26:
81:85:be:bc:6b:a7:fc:40:e0:74:0a:01:9c:57:16:
2f:c0:09:2e:9e:5c:3c:db:94:24:2c:42:93:4e:fa:
8a:67:aa:0e:e7:a0:5c:5d:44:15:12:1f:8a:e8:f1:
79:23:30:00:95:48:09:90:7d:44:5d:92:6a:1a:b3:
89:a5:de:7f:97:c8:6f:f2:2d:a9:a0:50:4a:5b:56:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:13:B1:2A:B0:66:9E:63:C2:96:BF:4A:73:DE:A2:11:D5:BA:5D:41
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/mxOxKrBmnmPClr9Kc96iEdW6XUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.64.0/22
IPv6:
2a06:6280::/29
Signature Algorithm: sha256WithRSAEncryption
5e:b9:4b:6b:b8:8c:71:f2:8e:b8:94:da:27:dc:8b:02:20:93:
67:06:55:31:47:54:35:8a:56:71:be:be:96:d4:af:5e:4b:dc:
b8:52:99:4b:3b:f5:70:83:a0:5b:e5:cd:7e:8c:25:34:a9:1f:
45:6d:93:8c:33:c9:e5:16:6d:b1:c0:ab:53:5d:ac:4b:f8:59:
2b:28:96:fa:f6:a1:7c:d1:0e:09:d5:64:89:b6:c1:9f:35:b6:
02:d3:34:5e:15:bd:1f:55:11:4b:b8:c7:c6:02:68:6c:40:e4:
ac:19:f6:da:1a:12:4a:1a:05:74:33:a3:69:44:f3:7a:ca:eb:
8c:23:a8:9b:4e:37:f2:62:a2:2c:2d:fe:ab:c9:13:ed:2d:93:
4c:f3:f0:cf:71:9e:7c:99:3c:38:26:eb:f2:4f:48:c2:ab:01:
85:12:7a:10:7d:3f:be:95:b2:b3:ff:1f:4f:28:28:6e:6c:f7:
f9:03:0a:e5:d7:d8:cc:20:2a:f4:00:64:fc:02:4f:73:96:14:
65:cc:db:b3:4d:51:55:53:1d:17:c6:0c:6d:f1:f2:bb:10:59:
42:01:4a:c7:84:26:b5:c9:46:a5:16:01:a9:05:a3:df:fb:32:
8a:33:a8:3f:48:85:5d:86:f1:23:f9:66:6d:7e:71:ce:fc:81:
f2:fb:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:43 2025 by rpki-client