Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/mWRTPL42M1-BDBnXiAo2SLNvDWU.roa
File: mWRTPL42M1-BDBnXiAo2SLNvDWU.roa (raw, json)
Hash identifier: U86klnhFQb5zXq9g4gm0uy2+01OP2BrgD1XYtsHNE4s=
Subject key identifier: 99:64:53:3C:BE:36:33:5F:81:0C:19:D7:88:0A:36:48:B3:6F:0D:65
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0186C5DF069E802A1649F10BBCDB5991412B
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/mWRTPL42M1-BDBnXiAo2SLNvDWU.roa
Signing time: Thu 09 Mar 2023 10:16:13 +0000
ROA not before: Thu 09 Mar 2023 10:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202421
IP address blocks: 185.204.176.0/23 maxlen: 24
185.204.176.0/24 maxlen: 24
185.204.176.0/22 maxlen: 24
185.204.179.0/24 maxlen: 24
185.204.178.0/24 maxlen: 24
185.204.178.0/23 maxlen: 24
185.204.177.0/24 maxlen: 24
2a0a:fac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:df:06:9e:80:2a:16:49:f1:0b:bc:db:59:91:41:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Mar 9 10:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9964533cbe36335f810c19d7880a3648b36f0d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:84:85:02:84:57:d9:00:fe:f3:af:ac:c1:
d4:98:67:00:1e:28:c6:33:38:7c:8d:44:67:49:b5:
28:45:32:b0:97:dc:5c:55:0c:a8:e6:0e:08:1c:c8:
f3:ce:c9:09:3c:da:b5:df:ba:e3:1e:f2:90:7b:78:
62:bd:63:9b:64:b9:22:49:5e:15:ae:f1:bd:04:31:
b1:e2:5d:8b:fd:de:03:dc:c7:bb:ef:13:b9:5f:3f:
99:99:3f:41:53:83:60:20:10:2c:b1:7e:c9:32:1e:
73:cf:58:b9:fb:64:98:c2:61:20:2a:ec:c6:b5:d8:
cc:f6:f1:6a:a3:40:e6:87:22:a3:4b:46:a7:91:ff:
54:76:12:57:ab:21:3a:22:4c:81:03:5c:04:e6:ff:
f6:f0:85:71:be:d3:d3:46:1e:0d:4b:50:92:e6:49:
38:74:5b:f0:41:06:e8:64:86:33:e3:49:e0:3e:ce:
76:6e:68:dc:99:47:bd:ff:bb:f0:87:73:f6:67:f1:
30:82:06:6e:95:20:83:10:70:22:fe:6c:99:ba:41:
b9:83:84:6d:33:ab:4a:d3:3d:6a:15:02:f2:21:6c:
3e:98:f0:76:6e:6a:57:14:66:fa:ed:c2:7e:7e:28:
a9:f0:aa:41:1c:ca:27:07:62:28:43:94:ee:f9:51:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:53:3C:BE:36:33:5F:81:0C:19:D7:88:0A:36:48:B3:6F:0D:65
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/mWRTPL42M1-BDBnXiAo2SLNvDWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.176.0/22
IPv6:
2a0a:fac0::/29
Signature Algorithm: sha256WithRSAEncryption
39:72:a1:e7:fa:c4:26:77:f1:c2:30:51:2f:50:94:b8:4b:7b:
da:01:44:1e:2f:73:a5:40:f4:9e:dd:d8:4c:83:bd:61:66:4a:
e8:5d:2b:33:67:f8:5e:e5:03:f5:5a:79:88:a3:a4:2b:3b:c1:
29:7b:ca:a0:34:eb:9e:99:58:90:96:7b:6d:85:92:00:a0:51:
d3:be:e1:28:42:37:4a:a4:10:d1:18:44:f5:a4:f1:66:3a:b5:
08:88:29:31:20:c9:a7:45:b2:ea:4d:60:67:c6:c8:6e:19:78:
0a:06:33:29:2e:59:ca:5a:90:92:81:0b:83:0b:be:ae:d2:1b:
90:ca:58:e1:64:17:b1:5f:f7:5f:4b:ef:4c:05:47:87:09:d4:
e1:df:c6:1d:b2:35:34:48:bd:23:25:14:88:d0:1e:99:ca:fb:
cf:d8:4d:51:37:a2:fc:98:a6:29:3b:f9:65:f8:93:2c:20:a0:
8c:24:61:95:fb:5b:07:06:25:b2:0b:54:84:d5:25:0b:62:4b:
41:77:ee:3d:9a:6a:b7:0f:5b:dd:69:23:e1:5a:3b:42:54:e2:
7b:e4:b7:19:da:a7:3b:52:68:88:36:fd:8a:f1:67:67:f1:6a:
8f:31:45:ca:47:1c:3e:b8:91:bc:83:ad:18:5a:65:a8:eb:87:
44:7a:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:22:42 2025 by rpki-client