Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/mm_Nb9z81V6NkXEN_XliD4j7rHA.roa
File: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (raw, json)
Hash identifier: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=
Subject key identifier: 9A:6F:CD:6F:DC:FC:D5:5E:8D:91:71:0D:FD:79:62:0F:88:FB:AC:70
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 0194221F9DE1222919B1255574A0644B634F
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/mm_Nb9z81V6NkXEN_XliD4j7rHA.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201207
IP address blocks: 185.47.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9d:e1:22:29:19:b1:25:55:74:a0:64:4b:63:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a6fcd6fdcfcd55e8d91710dfd79620f88fbac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:eb:f3:35:23:bc:18:d6:40:f5:a3:a7:73:
45:fc:45:ee:6a:cc:db:fb:c0:4a:88:db:b6:c8:9a:
ed:a7:48:cb:d0:64:26:0d:08:7a:5d:38:b4:5b:7b:
29:b4:1f:f8:d7:00:65:00:81:b7:98:2f:66:49:08:
32:fd:93:b2:74:97:15:37:ac:ab:26:8c:b7:cb:fa:
ac:2a:9f:5d:a4:67:09:54:a7:04:48:d2:8d:31:8d:
2a:98:b4:c8:2b:89:a4:fd:cb:2c:c1:d4:95:24:80:
47:dc:4b:ec:7e:a9:f2:c7:65:51:9e:e1:79:0a:03:
aa:0a:92:e7:e5:9a:92:e0:96:79:8c:50:30:f2:49:
55:f0:2a:aa:89:5d:46:01:dd:6a:ff:f3:66:98:01:
34:b2:43:a9:ef:ba:ec:fd:68:c8:e1:0b:2f:d2:88:
43:7e:8a:0a:e8:77:e6:4c:df:c5:5a:88:01:2c:4e:
b2:c4:40:8b:58:ac:0a:c0:2d:e7:c5:17:23:c5:f0:
55:79:25:96:cc:f5:c5:49:ce:48:25:05:31:0f:44:
ae:bc:c8:a9:d3:2e:8b:45:19:9b:87:72:2d:19:20:
b7:4a:c8:91:48:39:df:d7:a4:c6:fe:f2:b6:d3:30:
6e:2d:f5:40:74:bf:ad:6d:35:63:3b:e2:5c:f4:bd:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:CD:6F:DC:FC:D5:5E:8D:91:71:0D:FD:79:62:0F:88:FB:AC:70
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/mm_Nb9z81V6NkXEN_XliD4j7rHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e3:b3:a5:33:30:6e:5f:df:98:c3:31:48:c2:51:66:bf:33:
df:f6:42:2a:fa:a1:e6:07:7d:c2:9b:87:c6:35:d0:f9:c5:61:
19:ab:84:82:ce:50:24:1c:ae:28:3b:a7:d8:7d:0c:56:2d:72:
aa:c5:2b:8e:29:60:0c:98:30:ee:c3:dc:5e:10:f6:c7:c7:1f:
b2:03:4a:30:82:90:7d:05:d1:2b:da:bd:55:2b:34:3e:06:f1:
fc:41:97:e9:cc:ad:13:78:f9:a5:07:3e:f5:b2:84:0c:bd:1b:
7d:7e:ac:95:22:b7:24:dd:2c:46:6f:b8:3b:56:e9:fe:25:4a:
f8:61:ca:63:0e:9e:d9:3a:50:55:7d:59:88:c8:28:f2:de:b7:
d0:dd:b0:87:e7:7f:af:20:c6:e3:bb:91:1b:7c:85:7c:bb:1b:
29:cf:87:84:ae:1f:4a:d5:09:86:d2:20:50:9c:67:38:08:6c:
f9:ea:28:5a:88:74:95:3b:55:a7:4f:a0:52:30:73:13:dc:d8:
36:37:d0:49:69:f4:7b:79:96:33:5c:01:71:11:40:18:b8:85:
87:b3:d6:05:60:5d:88:2d:9c:1f:06:60:d2:16:19:1e:85:28:
86:e1:a1:1f:2f:73:35:33:0d:05:99:f2:6b:d6:94:dc:c9:cd:
93:5c:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:06:18 2025 by rpki-client