Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-M_cVy9kFw3wBC1mtVaSgmVptUY.roa
File: 1-M_cVy9kFw3wBC1mtVaSgmVptUY.roa (raw, json)
Hash identifier: 73WgKMkQroxvaj7j9kIrY/2SytIr+joj3/xQZT1qptQ=
Subject key identifier: F8:CF:DC:57:2F:64:17:0D:F0:04:2D:66:B5:56:92:82:65:69:B5:46
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 018E2E9A4341035DC08B5BA4366FFE7AC562
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-M_cVy9kFw3wBC1mtVaSgmVptUY.roa
Signing time: Mon 11 Mar 2024 17:40:45 +0000
ROA not before: Mon 11 Mar 2024 17:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11798
IP address blocks: 5.181.180.0/22 maxlen: 22
185.176.92.0/22 maxlen: 22
185.216.104.0/22 maxlen: 22
185.229.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:9a:43:41:03:5d:c0:8b:5b:a4:36:6f:fe:7a:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 11 17:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8cfdc572f64170df0042d66b55692826569b546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:e6:f7:e6:2b:77:41:a0:bb:1d:02:80:f8:
19:e9:d8:9b:8e:5c:ac:dd:3b:8e:05:b1:62:b7:cb:
f0:41:7f:aa:eb:d6:5b:83:8b:2f:5f:94:9d:d3:38:
83:96:ea:5e:9b:d3:a8:7a:9e:e6:c9:dc:f4:36:eb:
f2:4c:34:e5:87:ba:42:74:d9:15:b9:e3:55:e4:a0:
60:cb:ff:63:d2:cb:08:2c:1c:02:1c:de:b6:23:a5:
50:79:ec:6d:a9:a6:88:c8:7f:ae:9b:b2:37:a0:f6:
c4:75:61:89:6f:1b:76:f8:52:21:59:36:8e:77:11:
e0:e6:7d:6c:a7:3a:d0:4e:3e:de:e0:69:a7:cc:2c:
de:5c:72:31:c8:94:2f:c2:5a:4c:e4:c3:9a:31:9e:
b3:71:d9:55:bf:dd:4b:4e:03:58:51:45:6c:6a:dc:
60:f6:7e:3d:b0:9f:4f:1a:6b:de:48:8d:eb:ca:85:
0b:b5:bd:25:b5:bc:50:e7:28:f9:73:a3:ca:f4:45:
ce:58:46:4f:a2:f8:18:f1:41:37:a4:d6:c5:20:19:
a1:7b:23:04:da:f5:31:24:1c:53:6b:ba:cd:fe:28:
4c:26:5e:35:43:40:c1:cd:63:56:15:34:e2:ed:a7:
1b:c3:2b:e9:36:39:1f:08:d3:0f:66:d3:07:07:ad:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:DC:57:2F:64:17:0D:F0:04:2D:66:B5:56:92:82:65:69:B5:46
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-M_cVy9kFw3wBC1mtVaSgmVptUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0/22
185.176.92.0/22
185.216.104.0/22
185.229.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:04:28:43:97:43:1e:b7:e1:42:10:26:76:7a:cc:8f:04:c2:
68:92:6b:da:6e:cc:11:07:fe:c2:86:9d:b3:1c:93:72:94:14:
ce:ff:95:2f:9a:c9:d0:d0:30:37:ff:f5:a9:ba:55:41:d1:c2:
bb:db:9c:2b:ef:bf:b3:fd:16:e9:7e:9c:be:91:07:c9:02:6a:
54:2b:21:bc:29:6b:37:78:a1:2b:6d:e1:61:67:25:75:e2:e8:
50:c5:d7:bc:61:76:11:ba:4d:86:fb:0d:6f:58:d2:fb:c3:2f:
bd:e6:1a:f0:11:ea:08:74:74:d2:90:ec:6f:b3:02:82:bc:b5:
49:c8:d5:b4:2e:90:4b:2c:1b:87:90:d7:ed:3f:39:5e:81:9d:
0b:42:57:47:7b:58:a3:3a:5c:5a:3d:b0:fa:9f:9a:3a:81:0f:
4b:3c:48:c0:71:a1:37:c5:8f:c1:66:88:a7:be:2a:ac:ef:a9:
93:18:63:68:83:97:09:59:f0:95:94:79:4f:f5:61:14:4a:75:
18:4e:db:ab:9c:86:40:3c:71:57:b1:21:2a:7e:a7:43:2a:3d:
ff:99:fd:ac:97:7f:02:08:fa:95:25:e6:b6:fe:40:1c:94:4b:
2d:41:ac:f9:6b:9b:9c:af:99:85:70:bb:90:fc:a4:f3:d8:87:
69:28:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:39 2025 by rpki-client