Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/m5jR0DLnkKFoyRF8ZmLYn7MgZss.roa
File: m5jR0DLnkKFoyRF8ZmLYn7MgZss.roa (raw, json)
Hash identifier: aFoNrw/+SHxdFWb7ycFEp6QQZ1/1DT+fuopRNeXDKjE=
Subject key identifier: 9B:98:D1:D0:32:E7:90:A1:68:C9:11:7C:66:62:D8:9F:B3:20:66:CB
Certificate issuer: /CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Certificate serial: 01942747A4D4F3567614DCBB732C36682C86
Authority key identifier: 3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/m5jR0DLnkKFoyRF8ZmLYn7MgZss.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215162
IP address blocks: 130.185.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a4:d4:f3:56:76:14:dc:bb:73:2c:36:68:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6a00bb3ed907c526addb5aabd9ad764b2c3d9e
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b98d1d032e790a168c9117c6662d89fb32066cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:14:44:ec:4a:a3:a4:21:fa:67:be:14:55:
3a:04:b5:a2:7e:cd:5b:e9:3b:c0:b3:64:37:d5:99:
b5:ae:c1:01:d7:d8:cc:e8:ae:4b:32:0f:cd:3c:36:
b7:76:39:8c:66:25:c0:fc:9f:52:c9:26:78:30:cd:
7b:26:10:26:04:0f:1f:13:ad:80:24:42:ac:38:36:
e2:80:9e:b5:6c:50:51:fe:dd:96:f9:f8:8e:cf:a0:
b3:d1:03:b2:f5:20:9f:2e:01:1f:cb:86:89:9c:c6:
2a:c1:4f:7b:59:80:3c:1a:70:ea:ef:53:1b:c5:ba:
59:f8:1e:e5:93:46:fa:10:22:6d:33:f8:b0:e6:72:
c3:bd:2f:0d:40:11:be:0b:bf:ff:1f:42:84:2c:0d:
be:ba:b9:c2:58:38:fa:bf:5b:a2:bc:fe:6a:c2:83:
9f:29:8b:6e:f2:6b:f5:ed:83:5c:24:11:4d:69:fa:
a4:cc:ea:7f:1e:49:97:c7:d1:fe:3b:8b:f7:42:c4:
4b:f5:7c:b3:6f:73:e0:41:83:d7:10:ba:00:95:2d:
cc:d3:17:0d:07:e5:02:4d:6c:a9:c6:0f:fd:18:15:
e4:44:0e:19:e4:e5:52:da:1f:20:62:67:ef:21:a8:
a6:15:19:e4:83:fe:d6:32:69:9a:a6:4a:43:d7:84:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:D1:D0:32:E7:90:A1:68:C9:11:7C:66:62:D8:9F:B3:20:66:CB
X509v3 Authority Key Identifier:
keyid:3E:6A:00:BB:3E:D9:07:C5:26:AD:DB:5A:AB:D9:AD:76:4B:2C:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/m5jR0DLnkKFoyRF8ZmLYn7MgZss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b3b106-774a-4690-a03c-35c1c79aa1dc/1/PmoAuz7ZB8Umrdtaq9mtdkssPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.166.0/23
Signature Algorithm: sha256WithRSAEncryption
12:d4:b8:f8:5a:50:7b:a2:16:78:bb:82:7c:b1:56:a9:f5:e7:
64:77:74:59:6c:57:14:fe:29:bd:58:83:29:64:54:e5:37:d2:
3e:28:e0:9f:22:c5:19:05:da:df:81:21:55:e6:73:d6:22:5a:
ec:67:70:ad:1a:19:98:40:54:b0:e0:70:75:b0:c7:fd:b7:73:
88:8e:95:1d:41:64:4a:39:36:d9:a7:6d:ce:17:41:cc:10:24:
eb:28:6e:ad:d7:0b:d2:11:a1:26:83:17:3a:97:66:cf:e8:ca:
a9:71:82:c9:3b:80:3f:87:91:bc:4d:e2:31:97:76:b8:5c:15:
f7:7d:dd:fe:f3:47:ca:6a:d2:0c:39:31:8a:f7:eb:91:c5:9c:
4e:b0:a9:bd:8a:d8:fc:be:f6:79:78:4c:57:c3:0a:a5:eb:5c:
ab:26:c4:00:bb:cf:37:14:87:6f:fc:33:96:28:e0:a8:06:64:
f2:98:13:ea:62:30:3b:db:de:69:c4:27:c2:2a:b7:21:b0:c2:
a9:d3:a2:e2:b9:6b:db:51:a3:6e:5a:e3:58:e8:e7:f9:76:4b:
90:07:02:90:5f:87:5d:bd:34:97:9e:34:7c:07:89:54:8d:a6:
94:86:28:a2:59:ae:13:8c:47:52:1c:d0:6f:c3:fe:7a:7b:17:
d1:2a:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:07 2025 by rpki-client