Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa
File: me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa (raw, json)
Hash identifier: KdRhruoB4ssCK1ecxTO4OFeivwA74VFCDUNtwELNI14=
Subject key identifier: 99:ED:8C:9B:A8:84:E0:C9:96:AA:A3:1F:79:70:50:5A:1F:4D:56:5C
Certificate issuer: /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Certificate serial: 0194221FB430EE73F58B661CEE73567659B8
Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212453
IP address blocks: 185.192.122.0/24 maxlen: 24
185.192.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b4:30:ee:73:f5:8b:66:1c:ee:73:56:76:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99ed8c9ba884e0c996aaa31f7970505a1f4d565c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:93:eb:d2:b1:3f:c4:b0:87:96:6c:87:59:
57:64:b8:c1:ae:7f:d9:b7:20:ae:64:4b:ac:2b:fa:
43:8a:41:9e:d4:79:2e:e4:3d:4a:aa:04:9d:01:ee:
1c:b4:b5:09:22:e1:e3:1d:39:7d:b7:44:f2:2d:ff:
57:9c:f6:d5:9a:0e:a8:11:51:67:64:a6:b3:73:c0:
c1:7c:10:b0:97:00:13:6b:7e:4f:d9:8e:60:c3:cd:
4e:ee:f9:45:42:05:35:4e:32:6c:f7:db:c8:aa:e1:
e7:57:da:7b:10:71:0c:84:0c:f2:1c:38:d4:b0:7c:
76:d3:eb:d0:67:cf:cc:30:22:2d:92:85:53:bf:9d:
16:73:b3:2b:6f:75:f8:35:8a:4e:b6:8d:aa:d2:8d:
45:0d:90:a4:32:6d:3f:ef:41:ba:0b:3c:1b:e7:c6:
15:5e:10:f0:39:d5:bd:4d:2c:29:7f:06:41:24:52:
00:ac:10:5d:79:60:43:0f:22:03:aa:0d:f1:39:87:
5a:e3:87:10:89:54:b5:a7:60:13:f4:64:0d:a5:40:
3e:d9:bb:dd:71:8d:86:8d:0d:fd:32:fc:bc:6f:9d:
0f:5d:03:77:94:1e:3f:84:e3:7d:54:7f:26:59:18:
cd:a1:fb:75:64:3f:2c:36:b8:1a:6b:89:89:5b:e6:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:8C:9B:A8:84:E0:C9:96:AA:A3:1F:79:70:50:5A:1F:4D:56:5C
X509v3 Authority Key Identifier:
keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e2:ca:83:ad:d6:56:2c:2c:b6:e6:1e:68:92:c6:cf:98:bc:
7f:46:94:df:f6:81:0a:9f:1e:41:82:69:aa:79:78:77:02:e2:
dc:51:69:75:08:8a:60:18:46:a5:2c:a5:19:d7:7b:26:57:81:
3c:94:29:a9:80:cf:8b:a3:bb:e1:ed:32:99:b8:c1:51:d8:80:
9a:af:2b:a4:47:49:c4:00:c2:62:c5:bd:0e:8f:30:4a:2c:08:
cf:58:09:44:3c:5c:48:53:20:c7:35:f1:19:5e:11:a0:0a:57:
08:a2:ec:08:59:d8:89:81:2f:2b:55:3c:54:76:2d:89:1c:d3:
bf:29:bb:fa:15:3c:9f:a0:ee:fd:3a:a1:27:0a:9d:ff:66:fe:
5e:e2:b7:52:6a:c5:a7:4d:08:55:28:48:7c:96:b0:a1:a8:59:
f8:55:72:b9:ad:be:c6:cb:c8:21:0b:89:13:84:2a:59:cb:32:
29:09:80:38:14:f7:0a:90:ff:f6:09:34:26:aa:9b:da:61:1e:
69:c6:7e:ac:de:4b:b9:1c:cb:1f:e2:64:d1:63:0c:7a:5f:49:
59:bd:1c:5f:49:df:22:88:f7:64:1f:91:49:f7:0d:2a:14:38:
d8:94:36:2c:48:50:3c:eb:5e:b4:c7:0c:f5:3c:a1:04:a2:bf:
14:a7:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:44:45 2025 by rpki-client