Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/mkSBlR3iodKC2VfrqDEtHML-L4I.roa
File: mkSBlR3iodKC2VfrqDEtHML-L4I.roa (raw, json)
Hash identifier: AqHE9P/BM9K4nGkIRO8jScclSDa4+lpb2iMAdyIVoMA=
Subject key identifier: 9A:44:81:95:1D:E2:A1:D2:82:D9:57:EB:A8:31:2D:1C:C2:FE:2F:82
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFBEFD9227374FC11D4E153E3A9D1
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/mkSBlR3iodKC2VfrqDEtHML-L4I.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42351
IP address blocks: 185.240.188.0/24 maxlen: 24
185.240.189.0/24 maxlen: 24
185.240.190.0/24 maxlen: 24
185.240.191.0/24 maxlen: 24
185.242.168.0/24 maxlen: 24
185.242.169.0/24 maxlen: 24
185.243.236.0/24 maxlen: 24
185.243.237.0/24 maxlen: 24
185.243.238.0/24 maxlen: 24
185.243.239.0/24 maxlen: 24
185.255.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fb:ef:d9:22:73:74:fc:11:d4:e1:53:e3:a9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a4481951de2a1d282d957eba8312d1cc2fe2f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:30:7e:f3:72:48:52:01:ef:2a:79:c8:b3:
f3:a2:dc:97:d5:d1:d0:1a:42:5d:f8:31:d8:2a:89:
38:e6:e9:9c:7d:4a:32:9c:a4:39:09:24:e9:20:73:
f7:8e:0d:bb:05:a5:8e:bb:21:c3:35:e5:34:f4:14:
2f:93:98:47:0f:12:05:72:5c:19:d3:5a:c5:55:4c:
e7:a5:93:00:e9:8c:cf:57:e1:58:ff:d5:a8:eb:cd:
67:f9:73:02:fa:dd:b7:86:66:5d:7a:5b:bf:d2:97:
35:21:66:f1:8b:30:d4:cc:1a:3d:a3:50:52:9c:e1:
dc:c8:e1:06:87:42:a8:84:b6:91:fd:19:ef:b6:6b:
26:52:84:39:54:e1:ff:a9:4c:65:99:d5:01:e3:64:
56:f9:af:97:eb:bd:46:6e:72:8d:54:07:a5:bc:08:
b1:09:c6:22:1a:e2:45:1d:e4:92:95:6b:72:09:2c:
11:7a:c3:e7:b6:fc:ac:91:48:bc:30:4b:4f:04:af:
cb:8e:7e:fc:41:4f:80:8c:60:d0:2d:7f:b6:d1:db:
a8:21:19:0d:20:48:48:5f:62:d2:9e:a8:18:73:34:
e1:0b:b7:80:1c:6d:c9:ba:70:5d:19:f6:c0:77:8d:
5a:3b:7f:c2:61:66:ad:3d:60:d9:f6:08:84:95:92:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:81:95:1D:E2:A1:D2:82:D9:57:EB:A8:31:2D:1C:C2:FE:2F:82
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/mkSBlR3iodKC2VfrqDEtHML-L4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.188.0/22
185.242.168.0/23
185.243.236.0/22
185.255.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d1:37:0a:cd:91:12:7c:1b:cd:d0:f6:15:b9:55:53:23:25:
60:fc:d1:53:49:c8:56:e6:5b:ce:43:77:7d:34:19:53:ba:a8:
fc:0f:c5:80:0e:e9:e0:e0:18:8e:e4:bf:9b:e9:1f:32:f6:38:
ec:3c:f6:d2:2f:10:7e:28:8a:72:ae:f3:b0:6c:e1:18:f6:04:
9a:f7:e2:a5:b9:f5:11:67:60:7a:10:d8:87:f6:a7:d8:7b:8e:
9f:c1:10:ca:c7:63:87:f4:02:6e:5f:ac:56:6f:6b:ce:e5:b8:
12:fc:f5:75:0d:eb:42:f4:5b:0d:1c:90:98:80:94:7a:bc:b8:
90:d8:6f:db:98:50:72:90:c1:b8:b4:88:50:aa:db:8c:74:5b:
19:6d:b5:75:12:67:ad:88:b2:f8:1c:35:1c:51:ac:f3:33:e1:
48:f3:1d:6e:09:ee:63:36:17:be:ae:93:40:8f:18:be:dd:30:
4d:96:da:e1:74:e2:8f:f1:bb:30:f2:f7:80:62:d4:c8:42:34:
39:52:65:45:aa:72:d4:dd:4f:3a:48:c2:b3:cf:26:b0:8e:1f:
39:75:c6:73:32:54:fc:3d:29:1e:16:65:85:77:73:3e:9c:c7:
f5:e7:c4:ee:63:53:9f:b9:65:5e:19:49:4f:fc:19:72:15:bb:
ea:79:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:33:32 2025 by rpki-client