Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/mIknYG3WTBISQkb0avBlTMQBHO0.roa
File: mIknYG3WTBISQkb0avBlTMQBHO0.roa (raw, json)
Hash identifier: iFjLxQXc/Bjp4mKvj7ItM6hlDfEhly4nMW0gLz+f1Fc=
Subject key identifier: 98:89:27:60:6D:D6:4C:12:12:42:46:F4:6A:F0:65:4C:C4:01:1C:ED
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 0194221FE601568A2D53CA7057436CEB646C
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/mIknYG3WTBISQkb0avBlTMQBHO0.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.179.150.0/24 maxlen: 24
185.179.151.0/24 maxlen: 24
185.231.165.0/24 maxlen: 24
185.231.166.0/24 maxlen: 24
185.240.125.0/24 maxlen: 24
185.240.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e6:01:56:8a:2d:53:ca:70:57:43:6c:eb:64:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988927606dd64c12124246f46af0654cc4011ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:7d:02:57:ee:22:30:78:5d:97:9f:2e:26:
54:7b:ee:98:ee:7c:51:30:b5:3b:72:4d:67:21:94:
9d:c9:57:c6:24:b3:07:8c:e5:cd:64:7d:86:60:94:
a8:48:88:e3:a2:50:fa:35:7d:50:dc:64:6f:50:47:
11:70:64:18:2c:71:43:7d:57:8d:00:79:dd:ca:19:
7d:d6:78:1e:51:45:2f:c6:94:4d:47:70:fb:f3:2a:
ca:c5:8f:3b:ef:0c:3f:57:ac:09:ea:9f:87:3e:90:
ad:a9:5a:59:70:83:f7:2e:f7:7d:b3:1a:a0:03:2b:
bb:b5:c9:e3:a6:31:f6:6b:ff:0e:81:6c:26:20:72:
36:be:88:8c:4a:99:f0:00:db:dc:c3:5c:a8:5e:fa:
74:29:35:98:08:a1:ab:96:c9:ac:72:21:a9:70:6c:
ef:dc:88:cb:a4:10:07:89:0b:22:ca:97:8d:73:06:
79:8c:8d:28:ae:c5:15:2a:a5:dc:f5:a4:99:f5:b2:
a9:ce:7f:a8:e8:dd:69:f4:2f:a3:d0:99:39:85:ac:
2e:b8:88:90:fe:49:9d:69:f6:17:13:46:f6:65:d9:
73:6d:fd:13:75:b3:69:5d:1a:5e:77:f3:89:36:59:
29:12:ee:e8:15:92:92:67:73:34:0d:b0:88:82:25:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:27:60:6D:D6:4C:12:12:42:46:F4:6A:F0:65:4C:C4:01:1C:ED
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/mIknYG3WTBISQkb0avBlTMQBHO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.150.0/23
185.231.165.0-185.231.166.255
185.240.125.0/24
185.240.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2d:90:90:49:33:ed:36:c5:bc:18:3b:e7:f5:66:bc:79:74:
fa:2a:47:3d:03:cf:e8:84:e5:2f:fb:dc:4c:65:9e:0c:0b:83:
e9:a8:98:32:64:ac:dd:e0:f0:b2:c2:89:85:6e:f6:bb:0f:0c:
8d:38:8e:0a:7e:98:88:1e:2d:d4:a4:73:3a:b6:44:2b:1e:82:
25:e7:24:d6:35:ea:b7:3f:0f:1b:a2:55:82:ae:35:8b:ff:ad:
f2:65:d2:de:39:ab:5f:24:b1:3d:3d:32:cf:15:4f:8d:42:5e:
a3:d4:28:e6:ff:cb:08:85:9e:29:07:58:68:3d:b1:08:61:aa:
80:fa:c2:7a:17:a6:d4:8b:ed:25:8a:9b:61:d2:a2:bd:2d:20:
f9:dc:37:f3:d4:56:eb:20:7a:bf:1a:aa:0f:ea:9d:a5:ad:3d:
39:30:2f:b2:44:ec:fe:05:af:a3:8f:b9:4d:60:29:b8:73:28:
b1:d6:68:48:32:36:0e:59:fa:1c:91:58:f2:21:07:aa:22:3a:
7d:e3:93:35:74:47:5f:b7:16:92:79:e1:ec:e9:35:5e:49:90:
7b:85:3e:f3:f2:11:ac:79:2d:46:80:cd:ad:8b:84:33:9c:29:
b7:f5:2b:99:cb:f9:9e:52:03:8a:5a:94:a9:39:74:b9:3c:2a:
48:88:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:51 2025 by rpki-client