Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mAYNKXSyjugPllHX0uLmsICgcJ8.roa
File: mAYNKXSyjugPllHX0uLmsICgcJ8.roa (raw, json)
Hash identifier: wgp41NWapAiztkWqtR63I0x5pPTBnk/AWTJYiS6Q8l4=
Subject key identifier: 98:06:0D:29:74:B2:8E:E8:0F:96:51:D7:D2:E2:E6:B0:80:A0:70:9F
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01949C1E1D04354F7E557B0415C78E1A1E77
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mAYNKXSyjugPllHX0uLmsICgcJ8.roa
Signing time: Sat 25 Jan 2025 06:20:06 +0000
ROA not before: Sat 25 Jan 2025 06:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
128.0.119.0/24 maxlen: 32
185.117.20.0/22 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.22.0/24 maxlen: 32
185.117.23.0/24 maxlen: 32
185.144.100.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
185.227.240.0/24 maxlen: 32
185.227.241.0/24 maxlen: 32
185.227.242.0/24 maxlen: 32
185.227.243.0/24 maxlen: 32
193.201.208.0/24 maxlen: 32
193.201.209.0/24 maxlen: 32
193.201.210.0/24 maxlen: 32
193.201.211.0/24 maxlen: 32
194.36.100.0/24 maxlen: 32
194.36.101.0/24 maxlen: 32
194.36.102.0/24 maxlen: 32
194.36.103.0/24 maxlen: 32
194.124.64.0/24 maxlen: 32
194.124.66.0/24 maxlen: 32
194.124.67.0/24 maxlen: 32
195.85.68.0/24 maxlen: 32
195.85.69.0/24 maxlen: 32
195.85.70.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9c:1e:1d:04:35:4f:7e:55:7b:04:15:c7:8e:1a:1e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 25 06:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98060d2974b28ee80f9651d7d2e2e6b080a0709f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:30:d7:c6:8f:be:64:17:a2:4f:87:ba:19:
77:be:ea:cd:d8:dd:5a:56:8e:41:53:f7:1b:d1:11:
f4:c0:5b:83:d0:93:9c:f0:03:83:13:a9:07:a2:38:
fa:14:8a:65:0a:3a:98:4d:e6:15:89:ce:60:2c:5d:
0b:37:50:68:b7:d3:08:6e:02:57:06:f4:5f:47:15:
f0:b3:53:b3:23:74:ef:74:0c:0e:1f:1c:8d:bb:0e:
b1:e1:6e:3b:9f:29:47:44:39:9e:ba:f6:06:b1:a2:
cb:fc:33:51:50:2e:f1:0a:23:bc:59:f6:78:fe:b0:
4e:d6:f9:2d:8c:fa:86:02:aa:11:3d:88:7b:25:cf:
33:70:8b:95:2e:2d:9e:56:e2:b6:4a:16:1f:a6:ea:
89:34:cd:57:44:7b:cc:cc:dc:7a:c4:2e:c1:37:de:
64:f4:bf:3f:73:be:c5:65:81:66:73:7b:66:97:1c:
ea:d6:89:85:15:34:60:29:b1:63:14:d3:7f:a9:e2:
a9:6c:db:4d:a0:d7:88:c8:f4:ab:a5:89:d8:db:24:
8f:2c:e6:6f:7f:97:35:6b:0e:ee:25:8e:db:eb:77:
04:25:87:34:99:e9:a6:84:c3:86:72:c5:69:b7:94:
20:aa:fc:dc:e0:65:52:e1:8a:bb:17:6c:9c:98:66:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:0D:29:74:B2:8E:E8:0F:96:51:D7:D2:E2:E6:B0:80:A0:70:9F
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/mAYNKXSyjugPllHX0uLmsICgcJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
128.0.119.0/24
185.117.20.0/22
185.144.100.0/24
185.211.48.0-185.211.50.255
185.227.240.0/22
193.201.208.0/22
194.36.100.0/22
194.124.64.0/24
194.124.66.0/23
195.85.68.0-195.85.70.255
Signature Algorithm: sha256WithRSAEncryption
b3:72:14:75:d4:fe:fc:93:45:b0:28:8b:47:20:a5:7d:58:a6:
fd:04:26:c5:8a:56:8b:5d:4e:d2:59:04:4c:26:3a:78:de:26:
7d:a0:ed:2a:1f:cb:34:68:17:15:27:d7:9e:cd:5e:e5:1b:22:
dd:f1:90:20:46:2e:c2:36:eb:7f:bd:b1:5a:b5:d1:52:fe:8e:
1a:35:1d:a8:49:64:48:29:dd:7e:ac:3f:b3:e5:0d:80:ff:06:
f3:d9:10:15:2b:fa:0b:37:6f:d6:83:a0:d5:4b:c7:93:8e:35:
50:6b:f4:85:da:d7:9e:b2:e6:c0:be:42:6e:79:2e:4b:76:b4:
ee:a6:1d:4c:21:29:80:14:a6:8a:c5:ff:6a:7b:85:52:96:3d:
66:e0:2f:7d:2b:5d:39:18:64:60:24:e9:c5:ce:97:83:16:db:
0c:f2:98:5d:1f:a2:d4:93:55:69:22:b3:72:6c:15:c8:5d:70:
74:5b:ec:01:09:5b:f5:a1:62:74:93:98:43:31:de:87:7e:d4:
9d:b1:f3:bd:e6:6e:e6:d7:10:88:40:1e:78:25:0f:f8:68:40:
59:8b:97:ce:85:ec:5d:6a:b5:83:69:01:32:a7:aa:93:8b:38:
63:0a:08:68:24:91:97:98:1c:eb:13:1a:c2:74:7b:83:86:eb:
92:76:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:24 2025 by rpki-client