Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa
File: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (raw, json)
Hash identifier: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=
Subject key identifier: BB:F9:AA:4F:26:F0:83:2F:A1:A9:50:F0:C0:23:62:D4:17:FE:F2:D2
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019427B58F49CD0BBC57F97A2E169D681207
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 185.196.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8f:49:cd:0b:bc:57:f9:7a:2e:16:9d:68:12:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbf9aa4f26f0832fa1a950f0c02362d417fef2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:6e:c0:33:d7:44:f2:5c:b2:e7:49:cc:42:
be:c7:5f:d2:7e:d4:9c:40:fa:2c:d7:57:ae:fb:ea:
6b:c7:59:c8:70:53:38:f7:7f:40:14:2d:bd:df:7d:
52:64:27:19:fb:ec:67:72:76:5a:24:85:3b:f6:ae:
90:ac:7b:6e:fc:2e:f2:dc:ad:be:ad:c9:ce:67:ee:
63:bb:bd:41:98:5d:07:62:11:8a:9d:2d:86:8b:90:
16:68:41:b3:b7:41:1e:3d:39:7b:8e:03:33:4b:88:
f0:1d:9b:e8:f7:e1:d0:35:0f:65:9c:18:32:f5:1c:
f5:59:9b:4f:2a:9a:45:e7:ba:c5:4d:19:41:6e:12:
0d:ec:6c:29:26:13:65:38:e3:cc:5b:00:a7:0e:71:
ca:52:12:6a:24:e3:ed:fb:8b:ee:77:4d:b4:cc:27:
4e:a6:3e:0e:d2:3c:5e:be:48:b8:1f:94:e0:85:43:
e6:2e:02:b2:78:f8:08:65:15:c5:15:95:f1:68:09:
90:9f:3f:25:9b:5d:0f:ec:92:3f:44:76:b3:f4:2f:
59:58:d9:f9:6f:99:55:88:8c:2d:46:e8:75:c0:ef:
12:45:d0:b8:44:d8:fa:00:48:57:38:fe:ce:5d:fe:
5f:e8:c2:df:c9:28:cd:42:46:2b:ee:ac:65:27:86:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:AA:4F:26:F0:83:2F:A1:A9:50:F0:C0:23:62:D4:17:FE:F2:D2
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f1:d9:82:66:41:94:fe:fa:c7:bb:0a:a8:b3:92:ef:31:8e:
ea:fd:92:07:23:f8:b2:ef:bc:c0:5c:8d:de:97:e0:be:20:e8:
33:02:72:d1:57:cd:29:d1:c4:2f:2e:d1:e4:97:98:ea:bf:9f:
bb:c4:67:48:40:d4:38:1d:72:f7:a0:7b:fb:7f:50:ce:61:31:
3d:e7:87:c1:67:8b:42:07:74:0e:b3:57:93:90:a1:f7:d4:52:
e1:93:27:e0:8f:dc:4f:2a:2a:07:af:5f:67:7f:bf:46:ac:10:
f0:57:cb:e5:a1:d1:ba:a0:5b:6d:e9:b8:91:1c:58:96:cb:df:
0a:1c:cb:af:b3:e2:22:19:5d:30:39:b0:b8:4f:8d:a8:42:ff:
be:4c:5a:cc:ce:66:e6:f2:34:be:c0:4e:c1:63:a3:f6:48:75:
d2:7c:a3:88:e7:fe:1a:3d:21:6d:5e:81:fd:41:b2:94:4e:a8:
b9:cd:3f:68:43:cd:72:2c:2a:24:f3:09:78:f4:f5:22:aa:e7:
a7:37:ba:48:7a:1c:86:51:9a:19:28:0b:66:b1:52:2e:14:05:
82:fc:b1:9a:51:ea:9a:90:37:88:0c:87:c3:8d:b0:cc:e9:a0:
85:d0:32:7e:64:20:49:76:94:7c:94:dd:04:1f:25:4e:e4:6d:
16:6c:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:06 2025 by rpki-client