Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/pMckJnfmgYvFmfu6KqsIjbVGqlA.roa
File: pMckJnfmgYvFmfu6KqsIjbVGqlA.roa (raw, json)
Hash identifier: aJX3oOg3UbLHeLDsni51OwToODaofdr/kawIFWZoGN8=
Subject key identifier: A4:C7:24:26:77:E6:81:8B:C5:99:FB:BA:2A:AB:08:8D:B5:46:AA:50
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0185610E8EDB397A8689A78C77313F4C4DB4
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/pMckJnfmgYvFmfu6KqsIjbVGqlA.roa
Signing time: Fri 30 Dec 2022 03:23:41 +0000
ROA not before: Fri 30 Dec 2022 03:23:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.115.155.0/24 maxlen: 24
86.104.209.0/24 maxlen: 24
217.19.1.0/24 maxlen: 24
89.42.40.0/24 maxlen: 24
93.115.111.0/24 maxlen: 24
185.77.249.0/24 maxlen: 24
84.247.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:61:0e:8e:db:39:7a:86:89:a7:8c:77:31:3f:4c:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Dec 30 03:23:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4c7242677e6818bc599fbba2aab088db546aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:ff:d5:ff:a3:92:42:86:b0:d3:b8:28:63:
4a:a2:04:f8:66:8d:19:10:79:a2:0e:31:5c:6b:6a:
2d:a6:cd:a6:8d:08:72:c3:75:1c:bb:3b:9e:0b:c2:
3d:26:7d:fd:f1:4e:36:16:2b:23:f0:41:50:5d:b2:
8a:63:f5:f8:7c:c5:dd:9c:5d:1f:19:ef:e8:dc:5a:
a6:0c:1e:3f:69:8d:d0:90:7e:4a:af:be:7f:49:f7:
e4:ce:fc:40:70:d9:7c:40:85:9d:bc:d5:25:02:8a:
10:67:c5:c8:89:88:9f:81:9d:87:bc:01:78:95:4e:
1e:49:6f:2c:5b:76:fb:15:63:c8:ed:0c:ba:fa:47:
e4:ef:01:7f:80:b8:a2:39:68:a2:e5:8b:ba:43:f8:
c9:e2:f3:53:60:02:ba:23:0c:b2:6b:43:e7:c1:ab:
70:a6:44:67:a6:de:b7:60:82:48:01:e6:cd:7f:f4:
1d:70:75:70:71:5e:8d:04:b5:e9:ea:ef:62:ff:9a:
47:01:db:88:94:38:44:1f:de:eb:84:24:e2:10:75:
01:05:a5:2a:57:84:bc:fa:2f:54:e2:a7:53:b1:c1:
32:8a:d1:61:d0:22:97:4b:2c:43:5d:c9:ba:64:85:
f7:f2:5d:4e:3b:5b:d4:8f:33:9a:1b:bd:7e:d7:b4:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:24:26:77:E6:81:8B:C5:99:FB:BA:2A:AB:08:8D:B5:46:AA:50
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/pMckJnfmgYvFmfu6KqsIjbVGqlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
86.104.209.0/24
89.42.40.0/24
93.115.111.0/24
93.115.155.0/24
185.77.249.0/24
217.19.1.0/24
Signature Algorithm: sha256WithRSAEncryption
40:26:53:5c:12:18:44:ea:fe:c8:1b:81:12:b8:fa:d9:21:73:
4d:8c:77:83:3a:54:d8:bc:68:70:91:71:40:24:3c:3c:7f:98:
92:98:c8:54:4e:71:cd:04:1c:1a:15:51:9e:b8:27:ca:e0:01:
03:fb:68:52:19:15:b3:0b:47:98:6a:d7:07:85:e9:02:7c:8a:
93:9d:dd:2d:01:09:3c:0f:60:21:34:aa:f3:e5:da:e4:ca:06:
96:1a:4b:8a:27:57:e8:54:4b:d4:21:b7:ee:cb:14:51:cf:a3:
87:ba:1c:5b:f1:48:b9:41:a8:11:31:00:08:4a:26:e0:83:4d:
45:83:d6:0b:73:00:18:fd:06:d0:c0:4c:eb:92:93:4b:d3:2e:
8b:e4:bb:ea:93:d8:58:0c:83:66:9d:0a:49:7f:52:61:9d:e7:
03:16:7f:44:32:5c:20:11:47:9e:f2:86:65:aa:85:d9:5c:0f:
29:a0:10:a2:48:a6:6b:5d:1c:7d:6a:06:1f:02:dc:a9:a5:02:
2c:39:21:e5:d3:d6:a7:46:f8:71:83:91:a7:94:13:16:0c:0c:
b5:95:4d:2e:ea:3c:8a:69:dd:5a:be:1f:a7:3f:cd:8f:5e:ef:
4a:c8:17:e3:52:3d:04:46:85:a0:d1:9b:54:56:33:74:ab:17:
67:db:26:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:53 2025 by rpki-client