Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/M3xUuEZ48QOwC0MK3EDUlqXxoJw.roa
File: M3xUuEZ48QOwC0MK3EDUlqXxoJw.roa (raw, json)
Hash identifier: DSg9HUL0GTTvZzjK4ieTF0qdeS8JhGRQcQHfpbK/dVo=
Subject key identifier: 33:7C:54:B8:46:78:F1:03:B0:0B:43:0A:DC:40:D4:96:A5:F1:A0:9C
Certificate issuer: /CN=f998035895f95549c2cdaac3f005446cbdd11c02
Certificate serial: 0188141483C4F9A8C7E1CCBB63316849ACD9
Authority key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/M3xUuEZ48QOwC0MK3EDUlqXxoJw.roa
Signing time: Sat 13 May 2023 07:47:48 +0000
ROA not before: Sat 13 May 2023 07:47:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.250.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:14:83:c4:f9:a8:c7:e1:cc:bb:63:31:68:49:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Validity
Not Before: May 13 07:47:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=337c54b84678f103b00b430adc40d496a5f1a09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:37:98:d2:49:8f:e2:bf:be:0a:76:54:d1:
ef:a4:44:3d:aa:8b:7d:5d:b7:97:b0:c5:b4:90:b3:
6a:6a:5e:19:c9:bd:8f:8b:51:da:cf:41:de:95:9e:
f7:42:bb:de:74:33:6e:1b:67:87:e9:e6:82:22:dd:
76:23:73:bc:6f:a3:80:d4:1a:18:63:1b:c5:4a:94:
cc:39:09:32:ce:0d:15:cd:a8:81:42:9d:f3:eb:1c:
f9:63:32:3f:3b:78:cd:ad:00:6f:8d:60:06:96:0b:
bb:f4:62:04:e8:41:5a:2e:5f:db:cf:55:82:5b:1b:
e2:d0:31:01:db:d8:9b:c7:a1:9f:bf:f4:dd:fa:24:
e0:7d:74:5f:57:3c:4c:86:3c:01:19:53:a4:d0:02:
52:1e:c4:92:dc:33:6d:54:e5:07:9f:9b:8e:ac:5a:
c7:ed:f8:1d:e5:81:17:48:a5:9e:f8:2a:da:6a:d1:
31:45:f8:fb:93:5a:eb:85:c1:65:fe:96:89:a3:39:
eb:a6:b9:20:23:2a:b5:48:80:20:a5:78:5d:f4:0e:
c1:b8:d4:95:96:ab:9d:a9:3c:58:c0:ff:d8:6a:3f:
ba:67:75:54:b1:3a:d0:70:d4:d6:ed:ce:a0:be:2c:
e4:81:d1:4c:9c:3f:5c:6c:39:dc:07:a7:a2:a8:02:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7C:54:B8:46:78:F1:03:B0:0B:43:0A:DC:40:D4:96:A5:F1:A0:9C
X509v3 Authority Key Identifier:
keyid:F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/M3xUuEZ48QOwC0MK3EDUlqXxoJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.42.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:97:f9:3c:01:ee:1f:f3:ef:36:b0:47:58:ba:8c:8a:a7:28:
3f:87:cb:96:b5:ae:cf:74:9c:7d:bf:fd:10:ff:3a:ba:86:8a:
9e:37:b2:72:24:8f:77:b0:92:ab:a1:51:1e:5c:15:16:d6:00:
56:a4:d2:07:39:6f:85:4e:68:19:92:a1:80:1c:0f:6c:83:13:
6c:31:fc:3d:f3:9e:22:ec:d7:28:bd:11:36:25:42:f1:a3:6c:
e9:dc:c2:38:3e:74:a7:7b:c9:46:3b:79:03:3b:e4:5c:81:66:
56:66:3d:b3:3f:4c:69:59:a1:89:41:1a:5a:87:8b:50:f5:6a:
69:0c:40:28:61:b1:34:14:67:2b:a6:51:11:aa:ee:5b:b7:c4:
cd:b9:14:ac:04:50:90:c0:d8:6f:5f:b2:f3:a8:df:bf:e9:a8:
de:50:b9:54:d7:02:3a:cc:29:35:de:7b:79:aa:c9:97:90:18:
02:bf:44:82:4b:87:c1:17:59:e0:76:f3:89:c0:d5:b1:be:b0:
d8:75:1e:42:1e:ff:b6:66:d5:9b:af:c0:43:e8:d3:6c:f6:ae:
3a:70:9e:77:77:f8:1a:4e:a8:28:21:85:fe:14:2b:09:31:c4:
d0:3b:ff:da:30:78:07:36:6a:1b:bf:d5:a6:9e:43:22:3c:c5:
1e:90:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:28 2025 by rpki-client