Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/MygocgAInIGRJJaEJXrpW8lbvCA.roa
File: MygocgAInIGRJJaEJXrpW8lbvCA.roa (raw, json)
Hash identifier: LYxeuW2PQXk27eX/gZQiMhPEzhifu9+Q6N69sQgYibE=
Subject key identifier: 33:28:28:72:00:08:9C:81:91:24:96:84:25:7A:E9:5B:C9:5B:BC:20
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018E2E1840EC6FADD42E1EB8416AEEF12E99
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/MygocgAInIGRJJaEJXrpW8lbvCA.roa
Signing time: Mon 11 Mar 2024 15:18:45 +0000
ROA not before: Mon 11 Mar 2024 15:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.42.192.0/20 maxlen: 24
212.42.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:18:40:ec:6f:ad:d4:2e:1e:b8:41:6a:ee:f1:2e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Mar 11 15:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3328287200089c8191249684257ae95bc95bbc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:71:10:0d:9d:f0:91:78:c1:2d:bf:b4:75:
ae:60:11:e6:16:42:0c:ef:b9:a4:5a:51:85:e6:85:
02:84:88:4f:15:ff:c8:f7:c3:07:03:f1:61:56:4a:
bb:e1:f4:71:a0:63:18:bd:e4:65:c9:f2:70:a3:d3:
25:e7:c4:13:89:4b:1a:85:9f:f3:85:6f:74:63:7e:
d7:27:83:00:d8:62:b6:16:74:45:dd:a4:61:ea:7b:
c3:22:d2:14:07:09:77:4a:bd:64:bc:0a:e9:d7:d1:
99:55:58:f8:b1:ac:16:9e:03:95:4a:0d:93:ef:65:
12:0f:c5:71:0c:0e:1f:88:1a:91:c1:3d:ac:45:1f:
77:ef:40:1c:cc:4f:37:05:cd:02:be:5e:29:92:32:
bd:b8:09:b7:40:95:3f:22:71:09:b6:9f:5e:8d:bd:
a7:3b:43:15:70:e8:c9:ee:cc:a1:2e:a2:c7:1b:ed:
6a:9a:73:5c:68:e0:f8:89:90:ac:f6:91:96:a2:17:
83:41:b3:d8:49:96:72:df:57:3d:af:38:06:de:45:
50:f5:ba:e3:a0:e6:18:db:2f:42:25:45:76:8d:a2:
d4:60:0f:9e:39:89:71:be:29:27:94:6c:26:2f:49:
38:59:c6:52:52:9a:1c:30:cb:ed:f7:36:82:d0:67:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:28:72:00:08:9C:81:91:24:96:84:25:7A:E9:5B:C9:5B:BC:20
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/MygocgAInIGRJJaEJXrpW8lbvCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:e9:ff:d9:f4:63:6f:93:89:7f:3e:b2:eb:a5:d4:cf:de:0c:
f8:fe:1f:a6:06:04:9a:48:9f:38:54:e0:d2:19:e4:c3:2d:06:
01:06:d0:eb:46:c7:8b:8e:e6:1d:93:75:a9:07:b4:85:fe:54:
77:61:65:82:9e:a6:e0:dc:01:3e:ed:88:10:bb:0b:af:32:5b:
9e:9d:36:42:dc:88:61:03:e4:83:f4:92:47:4c:7f:92:14:e8:
72:e9:08:e8:f3:d2:dc:4c:fc:6f:c1:38:2e:d6:e3:a3:7b:dd:
2e:01:4d:64:89:44:4e:1e:5f:47:52:0b:56:aa:b9:bd:d1:42:
99:7c:3b:ea:e3:09:5a:08:c1:9e:14:d7:de:83:78:28:26:30:
3b:a0:0f:b9:1e:bb:26:24:f2:39:78:9f:e9:ec:41:48:c5:4a:
1c:96:70:18:01:a8:ba:04:a5:94:a2:1a:8b:fd:a9:ba:57:42:
f5:4e:ca:7f:22:72:89:63:c6:82:a0:2c:9c:c2:d7:b2:9b:5f:
dc:c2:74:16:fb:f6:2c:0e:b2:65:3f:e7:2c:86:1a:00:33:08:
c5:11:d4:fb:0c:60:4b:16:74:0e:51:c6:75:a7:11:c8:61:6d:
53:1a:ad:a6:76:50:26:5d:31:d8:20:82:d8:59:c3:c0:63:b1:
f7:4a:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:25 2025 by rpki-client