Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mhjyrrbxE8jKQ5FzpuTFqBRTMEI.roa
File: mhjyrrbxE8jKQ5FzpuTFqBRTMEI.roa (raw, json)
Hash identifier: B6vOVo9IyXYT98tKHGpAx3UyuI7wHnb7KDHG33mnMsA=
Subject key identifier: 9A:18:F2:AE:B6:F1:13:C8:CA:43:91:73:A6:E4:C5:A8:14:53:30:42
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7A702EF50CCD4DE20EFFDF43BDB8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mhjyrrbxE8jKQ5FzpuTFqBRTMEI.roa
Signing time: Thu 02 Jan 2025 07:48:10 +0000
ROA not before: Thu 02 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134413
IP address blocks: 185.248.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7a:70:2e:f5:0c:cd:4d:e2:0e:ff:df:43:bd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a18f2aeb6f113c8ca439173a6e4c5a814533042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:a4:67:f5:a2:08:be:63:d6:71:8e:3e:ff:
7a:5a:b5:85:eb:37:f9:b5:87:c6:73:c6:54:55:38:
36:53:03:da:24:af:bf:03:02:33:af:0a:c7:b2:37:
34:0e:d8:6b:80:cd:09:df:39:85:3c:46:f8:d7:73:
bd:7b:93:ac:b3:10:78:07:84:c8:a1:10:a2:1f:5a:
03:27:bc:49:a0:e3:95:ab:fa:c3:a0:b6:a6:c5:2d:
4d:60:49:0c:9e:92:34:cd:58:80:0b:b4:2b:a0:f7:
ae:6b:92:e5:9c:ed:76:7d:ca:c4:66:35:78:18:74:
5a:4c:cd:9c:5d:f1:7d:69:19:3d:be:f2:d5:a8:f4:
79:e6:4f:08:37:94:41:d5:7a:d6:18:7f:02:f3:66:
49:48:a7:c4:7e:55:2d:ea:74:e7:80:b7:5e:d0:e9:
0d:cb:35:95:e0:b5:65:24:d1:eb:02:d1:2b:b6:9c:
fd:39:2f:e9:6e:4d:4b:7b:01:f5:b0:dc:fd:e7:39:
d3:32:10:3c:60:1c:7e:4f:ab:2b:37:d8:94:94:b3:
3f:43:03:2d:80:08:d4:ba:5c:9f:78:34:63:25:0c:
57:aa:d9:d5:50:ac:55:0f:42:4f:64:e3:99:7e:a5:
8d:af:79:39:aa:e2:99:13:b0:15:7c:62:05:46:6d:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:F2:AE:B6:F1:13:C8:CA:43:91:73:A6:E4:C5:A8:14:53:30:42
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/mhjyrrbxE8jKQ5FzpuTFqBRTMEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.186.0/23
Signature Algorithm: sha256WithRSAEncryption
87:81:d9:13:ee:b5:6d:2a:54:59:2f:17:e7:32:be:26:05:5c:
e9:89:f2:94:55:40:18:c7:d2:4b:fe:f2:ac:f8:83:6c:83:63:
57:55:2a:d7:cb:66:54:e5:2f:75:2e:94:b1:64:f4:46:7d:89:
15:ec:03:f9:95:c8:e7:53:da:5d:04:9e:33:b4:a7:c1:5a:35:
a2:13:d9:07:6a:a6:ff:5e:e1:68:38:d0:f0:df:63:9c:dd:e4:
9c:d8:10:f8:6e:0e:95:2b:8c:38:f1:05:fe:4d:fc:9f:0d:34:
c8:90:f2:95:ce:8d:db:1f:6d:99:18:62:33:b4:86:57:83:e4:
df:c5:3c:fa:ea:b3:73:89:9d:1c:b0:4d:e3:aa:16:28:f3:66:
06:97:56:4f:f1:f6:1c:f1:8b:dd:9b:6a:2b:71:d7:66:3c:48:
ff:23:58:6d:4b:02:a1:7d:d3:17:eb:5c:81:ca:d8:85:0b:0c:
d8:1c:bd:41:bd:a3:44:a0:7a:b1:ff:be:8a:25:76:c0:7a:78:
d0:f9:ef:fb:c0:03:e7:7c:20:85:75:a0:f2:c9:61:f3:6b:98:
e0:71:72:27:c1:71:02:92:77:3d:10:6d:1b:42:d3:c8:34:b4:
a3:61:6b:69:d9:04:b7:a1:6b:af:6c:7d:84:24:89:17:10:b6:
96:93:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:28 2025 by rpki-client