Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/7BYMHSI6ABZGXrWkJOaQ46cHgv8.roa
File: 7BYMHSI6ABZGXrWkJOaQ46cHgv8.roa (raw, json)
Hash identifier: cbanvUxC1EaaMNNGNHvBhXECnBnU/RtrneE5hDLuNks=
Subject key identifier: EC:16:0C:1D:22:3A:00:16:46:5E:B5:A4:24:E6:90:E3:A7:07:82:FF
Certificate issuer: /CN=320444c0c2990b13749f3044662297ea824d5064
Certificate serial: 01856D41A830192935F64A0A2C86AD5BC0EE
Authority key identifier: 32:04:44:C0:C2:99:0B:13:74:9F:30:44:66:22:97:EA:82:4D:50:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgREwMKZCxN0nzBEZiKX6oJNUGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/7BYMHSI6ABZGXrWkJOaQ46cHgv8.roa
Signing time: Sun 01 Jan 2023 12:14:57 +0000
ROA not before: Sun 01 Jan 2023 12:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197731
IP address blocks: 185.233.172.0/22 maxlen: 24
2a0c:eb00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:a8:30:19:29:35:f6:4a:0a:2c:86:ad:5b:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320444c0c2990b13749f3044662297ea824d5064
Validity
Not Before: Jan 1 12:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec160c1d223a0016465eb5a424e690e3a70782ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1d:16:2c:20:51:98:98:2e:ae:59:38:8a:49:
7b:2e:a4:dd:8c:12:8b:03:7a:65:80:77:a3:2d:6b:
e7:fb:40:ad:b0:57:46:22:0d:68:11:8f:b8:37:ce:
0e:bd:41:c5:21:f6:09:a9:64:59:0e:f8:98:1d:ab:
1b:d9:7f:d8:ac:ff:e6:1a:a4:d4:e5:6f:0c:20:df:
96:06:a3:9d:e1:21:59:58:e9:46:00:7d:9a:f1:fe:
7e:c8:60:4d:a6:05:c4:98:82:96:6c:df:01:13:07:
03:15:75:45:42:7b:8d:2b:fe:8b:ee:96:f7:35:5e:
85:02:02:63:38:7b:16:13:53:33:f6:16:c2:e6:ef:
e2:af:28:97:61:e3:83:6b:80:c3:4c:17:4c:df:3e:
49:f5:80:0e:1b:4b:68:cb:e8:b5:fe:60:ce:6b:a0:
17:8d:8c:d0:1e:f1:8b:69:83:53:b8:b3:3c:d1:10:
38:d4:88:94:11:89:3b:50:3a:40:e2:2b:4d:1e:2a:
78:6e:6b:5c:48:51:1d:69:3e:85:fc:c9:a4:6b:02:
71:d4:75:18:67:6c:03:e6:6e:fa:b4:cd:c0:cc:73:
4b:0c:c7:0b:9b:13:54:9c:14:50:73:8a:a0:66:4f:
6b:71:45:d4:91:b0:55:ac:f7:2c:8f:4b:f2:11:80:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:0C:1D:22:3A:00:16:46:5E:B5:A4:24:E6:90:E3:A7:07:82:FF
X509v3 Authority Key Identifier:
keyid:32:04:44:C0:C2:99:0B:13:74:9F:30:44:66:22:97:EA:82:4D:50:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgREwMKZCxN0nzBEZiKX6oJNUGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/7BYMHSI6ABZGXrWkJOaQ46cHgv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/855011-092c-4f7d-a0b6-94d1369025fe/1/MgREwMKZCxN0nzBEZiKX6oJNUGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.172.0/22
IPv6:
2a0c:eb00::/32
Signature Algorithm: sha256WithRSAEncryption
bd:3f:29:d2:9e:8c:a9:8f:32:fc:ed:48:a4:2d:c6:c7:4e:bf:
f9:ad:84:7e:5b:c2:43:82:d7:dc:5c:8f:ca:e1:74:81:06:e1:
2c:49:f3:46:f8:91:a4:df:ac:43:b9:88:33:cf:a1:1d:80:26:
03:17:c2:20:99:ec:14:ee:fd:18:85:1b:49:f0:bb:71:b9:73:
b4:91:93:f2:c1:0f:98:71:7c:11:ff:c4:89:1c:ba:b9:bf:a3:
2b:50:f7:8f:70:7a:cb:09:16:7b:ab:64:b0:d2:59:10:d4:90:
17:98:d1:10:6d:70:58:b5:00:18:f2:3e:0e:0e:a3:5e:e0:37:
31:31:cf:fc:d7:d8:45:03:65:57:8f:6a:24:bd:35:cc:41:d9:
89:9e:bd:46:f5:f5:d5:fe:cf:c1:dd:70:c4:a9:5b:41:70:c2:
de:b9:ff:b3:ad:7d:b3:78:f5:55:a3:13:69:b3:7f:b6:b2:9f:
4d:96:39:5c:e1:9d:71:77:99:d5:e6:85:3b:ce:9d:61:0c:8a:
cd:b4:ae:a5:63:32:ea:c9:29:cf:cb:72:75:22:a7:3b:d9:e0:
ed:3b:cd:90:98:f7:cc:8c:8d:f2:6d:59:86:fa:df:ea:65:7c:
30:51:99:bc:7d:e7:46:06:35:7e:12:91:02:cc:f5:4e:83:64:
bf:92:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:58:43 2025 by rpki-client