Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/MK7sPWIWuYCctK2z-e_MN8CZd-k.roa
File: MK7sPWIWuYCctK2z-e_MN8CZd-k.roa (raw, json)
Hash identifier: iv2jnFvvwn4TvlnhT1Be+Co0MB7H1mMivVekDzt4SOg=
Subject key identifier: 30:AE:EC:3D:62:16:B9:80:9C:B4:AD:B3:F9:EF:CC:37:C0:99:77:E9
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0187ED42B7A7846E7A2D33A3BAE5CEF4E2DE
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/MK7sPWIWuYCctK2z-e_MN8CZd-k.roa
Signing time: Fri 05 May 2023 18:53:05 +0000
ROA not before: Fri 05 May 2023 18:53:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 168.75.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ed:42:b7:a7:84:6e:7a:2d:33:a3:ba:e5:ce:f4:e2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: May 5 18:53:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30aeec3d6216b9809cb4adb3f9efcc37c09977e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:b9:2b:e1:f2:e2:d9:a9:4a:32:b3:c4:7a:
d9:dc:bc:88:5f:75:ca:cc:d2:ee:99:dd:b2:c5:40:
eb:9a:52:62:f9:b0:bb:22:7b:46:7a:3f:d8:49:1d:
a1:e0:e3:bb:c8:cb:68:20:02:8c:12:c7:20:1f:3f:
56:70:20:a2:8c:e4:ed:39:87:09:b1:fe:37:06:7d:
79:e2:83:a0:87:ee:a5:19:09:5f:5a:2b:78:5b:da:
64:f1:dd:4b:21:69:f5:4e:bf:3d:75:3c:33:c4:79:
2a:52:a1:35:24:1d:1e:ad:d5:04:ab:8c:de:d0:ec:
51:29:e6:af:d6:3d:a5:4d:39:84:e1:a6:79:dd:5b:
09:07:2b:8d:10:93:43:ba:ab:9c:8a:51:d8:70:03:
fc:5b:fe:4f:9d:4b:fc:a9:67:f7:c5:d2:98:c5:92:
b3:c7:54:63:84:13:09:65:bf:16:e8:19:31:25:62:
ba:0d:5c:1c:1a:f7:9b:7c:2c:6b:68:10:a3:0a:83:
83:75:ec:96:f0:1e:99:72:89:79:38:90:86:4e:81:
22:b6:ab:59:15:c4:35:72:93:1e:5e:6a:bb:48:8f:
1c:a4:cc:91:6e:77:2d:00:86:9e:d5:e8:a1:a4:a6:
9f:d4:41:c9:2c:94:4c:65:ff:e0:7c:9a:e4:6f:c4:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:EC:3D:62:16:B9:80:9C:B4:AD:B3:F9:EF:CC:37:C0:99:77:E9
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/MK7sPWIWuYCctK2z-e_MN8CZd-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.75.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:fe:ab:23:27:7d:06:e2:7e:57:87:8a:cd:01:4c:5c:9c:2c:
3a:2f:83:46:88:8e:78:80:a2:e1:f2:bd:ee:1b:4a:02:51:09:
62:92:1b:5f:19:c0:09:4f:28:79:4d:98:c4:62:5d:12:9e:c9:
ec:9e:60:6c:07:7d:17:c3:ba:90:49:a5:39:97:2d:4a:28:62:
fb:b2:cf:9a:37:91:0f:b3:83:c6:b5:8d:7c:d7:00:15:39:76:
a0:33:cb:a7:a4:3f:a4:9c:6c:b7:16:c4:c1:35:c3:27:43:a2:
7c:07:2e:90:79:1e:9f:65:81:e5:b6:8f:73:95:d2:d3:24:8a:
24:f6:be:9c:15:fb:d3:02:b8:9f:e2:cf:1f:a2:c5:59:75:1c:
5d:8e:69:8a:75:5a:03:7f:f3:02:54:f5:96:af:ad:d9:0a:b1:
3d:d4:1d:ab:1d:6a:f3:ab:79:cb:41:7c:89:e5:4b:91:ce:8b:
28:50:85:2d:fd:91:2b:21:b1:d3:fb:6a:65:03:1c:c4:57:f5:
ca:78:32:0f:4e:1b:ef:e8:bb:96:ef:14:ca:5e:2b:18:8a:ff:
57:f0:7d:f6:7c:63:b3:2c:58:eb:03:a4:bf:c0:28:14:92:8d:
5f:ff:2d:4c:fa:b7:f3:eb:48:fe:0d:0d:64:04:83:bd:4e:74:
93:37:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:42 2025 by rpki-client