Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/MkHe-N7T6hf_ocfPc1Og33lWi9g.roa
File: MkHe-N7T6hf_ocfPc1Og33lWi9g.roa (raw, json)
Hash identifier: KCBmQuLn/Sy+uoZAk8/Kzm0vuVtyT7fZmah4RQgwCvg=
Subject key identifier: 32:41:DE:F8:DE:D3:EA:17:FF:A1:C7:CF:73:53:A0:DF:79:56:8B:D8
Certificate issuer: /CN=7788628b1e91abfa09412f944acf8357debab24e
Certificate serial: 0191B1BC2298F2E0DB0C97D552AAAD18A5E9
Authority key identifier: 77:88:62:8B:1E:91:AB:FA:09:41:2F:94:4A:CF:83:57:DE:BA:B2:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4hiix6Rq_oJQS-USs-DV966sk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/MkHe-N7T6hf_ocfPc1Og33lWi9g.roa
Signing time: Mon 02 Sep 2024 07:56:22 +0000
ROA not before: Mon 02 Sep 2024 07:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50914
IP address blocks: 185.73.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:bc:22:98:f2:e0:db:0c:97:d5:52:aa:ad:18:a5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7788628b1e91abfa09412f944acf8357debab24e
Validity
Not Before: Sep 2 07:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3241def8ded3ea17ffa1c7cf7353a0df79568bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:67:6c:c9:04:38:af:67:54:28:ff:8d:bc:41:
7f:da:68:0d:18:13:c7:f7:15:bf:95:3b:a2:fc:53:
d1:21:47:af:12:47:28:11:28:1d:d4:44:b0:5f:5e:
49:34:b2:8f:41:92:fd:26:d4:a3:1a:0b:98:e0:72:
1c:5d:0d:e3:74:fa:b5:42:39:75:99:9a:f0:33:59:
31:61:18:b1:e9:36:16:3d:71:0f:24:ee:e0:65:36:
b8:f1:be:05:78:1c:78:43:97:a1:38:1c:19:b3:d6:
aa:f2:f4:7d:33:a3:10:61:f4:ae:30:00:0d:c7:1e:
68:ec:6a:31:15:c8:ab:6e:ac:7c:5a:2e:5f:0d:1b:
a5:29:6c:0d:83:d7:1c:37:70:fb:b9:df:2e:5a:a8:
4b:2b:fd:44:19:7b:80:63:1c:cf:32:67:7f:77:ba:
d6:02:4c:ba:fa:55:db:ff:b1:8a:8a:66:fa:d0:39:
ff:65:86:8d:62:6d:25:fd:ce:24:44:93:29:2b:ad:
56:57:d9:55:c5:d7:06:8e:bf:f9:03:f1:81:fe:6c:
6f:5a:23:11:2f:4f:e1:ad:b7:89:de:40:b4:ca:d9:
87:a9:ab:58:e4:ec:1c:14:5f:79:09:03:10:97:04:
69:2c:37:25:fb:0e:e8:81:a8:d9:ad:a5:31:6c:22:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:DE:F8:DE:D3:EA:17:FF:A1:C7:CF:73:53:A0:DF:79:56:8B:D8
X509v3 Authority Key Identifier:
keyid:77:88:62:8B:1E:91:AB:FA:09:41:2F:94:4A:CF:83:57:DE:BA:B2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4hiix6Rq_oJQS-USs-DV966sk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/MkHe-N7T6hf_ocfPc1Og33lWi9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/d4hiix6Rq_oJQS-USs-DV966sk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:d1:32:ff:1c:d4:b8:40:d0:33:b5:c5:9b:10:58:2d:1b:e1:
e6:62:94:ff:1d:6c:0f:a6:49:2f:de:da:5d:7f:b4:20:28:02:
4d:6d:24:5c:a1:2b:ef:fe:9f:68:83:39:5c:df:e8:ae:2a:fa:
1c:80:1f:05:0b:e1:3f:85:d1:dd:10:73:32:b9:e3:eb:2b:37:
ac:ac:3e:b3:78:f3:ba:82:e5:e7:a7:21:e7:c9:d9:28:91:c4:
20:00:42:f2:0a:9a:d8:1c:83:00:d4:cf:db:e0:2f:48:f7:7c:
8d:0f:ae:d8:c5:30:52:2f:94:6f:6c:8b:68:06:a1:b9:80:45:
06:24:d6:ef:27:e2:2a:b6:40:56:eb:c0:05:9b:bf:02:cf:a5:
9a:b8:42:31:a9:c2:c6:34:dc:39:3b:9a:fa:cd:95:cc:30:9a:
ae:5b:77:59:d7:ce:f5:25:50:f1:71:9a:c1:76:3b:77:9f:c0:
e8:88:46:a0:f7:90:a6:c4:ce:8d:e4:cd:15:28:50:bf:a8:ba:
4f:1d:05:07:66:fd:d8:b4:f5:bd:56:4f:d0:2a:cf:14:e5:a7:
b8:1a:e7:3c:37:71:de:87:34:7c:c6:a7:99:e9:c7:50:3e:18:
c9:9b:e7:c2:f8:3c:18:71:b2:4b:f0:58:1b:e0:d6:ef:cd:67:
d9:e1:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:43 2025 by rpki-client