Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/Mhzn-H2kq9iCiDSR777StKbnQu0.roa
File: Mhzn-H2kq9iCiDSR777StKbnQu0.roa (raw, json)
Hash identifier: rzzNRu12RznpI/yZFQClDfsL4GV6+f8pVwzkYCApzfg=
Subject key identifier: 32:1C:E7:F8:7D:A4:AB:D8:82:88:34:91:EF:BE:D2:B4:A6:E7:42:ED
Certificate issuer: /CN=d69dc911516e3e2622ee97a7bb84425dd9eb8655
Certificate serial: 0185B00D
Authority key identifier: D6:9D:C9:11:51:6E:3E:26:22:EE:97:A7:BB:84:42:5D:D9:EB:86:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1p3JEVFuPiYi7penu4RCXdnrhlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/Mhzn-H2kq9iCiDSR777StKbnQu0.roa
Signing time: Wed 11 May 2022 21:59:02 +0000
ROA not before: Wed 11 May 2022 21:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25538573 (0x185b00d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d69dc911516e3e2622ee97a7bb84425dd9eb8655
Validity
Not Before: May 11 21:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=321ce7f87da4abd882883491efbed2b4a6e742ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:ef:2d:33:bf:30:6e:0b:da:fc:c2:69:e1:
00:73:db:1a:4b:2e:2c:bb:79:4a:68:ea:d7:c4:7b:
71:c6:76:9b:2a:fb:d6:bc:1e:ea:61:15:db:13:b0:
ed:fb:f8:dc:3d:a3:fc:37:c6:70:09:dc:d4:0a:7c:
15:68:ba:bd:f8:60:d4:9b:aa:25:ce:67:aa:15:cf:
37:46:e8:f5:e0:33:b8:a7:bf:36:10:a6:50:76:d9:
92:d9:16:82:36:8f:81:68:a0:c7:65:22:2d:b2:6d:
5e:8d:1d:1c:0f:e1:5d:79:3c:d7:e0:38:ad:4e:10:
d5:8a:27:b4:fe:00:52:fc:ae:da:62:d8:02:12:68:
24:d8:bf:55:b8:5d:c7:19:a4:07:07:46:5f:78:50:
db:4d:a8:27:56:f0:da:21:a4:4f:89:b8:8b:89:28:
f3:ff:b1:ce:b8:4e:97:35:1c:cb:5a:e7:e3:60:76:
6d:4a:15:9e:33:80:da:f0:7d:d2:8a:5d:6a:ad:6e:
0a:65:21:cb:fd:ad:92:d2:e9:8b:ad:a2:43:d4:67:
9f:68:d1:5a:4f:4c:9f:ab:f8:cf:28:aa:3a:d1:6d:
58:d0:b3:15:1d:50:71:55:e0:5e:a2:0e:dc:dc:d6:
e2:1e:de:a7:65:af:29:74:7e:2c:39:72:68:77:d1:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1C:E7:F8:7D:A4:AB:D8:82:88:34:91:EF:BE:D2:B4:A6:E7:42:ED
X509v3 Authority Key Identifier:
keyid:D6:9D:C9:11:51:6E:3E:26:22:EE:97:A7:BB:84:42:5D:D9:EB:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1p3JEVFuPiYi7penu4RCXdnrhlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/Mhzn-H2kq9iCiDSR777StKbnQu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/115567-e616-4483-a6db-e8629f26a82e/1/1p3JEVFuPiYi7penu4RCXdnrhlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.183.0/24
Signature Algorithm: sha256WithRSAEncryption
18:38:c2:6c:66:1f:28:e0:64:43:3d:05:74:87:64:c7:d3:5e:
30:7a:9c:59:85:d0:c2:5a:28:81:ce:e4:1a:ac:9b:be:96:cd:
b1:bb:f3:96:06:4d:7a:cc:2c:c9:66:4a:d5:2a:36:70:6a:49:
d6:dc:29:87:5e:a2:cc:d8:63:f0:d6:cc:2a:71:bd:44:aa:6c:
40:89:24:3e:69:22:1b:10:57:9d:03:b3:98:71:2c:d2:86:d1:
a3:ad:47:8d:51:42:76:dd:ba:f8:0b:63:8d:6b:5b:23:24:86:
8f:b5:f2:62:00:85:89:7d:d8:15:90:7c:18:7a:e5:1c:38:fd:
d2:45:33:a8:36:98:ee:a7:71:44:76:34:b8:c9:f6:2d:ed:ca:
51:a9:9e:ef:2d:07:69:16:2a:17:d3:de:db:e1:04:7a:8d:3b:
22:ad:e6:f6:d6:f4:9d:f2:0d:31:02:31:99:d5:07:e0:24:07:
87:03:84:9d:31:c1:25:be:c7:09:6c:dc:49:2a:66:04:d1:47:
9c:26:e9:2b:d5:66:7a:60:fc:f4:1e:0d:65:15:41:08:5d:30:
e2:69:45:08:1a:63:e7:fe:6f:ae:1b:b6:c4:b3:2b:11:17:cf:
d4:b5:1e:c1:ad:50:a9:e0:42:b5:ab:34:e7:8d:39:0e:19:f5:
b1:90:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:28 2025 by rpki-client