Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/mfMCZ1mf89wixwVauU3h51QTuGM.roa
File: mfMCZ1mf89wixwVauU3h51QTuGM.roa (raw, json)
Hash identifier: oGAM1pmedeyu8/n4qv3VxktbCa48+2Wk22NdgTHjWRM=
Subject key identifier: 99:F3:02:67:59:9F:F3:DC:22:C7:05:5A:B9:4D:E1:E7:54:13:B8:63
Certificate issuer: /CN=9436db1cea6e5abd0ba46c7ea61b660a67d1430a
Certificate serial: 01ABC7
Authority key identifier: 94:36:DB:1C:EA:6E:5A:BD:0B:A4:6C:7E:A6:1B:66:0A:67:D1:43:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbbHOpuWr0LpGx-phtmCmfRQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/mfMCZ1mf89wixwVauU3h51QTuGM.roa
Signing time: Wed 02 Mar 2022 08:10:35 +0000
ROA not before: Wed 02 Mar 2022 08:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47771
IP address blocks: 85.187.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109511 (0x1abc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436db1cea6e5abd0ba46c7ea61b660a67d1430a
Validity
Not Before: Mar 2 08:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99f30267599ff3dc22c7055ab94de1e75413b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:ee:fd:c5:a0:1c:fb:ac:f0:b1:27:2e:2f:
5b:b7:54:16:23:ac:3a:27:07:b5:4e:c0:40:bc:f6:
9f:be:a5:da:f4:de:ec:b9:23:98:5b:2e:85:3d:c8:
92:ac:f7:48:8d:75:ab:63:cd:39:3c:60:50:86:ae:
cc:cf:01:44:85:06:41:47:86:a4:88:fc:fc:6e:d5:
f7:34:e1:fc:89:68:7f:ae:f6:38:d7:cf:22:40:f4:
e2:f1:49:19:57:15:e4:c4:a3:3c:2b:ac:22:72:61:
df:21:aa:3f:bd:96:96:05:c6:4a:a9:b6:81:79:bb:
ae:6d:d1:e9:c6:c7:b6:6e:5d:d4:31:21:11:c0:91:
fa:79:46:fa:1d:98:59:72:1a:d6:5d:5f:c5:3d:d0:
c6:eb:1a:eb:34:a7:cb:78:6e:53:71:2d:5b:7e:10:
64:e8:ba:d6:02:7d:1d:26:81:6a:8b:4c:8a:c1:b0:
ea:2c:fa:e2:0e:03:52:3d:dd:2c:40:57:c4:6e:02:
92:c4:c9:8a:6a:12:45:0d:96:a9:d8:8e:07:30:4b:
80:a0:04:d4:9e:8a:44:2c:5e:1d:10:a4:bb:f7:11:
bb:00:c3:2f:51:58:91:a6:a9:55:66:dd:36:e5:5c:
23:2c:ed:5e:3c:0e:3e:48:78:ef:df:fc:02:43:7e:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F3:02:67:59:9F:F3:DC:22:C7:05:5A:B9:4D:E1:E7:54:13:B8:63
X509v3 Authority Key Identifier:
keyid:94:36:DB:1C:EA:6E:5A:BD:0B:A4:6C:7E:A6:1B:66:0A:67:D1:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbbHOpuWr0LpGx-phtmCmfRQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/mfMCZ1mf89wixwVauU3h51QTuGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a70269-45d8-4aa0-a6c5-daf2b8b38126/1/lDbbHOpuWr0LpGx-phtmCmfRQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:57:b7:7d:fd:0b:f1:df:db:8c:46:87:6e:7b:1f:2d:7b:64:
13:94:14:7b:6f:ad:5f:52:15:2e:aa:6e:c9:54:26:05:b0:2b:
3a:30:3a:4f:4c:06:50:fa:d9:1f:20:6a:c2:ad:65:98:c0:78:
b8:e1:a3:a9:5c:f8:a0:65:46:01:9f:89:d7:8a:de:1c:e0:41:
ea:4a:99:2e:7d:06:1c:e3:3d:3c:d1:56:54:eb:49:82:4d:8e:
c4:10:88:ae:00:4b:3d:9b:d2:e4:36:40:c5:74:63:d7:ab:fb:
40:0d:e9:93:d4:a6:74:7a:bc:66:b6:22:37:9a:94:db:eb:1e:
e0:8f:63:52:d3:bd:fe:34:5c:38:5f:35:15:02:bf:dc:93:2a:
9e:fe:30:9c:77:57:85:cc:8c:c9:64:51:49:78:2f:85:10:cf:
50:b5:5b:7d:b5:14:72:2f:93:70:c6:70:a3:c5:f0:dc:51:b3:
69:9a:6c:bb:28:5e:9f:10:f0:0a:89:b8:f2:2d:dc:04:49:82:
32:71:38:c7:37:4a:24:2f:97:fa:34:25:ae:ed:0d:27:7e:b4:
5a:f3:bd:aa:36:f3:18:b4:1e:83:09:fb:17:9b:72:f2:64:50:
87:d5:34:28:5a:0b:e6:25:7a:90:10:45:ef:48:a5:fe:17:42:
31:16:e8:6b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAavHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
MzZkYjFjZWE2ZTVhYmQwYmE0NmM3ZWE2MWI2NjBhNjdkMTQzMGEwHhcNMjIwMzAy
MDgxMDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5OWYzMDI2NzU5OWZm
M2RjMjJjNzA1NWFiOTRkZTFlNzU0MTNiODYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk+Tu/cWgHPus8LEnLi9bt1QWI6w6Jwe1TsBAvPafvqXa9N7s
uSOYWy6FPciSrPdIjXWrY805PGBQhq7MzwFEhQZBR4akiPz8btX3NOH8iWh/rvY4
188iQPTi8UkZVxXkxKM8K6wicmHfIao/vZaWBcZKqbaBebuubdHpxse2bl3UMSER
wJH6eUb6HZhZchrWXV/FPdDG6xrrNKfLeG5TcS1bfhBk6LrWAn0dJoFqi0yKwbDq
LPriDgNSPd0sQFfEbgKSxMmKahJFDZap2I4HMEuAoATUnopELF4dEKS79xG7AMMv
UViRpqlVZt025VwjLO1ePA4+SHjv3/wCQ34lQwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFJnzAmdZn/PcIscFWrlN4edUE7hjMB8GA1UdIwQYMBaAFJQ22xzqblq9C6Rs
fqYbZgpn0UMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bERiYkhPcHVXcjBMcEd4LXBodG1DbWZSUXdvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zNy9hNzAyNjktNDVkOC00YWEwLWE2YzUtZGFmMmI4YjM4MTI2LzEv
bWZNQ1oxbWY4OXdpeHdWYXVVM2g1MVFUdUdNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9h
NzAyNjktNDVkOC00YWEwLWE2YzUtZGFmMmI4YjM4MTI2LzEvbERiYkhPcHVXcjBM
cEd4LXBodG1DbWZSUXdvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGVbtAMA0GCSqGSIb3DQEBCwUAA4IB
AQBSV7d9/Qvx39uMRoduex8te2QTlBR7b61fUhUuqm7JVCYFsCs6MDpPTAZQ+tkf
IGrCrWWYwHi44aOpXPigZUYBn4nXit4c4EHqSpkufQYc4z080VZU60mCTY7EEIiu
AEs9m9LkNkDFdGPXq/tADemT1KZ0erxmtiI3mpTb6x7gj2NS073+NFw4XzUVAr/c
kyqe/jCcd1eFzIzJZFFJeC+FEM9QtVt9tRRyL5NwxnCjxfDcUbNpmmy7KF6fEPAK
ibjyLdwESYIycTjHN0okL5f6NCWu7Q0nfrRa872qNvMYtB6DCfsXm3LyZFCH1TQo
WgvmJXqQEEXvSKX+F0IxFuhr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:14 2024 by rpki-client on console-ams.rpki-client.org