Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/Mgg7-1m5HV2TZsjWQ34E8pjvwbM.roa
File: Mgg7-1m5HV2TZsjWQ34E8pjvwbM.roa (raw, json)
Hash identifier: qhsvi6zlyV+vFKSIW+7RfIDlj6TUHP4kyXpyleR4068=
Subject key identifier: 32:08:3B:FB:59:B9:1D:5D:93:66:C8:D6:43:7E:04:F2:98:EF:C1:B3
Certificate issuer: /CN=441a95d11a8ac0eedf855db0107b9a628f27a6b4
Certificate serial: 018CC424D57CB4E2F5BDDFCD02F7BDDCD74D
Authority key identifier: 44:1A:95:D1:1A:8A:C0:EE:DF:85:5D:B0:10:7B:9A:62:8F:27:A6:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBqV0RqKwO7fhV2wEHuaYo8nprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/Mgg7-1m5HV2TZsjWQ34E8pjvwbM.roa
Signing time: Mon 01 Jan 2024 08:29:57 +0000
ROA not before: Mon 01 Jan 2024 08:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204588
IP address blocks: 185.240.40.0/24 maxlen: 24
185.240.43.0/24 maxlen: 24
185.240.41.0/24 maxlen: 24
185.240.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:d5:7c:b4:e2:f5:bd:df:cd:02:f7:bd:dc:d7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441a95d11a8ac0eedf855db0107b9a628f27a6b4
Validity
Not Before: Jan 1 08:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32083bfb59b91d5d9366c8d6437e04f298efc1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:0a:37:51:28:7d:f2:69:7e:db:1f:04:f8:
c9:03:2a:c9:76:12:01:4f:d4:ab:68:5c:5e:bf:cc:
52:7e:63:43:c5:37:10:27:14:2f:9b:a2:2d:d6:2a:
4f:b7:ac:c7:07:ab:9c:7f:b2:d9:19:7c:1a:10:7d:
5d:06:5c:f9:32:8e:6c:16:47:b5:5f:af:83:ea:48:
71:c0:8f:b5:5e:aa:72:ff:4d:fa:38:aa:0d:b9:da:
9e:d6:5b:ee:1b:c4:10:11:59:ac:8e:79:93:90:e8:
09:da:8f:79:7f:80:50:9d:af:f3:45:9f:19:d3:ec:
45:63:19:bf:80:6c:b6:03:d2:21:bc:8a:20:5a:15:
28:b5:ac:10:c4:38:60:cb:61:25:52:71:86:8d:1a:
69:c0:26:2d:8a:4b:69:8d:7b:26:21:51:be:dd:4d:
50:38:5a:cc:c6:f6:9a:73:41:ec:32:30:cf:23:e5:
4e:69:0b:5e:22:13:3e:0e:f3:b6:58:b2:99:cf:d4:
5e:6d:39:e9:21:5f:cc:ab:12:39:3d:f6:de:12:63:
0a:05:cd:6c:04:e2:e9:61:ce:73:ae:e6:95:44:11:
50:f6:78:c5:d4:16:dd:9a:6c:db:c9:8c:94:3c:33:
1f:9a:ab:5e:f5:51:2d:f8:9b:25:7c:0f:41:1d:3c:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:3B:FB:59:B9:1D:5D:93:66:C8:D6:43:7E:04:F2:98:EF:C1:B3
X509v3 Authority Key Identifier:
keyid:44:1A:95:D1:1A:8A:C0:EE:DF:85:5D:B0:10:7B:9A:62:8F:27:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBqV0RqKwO7fhV2wEHuaYo8nprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/Mgg7-1m5HV2TZsjWQ34E8pjvwbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ff6ef4-4be4-44be-a225-11c0037aa120/1/RBqV0RqKwO7fhV2wEHuaYo8nprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.40.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e5:1c:d3:98:9d:db:63:96:a4:c6:14:59:4a:75:fb:9b:fb:
60:34:27:2b:4a:41:fd:77:0e:6b:6c:7f:ab:76:5a:42:dc:2a:
2e:b8:e9:af:48:e7:8d:d1:1c:7b:7b:e5:3e:b4:5b:6e:c4:42:
83:7a:21:51:e0:69:9d:55:a6:80:10:72:34:68:06:c2:04:4b:
c9:bf:dd:54:df:73:8a:97:d6:16:9a:21:d5:c0:c0:60:67:07:
d4:b8:d7:64:ee:00:c0:84:f4:00:6c:55:10:de:0d:fd:4d:f7:
69:2a:7c:bd:35:98:da:2c:8c:bd:49:1f:63:bc:6a:80:2f:18:
3e:8d:31:7d:3a:7d:b4:36:d0:b4:10:c6:f3:3c:15:32:53:03:
81:01:0b:a5:6f:14:8a:4d:e2:c7:b4:5e:2a:33:fc:1d:72:f5:
e0:ea:b1:0a:93:6d:5c:40:27:6e:5b:97:87:be:37:26:17:a1:
cb:3b:38:16:e9:6c:20:73:76:fb:c4:d9:f7:9e:6e:2f:a1:df:
46:91:48:dd:33:14:8d:5f:43:5e:bc:c5:b7:e1:2e:0b:89:28:
f4:60:07:0d:65:92:d5:a4:b8:d4:27:ca:af:93:5c:f3:1f:d4:
85:5a:fd:e5:1d:17:d7:5d:68:3a:a9:97:5c:5c:18:d9:c4:0e:
ec:73:23:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:14:22 2024 by rpki-client on console-fra.rpki-client.org