Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/MhjkAgDs0QfDcSw47owKsNYasoc.roa
File: MhjkAgDs0QfDcSw47owKsNYasoc.roa (raw, json)
Hash identifier: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=
Subject key identifier: 32:18:E4:02:00:EC:D1:07:C3:71:2C:38:EE:8C:0A:B0:D6:1A:B2:87
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 01943A6758A411DB3559B424A70F4FD462B6
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/MhjkAgDs0QfDcSw47owKsNYasoc.roa
Signing time: Mon 06 Jan 2025 06:57:18 +0000
ROA not before: Mon 06 Jan 2025 06:57:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216024
IP address blocks: 185.142.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3a:67:58:a4:11:db:35:59:b4:24:a7:0f:4f:d4:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Jan 6 06:57:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3218e40200ecd107c3712c38ee8c0ab0d61ab287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:48:8f:78:9e:af:b9:14:a0:0e:0b:c7:c5:
59:c2:8a:6f:ee:2f:7e:43:d2:4b:96:7b:64:9a:11:
80:72:7b:5c:1d:75:d8:a3:1c:86:73:a9:9a:b3:dc:
91:9e:10:3a:a5:7c:6f:db:40:fb:ab:d6:f4:a9:b7:
8f:6b:b9:f7:29:86:84:d0:c2:79:55:c4:3f:67:92:
52:27:f5:06:c5:62:4c:db:e6:72:51:81:35:2a:28:
59:a6:8c:7e:3b:f3:c3:5b:d4:c4:01:a0:3d:b1:c6:
c8:b1:5a:7b:dc:a2:2b:b8:7e:d9:63:0b:64:87:69:
b3:50:c0:4d:ca:59:49:c4:3d:65:ca:dc:1e:4a:74:
b5:5b:27:33:a9:b3:da:90:a3:b0:7c:bd:73:f6:0e:
68:24:ec:4f:de:64:9e:3b:a0:9c:9c:27:ab:a2:b4:
16:99:77:e4:d2:39:c4:ff:9c:dd:41:41:e2:ff:d6:
6f:f8:4a:64:cb:0a:90:55:4f:27:0b:77:5e:05:26:
95:eb:03:86:16:0b:b1:5a:3e:e6:40:f4:15:19:af:
6b:c1:e7:41:b6:9d:da:61:ca:c2:1c:d2:f6:0c:95:
a7:ca:b1:13:6a:57:ac:d2:da:fe:aa:6c:03:20:d7:
4e:61:bc:4d:ad:23:e6:45:a7:55:50:6f:2f:7f:14:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:E4:02:00:EC:D1:07:C3:71:2C:38:EE:8C:0A:B0:D6:1A:B2:87
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/MhjkAgDs0QfDcSw47owKsNYasoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.33.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1c:55:c5:c3:e9:75:bc:6e:2b:0e:d1:dc:5d:c4:1a:2b:60:
61:85:7f:5f:6e:3f:eb:ef:d8:5f:55:0c:3d:65:92:bc:e5:be:
0b:fa:29:ce:84:ac:08:bb:d9:cc:b6:ea:eb:f0:d4:e5:f1:93:
50:88:41:da:88:8f:c5:b6:69:16:29:b3:ad:63:60:e3:e5:fb:
51:88:8a:c0:62:8f:1b:ad:a0:10:d2:66:49:ac:56:03:aa:4c:
2f:a3:03:57:93:d8:49:ad:75:58:73:ec:27:5b:b6:6f:f2:b7:
12:98:ff:73:a6:b2:e8:18:d3:2f:48:07:6c:28:90:f9:de:6f:
cd:65:8f:b6:bf:89:d2:43:0c:e2:16:ab:86:67:c3:91:03:ae:
23:33:67:aa:2b:9e:27:b1:23:6c:0f:ac:f1:98:e6:c0:f9:e0:
18:1f:44:9a:da:38:e3:80:c6:1d:cb:e5:86:80:43:53:ba:7d:
fc:20:99:85:46:c2:c4:50:fc:97:6c:c6:7e:e2:90:db:b1:46:
2b:d1:27:d5:00:a4:8c:a2:16:9a:e7:98:53:c9:41:60:c9:f6:
82:87:9a:63:a9:7e:9d:8c:b4:0b:43:a4:28:2e:c4:80:4f:37:
f7:15:8b:fb:a2:72:d2:6e:b4:79:11:35:8b:bc:79:78:5f:8a:
8e:58:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:58 2025 by rpki-client