Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/Mm5X7eSQgaFqQx41pd6wT0h6lOM.roa
File: Mm5X7eSQgaFqQx41pd6wT0h6lOM.roa (raw, json)
Hash identifier: GUgwePFYR93QduwcXTYYf+/wsWzKoJXirRNRiTcCWLQ=
Subject key identifier: 32:6E:57:ED:E4:90:81:A1:6A:43:1E:35:A5:DE:B0:4F:48:7A:94:E3
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 01EBE75F
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/Mm5X7eSQgaFqQx41pd6wT0h6lOM.roa
Signing time: Sat 01 Jan 2022 08:00:42 +0000
ROA not before: Sat 01 Jan 2022 08:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60118
IP address blocks: 185.150.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32237407 (0x1ebe75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Jan 1 08:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=326e57ede49081a16a431e35a5deb04f487a94e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:c6:ad:c3:ec:21:f1:dc:e1:b5:a8:c7:be:
4a:78:10:86:81:65:13:5c:6d:5d:e8:48:de:e4:6c:
0a:7b:4a:c2:17:ba:07:4e:ca:87:87:0f:09:81:ef:
4d:5e:22:9f:64:0e:9d:de:97:41:d5:4f:13:e4:c5:
c7:2d:dd:29:d6:2c:cc:7b:2f:a5:17:45:14:75:1c:
b3:c0:54:c5:17:ef:c1:b0:d8:35:63:5a:64:61:e8:
2f:5b:fe:c3:3c:c3:da:1a:61:7b:ee:24:87:a9:33:
1b:3c:96:c9:2b:f0:92:3f:89:01:e0:85:8e:f5:fa:
fb:10:74:42:be:93:51:09:7b:d2:57:6f:3b:cf:80:
f4:31:d3:24:f1:66:71:82:29:28:b3:45:3c:ee:6e:
30:b3:2b:f7:f4:a7:5e:71:a4:81:a1:12:f6:54:14:
67:89:97:f5:cc:45:b6:a7:d6:2d:c6:9b:a4:a7:e6:
6a:4c:bf:ca:7a:ed:1a:0d:28:e2:a1:d7:05:4c:1c:
24:9a:5b:51:ff:69:f9:43:f0:e1:0d:ef:ce:ed:28:
13:3a:4d:a3:43:65:2d:11:4b:56:5f:51:0a:51:bd:
be:a8:f0:ec:8f:e8:37:ec:ec:36:f0:be:76:72:7a:
7e:66:48:8c:f0:68:4d:71:df:d3:3b:6b:11:4d:d6:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6E:57:ED:E4:90:81:A1:6A:43:1E:35:A5:DE:B0:4F:48:7A:94:E3
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/Mm5X7eSQgaFqQx41pd6wT0h6lOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a3:67:88:24:cb:99:ad:8e:b0:7c:9a:e6:3b:03:ab:a8:93:
78:af:9e:e5:c1:79:7f:8e:5f:f7:bf:c6:75:e4:62:59:51:d6:
e4:b7:1f:fe:82:4b:43:ba:9a:66:02:d1:4a:cc:11:47:27:a1:
b8:eb:12:9a:f7:a6:4c:aa:e3:e4:21:5e:32:0e:1e:15:f4:64:
fa:71:63:86:91:a2:c6:bc:1a:ae:8b:7c:93:24:ca:0a:d5:3a:
23:2a:60:17:32:56:4f:27:e4:1d:03:61:b0:b7:e0:6d:57:8b:
a3:0d:52:bf:a6:07:8d:11:46:1a:a4:92:1c:ad:0e:7a:c7:56:
1f:cc:60:af:e7:d7:c8:32:b3:52:eb:75:45:db:e7:0a:1a:c5:
4d:79:47:0c:b2:c4:2f:7e:ed:ae:c3:fa:2c:e6:ff:99:fa:ca:
99:a6:41:fa:03:40:02:48:bc:38:20:e4:05:b3:7b:bb:6f:89:
dd:db:8a:5a:90:c1:9c:78:0c:b2:59:70:5f:10:a2:6c:52:5b:
59:f1:52:83:83:65:08:5c:e0:dd:9a:bc:4c:dd:55:ab:23:7f:
7d:c6:b3:5b:76:d8:43:c8:72:25:f0:2f:ac:14:f0:bd:bd:ec:
3f:6c:ba:61:4d:a3:ee:37:f5:7a:dd:bd:15:a6:8d:88:9a:2e:
29:fc:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:02 2025 by rpki-client