Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/RMsG0MbzTKToTj70IV9TUqh3Gw4.roa
File: RMsG0MbzTKToTj70IV9TUqh3Gw4.roa (raw, json)
Hash identifier: HnHjprz8047jefJ7lGFFFG34gJVjMjJxehesiveaIds=
Subject key identifier: 44:CB:06:D0:C6:F3:4C:A4:E8:4E:3E:F4:21:5F:53:52:A8:77:1B:0E
Certificate issuer: /CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Certificate serial: 027AB178
Authority key identifier: CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/RMsG0MbzTKToTj70IV9TUqh3Gw4.roa
Signing time: Sat 01 Jan 2022 16:11:08 +0000
ROA not before: Sat 01 Jan 2022 16:11:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.243.1.0/24 maxlen: 24
2a0d:3c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41595256 (0x27ab178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Validity
Not Before: Jan 1 16:11:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44cb06d0c6f34ca4e84e3ef4215f5352a8771b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:07:80:7d:16:3a:e3:3e:5a:b9:45:dd:7c:
12:3a:5c:a4:bb:4c:ce:23:a6:29:ce:82:c7:24:61:
c6:d4:c4:22:6e:0f:0b:95:8f:1b:d8:cf:d1:3f:e1:
7d:e6:3d:81:89:17:ab:55:3f:9e:be:f9:79:cb:bc:
65:7b:75:65:00:db:b9:d4:f2:ba:23:d3:c0:a2:b9:
09:8e:9b:32:84:7d:e2:03:2b:a0:e6:37:72:8b:cc:
4c:7d:77:8e:ce:62:ea:a4:40:b0:6b:23:0f:14:5f:
ab:7d:5d:40:ec:0c:b9:ce:15:82:dd:43:84:e5:b6:
58:42:63:ab:51:bb:dd:4b:0e:06:a0:37:08:c0:1b:
55:9d:50:45:4b:1d:ae:de:70:b6:72:08:ae:e6:b1:
f4:48:9e:53:de:37:da:86:72:21:f1:51:e5:dc:f7:
6f:80:4a:3e:d5:e2:34:58:7c:32:6c:56:3d:c4:dc:
f6:7b:70:74:4d:ad:68:9a:98:34:b3:84:80:8d:cf:
89:20:da:1f:e0:9e:a3:23:d7:a2:5d:ba:38:4d:ce:
ec:fd:0a:d4:1d:ba:2f:72:b0:71:40:10:01:6b:1e:
13:60:ce:33:8c:a2:d9:58:35:ca:89:be:ee:a1:ed:
47:bc:0e:67:d2:ab:bf:85:79:01:db:66:b5:ce:14:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CB:06:D0:C6:F3:4C:A4:E8:4E:3E:F4:21:5F:53:52:A8:77:1B:0E
X509v3 Authority Key Identifier:
keyid:CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/RMsG0MbzTKToTj70IV9TUqh3Gw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.1.0/24
IPv6:
2a0d:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
70:e5:9a:3c:27:5f:e5:92:52:bb:91:fa:1d:3d:69:ea:8e:a8:
ba:a3:69:32:c4:03:6a:0b:45:07:b1:77:00:a3:f9:a2:a1:6d:
0b:d7:64:03:cd:43:64:aa:6c:9d:95:68:d6:86:bf:5b:81:a6:
6d:d2:31:3d:d8:40:01:5c:3d:d5:a0:f4:21:9d:41:8b:59:20:
d0:dd:11:82:61:05:5d:a1:71:5d:46:7e:e4:6c:2c:fb:29:98:
69:8c:84:9c:8b:28:bf:4d:cc:dc:5f:6a:9c:15:3b:ee:5b:6a:
5c:91:4f:89:43:76:01:17:e9:c8:eb:4f:08:4e:79:74:59:26:
0a:25:03:1e:6c:85:d4:d7:32:a0:15:81:48:40:50:1b:55:3b:
c1:1e:6c:80:ef:d3:91:c2:75:92:44:71:e8:da:0e:5d:00:90:
42:5b:5d:47:27:73:d6:74:b1:60:88:8a:43:53:16:81:fe:83:
8b:ff:91:95:3a:21:9b:b1:df:3c:0e:3d:05:3a:14:17:c0:df:
47:48:e3:39:66:be:a4:28:e6:52:0d:b3:2d:71:11:7a:44:51:
ef:60:3a:af:10:43:54:fd:52:71:fa:43:b3:98:de:99:c3:f0:
66:06:90:fd:7c:21:c0:de:94:c7:5f:33:23:ec:68:29:f4:56:
52:f1:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:05 2025 by rpki-client