Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/mCl-pgnAZ_Ci_HAG0mJ49KS8R_w.roa
File: mCl-pgnAZ_Ci_HAG0mJ49KS8R_w.roa (raw, json)
Hash identifier: SK8l2YzO34Igy7JA9O3Q4lLLGRrYh+4WLuX644WXyQU=
Subject key identifier: 98:29:7E:A6:09:C0:67:F0:A2:FC:70:06:D2:62:78:F4:A4:BC:47:FC
Certificate issuer: /CN=dc8125409986b77e0bd094ad87baff3eb4a25d67
Certificate serial: 01856C65B61E8D7B1B2FC20CB2BEB6E298A0
Authority key identifier: DC:81:25:40:99:86:B7:7E:0B:D0:94:AD:87:BA:FF:3E:B4:A2:5D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IElQJmGt34L0JSth7r_PrSiXWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/mCl-pgnAZ_Ci_HAG0mJ49KS8R_w.roa
Signing time: Sun 01 Jan 2023 08:14:43 +0000
ROA not before: Sun 01 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44063
IP address blocks: 185.179.176.0/23 maxlen: 23
185.179.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:b6:1e:8d:7b:1b:2f:c2:0c:b2:be:b6:e2:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8125409986b77e0bd094ad87baff3eb4a25d67
Validity
Not Before: Jan 1 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98297ea609c067f0a2fc7006d26278f4a4bc47fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:e2:25:36:f5:b1:d6:c0:14:58:8f:d0:40:
17:3f:e7:1c:44:f8:fa:4b:50:a3:0f:59:ff:57:a4:
9d:41:e7:31:4f:e9:9e:48:59:fd:5e:d8:c1:fa:62:
1e:ac:48:c2:bc:d5:27:38:71:b9:64:9e:c4:a7:c0:
c0:db:aa:e9:84:87:61:ce:95:89:73:5f:f8:2b:38:
c7:14:7b:6b:f5:89:68:72:97:a0:80:c5:31:32:96:
b8:0b:c6:78:33:b3:18:c9:30:5d:f5:66:87:aa:7b:
1d:68:b9:28:c2:f8:12:69:29:4d:95:ef:a2:07:12:
d2:4d:c3:44:51:c2:8c:52:68:75:05:8d:a4:c5:13:
ce:a6:d9:55:73:16:ea:26:6c:1a:d5:16:10:71:5d:
46:1e:53:27:47:47:03:88:f3:ec:b6:89:e6:6a:b7:
20:5b:58:7e:8b:b0:9e:55:0e:5b:6c:68:b5:1c:88:
f9:fc:54:ea:2a:30:0f:86:ad:a5:56:ec:30:e6:62:
1e:d8:a1:39:5e:ab:b9:93:82:64:da:3f:59:8e:82:
1a:99:d5:c3:cc:1c:ec:7a:5c:ff:38:66:00:bd:6a:
5f:5f:45:96:b0:60:b4:5a:93:1c:e2:23:84:57:da:
84:fd:d1:fd:96:43:86:6d:ac:3f:07:50:40:2c:6a:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:7E:A6:09:C0:67:F0:A2:FC:70:06:D2:62:78:F4:A4:BC:47:FC
X509v3 Authority Key Identifier:
keyid:DC:81:25:40:99:86:B7:7E:0B:D0:94:AD:87:BA:FF:3E:B4:A2:5D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IElQJmGt34L0JSth7r_PrSiXWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/mCl-pgnAZ_Ci_HAG0mJ49KS8R_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/3IElQJmGt34L0JSth7r_PrSiXWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:27:6d:1c:65:20:a2:37:97:be:4a:48:43:2f:05:7f:6d:32:
73:9c:44:32:6f:79:c4:21:67:6a:f3:f3:53:8c:de:31:52:f3:
23:35:75:7f:74:2a:22:45:fc:6e:72:b3:bb:f9:82:bd:b8:35:
6e:08:ba:8c:22:9e:c8:2b:70:a9:29:b2:41:6b:fa:4d:fc:10:
49:fe:9a:da:80:72:75:b2:68:4d:56:f0:4a:d8:19:c6:6a:03:
4b:27:8d:c4:dc:55:fa:11:03:9f:b3:48:fd:69:9c:2e:60:2e:
b3:73:12:4e:f5:d9:a5:21:25:68:a6:b3:9b:c3:24:35:35:40:
0f:d4:91:9b:fc:05:c1:b7:d4:cd:36:72:a6:79:e3:d6:aa:41:
18:bf:81:26:02:7b:bf:bf:9e:3d:1f:46:20:06:ae:5a:6c:23:
ef:ac:b8:36:75:14:2c:7b:95:f1:51:ae:5c:a7:30:67:b3:5f:
94:e5:d6:a1:e2:82:39:85:e1:dd:43:bc:53:c1:f2:77:aa:e5:
aa:2e:3c:6a:41:58:c7:6a:e3:42:7b:89:29:04:a9:bf:7e:f7:
23:cf:aa:48:0e:fb:84:17:15:7c:03:32:86:e6:12:1c:b5:a0:
7a:85:2e:b1:80:37:9f:6c:c3:15:84:69:6d:b2:2f:91:98:57:
e9:81:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:16 2023 by rpki-client on console-ams.rpki-client.org