Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/MlQZdFCX00k_33e3TFAwSgbTRw8.roa
File: MlQZdFCX00k_33e3TFAwSgbTRw8.roa (raw, json)
Hash identifier: 2Oyyz13HqmqlVXKqc1AsZI9wX6Yi/OXVGFOnIem5wCo=
Subject key identifier: 32:54:19:74:50:97:D3:49:3F:DF:77:B7:4C:50:30:4A:06:D3:47:0F
Certificate issuer: /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial: 01856F8250EAA71E234B01C735C8B7D4AED6
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/MlQZdFCX00k_33e3TFAwSgbTRw8.roa
Signing time: Sun 01 Jan 2023 22:44:49 +0000
ROA not before: Sun 01 Jan 2023 22:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:50:ea:a7:1e:23:4b:01:c7:35:c8:b7:d4:ae:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Validity
Not Before: Jan 1 22:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=325419745097d3493fdf77b74c50304a06d3470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:a0:70:c1:21:95:f7:7a:f9:50:02:1c:4e:
99:0d:26:56:74:dc:ce:97:d3:9d:53:20:12:49:91:
66:11:e7:5f:40:81:4b:b3:0f:be:ac:71:b2:d1:58:
4a:82:18:f2:4f:1a:a8:5a:38:ba:60:ee:b3:a8:53:
ba:61:e7:d4:d7:07:14:c0:b2:0f:50:fa:4c:86:c3:
cf:a3:f7:0a:75:c9:51:fd:94:4f:a4:8c:f0:3a:9e:
5a:bc:2e:29:e6:72:ce:fb:8a:b0:41:fb:82:60:b1:
e1:1a:dd:5d:ac:e6:5d:41:f1:64:00:08:6b:23:4b:
6b:07:d6:24:c6:62:92:b7:07:d4:9f:ce:a8:57:a1:
63:ed:40:de:24:33:f6:aa:21:13:c8:29:ab:0d:b2:
37:0e:01:3a:e1:98:20:ce:58:05:c7:f0:ae:4f:13:
0d:93:f4:89:4e:d6:24:eb:ec:89:4d:d4:28:bf:60:
eb:ba:b7:14:51:98:cd:d6:11:3a:5a:4b:b4:61:45:
73:8d:aa:3d:aa:aa:78:2a:32:ce:2b:e4:92:22:29:
ea:7f:02:f7:6a:00:10:eb:7e:49:75:19:5e:44:63:
c5:2c:6b:47:7f:e5:3e:23:0d:ea:87:7c:10:fe:e7:
4a:e8:99:28:e8:d6:45:2b:f0:b0:19:e7:b8:15:61:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:19:74:50:97:D3:49:3F:DF:77:B7:4C:50:30:4A:06:D3:47:0F
X509v3 Authority Key Identifier:
keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/MlQZdFCX00k_33e3TFAwSgbTRw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.149.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6d:f2:14:5e:34:bc:76:4f:9d:80:55:69:96:e7:a8:f1:4a:
ff:07:39:68:ec:9a:c5:fc:54:ed:0b:77:27:55:07:ea:76:e5:
49:d4:45:28:f9:dd:8d:ca:c1:8f:38:61:0a:2b:aa:b2:81:cc:
66:23:de:36:ce:9b:e5:d2:47:42:97:fd:dd:43:e9:b3:97:58:
54:6d:b7:af:04:6d:89:4d:40:15:81:af:cd:06:23:4d:18:c5:
87:1d:01:f1:d5:e7:2d:cc:51:f2:ac:6e:87:ac:39:6e:ea:c9:
69:a7:53:3d:11:8d:31:a9:66:80:79:1c:d3:31:2d:07:02:cb:
2a:e6:ac:50:c2:a0:4c:22:e3:6f:33:a5:10:b7:fe:85:57:01:
c5:a5:4d:65:90:6f:8b:e3:7d:b2:7b:c2:a1:a2:67:21:6e:dc:
89:a1:cb:6e:cd:f6:d9:f6:c6:d7:4a:04:fd:e0:fd:d4:c1:ee:
b9:c3:1d:4f:e7:f3:1f:da:89:ed:6a:7b:23:c0:2d:1a:d6:47:
d4:f0:e2:00:f4:c8:4c:ba:0c:1d:85:10:a7:4d:2d:cd:6a:a6:
95:96:68:65:57:2f:8f:26:94:4b:03:ab:87:7b:0e:c3:53:9d:
16:e3:44:f1:b6:f9:1b:cd:53:97:8d:0c:8c:cb:8b:d1:50:49:
b0:b1:ff:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvglDqpx4jSwHHNci31K7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYTg1NTg2Yjk5MWNmNzBlMGFmMTljMDNhNDM3NmUyN2Qw
MjZmNDMwHhcNMjMwMTAxMjI0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjU0MTk3NDUwOTdkMzQ5M2ZkZjc3Yjc0YzUwMzA0YTA2ZDM0NzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCCgcMEhlfd6+VACHE6ZDSZWdNzO
l9OdUyASSZFmEedfQIFLsw++rHGy0VhKghjyTxqoWji6YO6zqFO6YefU1wcUwLIP
UPpMhsPPo/cKdclR/ZRPpIzwOp5avC4p5nLO+4qwQfuCYLHhGt1drOZdQfFkAAhr
I0trB9YkxmKStwfUn86oV6Fj7UDeJDP2qiETyCmrDbI3DgE64ZggzlgFx/CuTxMN
k/SJTtYk6+yJTdQov2DrurcUUZjN1hE6Wku0YUVzjao9qqp4KjLOK+SSIinqfwL3
agAQ635JdRleRGPFLGtHf+U+Iw3qh3wQ/udK6Jko6NZFK/CwGee4FWG1wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJUGXRQl9NJP993t0xQMEoG00cPMB8GA1UdIwQY
MBaAFOuoVYa5kc9w4K8ZwDpDduJ9Am9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZoVmhybVJ6M0RncnhuQU9rTjI0bjBDYjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xODIxMDQtNDU3MC00OGNlLWE5N2Qt
OTZlYjQ5ZDE5NTVjLzEvTWxRWmRGQ1gwMGtfMzNlM1RGQXdTZ2JUUnc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xODIxMDQtNDU3MC00OGNlLWE5N2QtOTZlYjQ5ZDE5NTVj
LzEvNjZoVmhybVJ6M0RncnhuQU9rTjI0bjBDYjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOVMA0G
CSqGSIb3DQEBCwUAA4IBAQCVbfIUXjS8dk+dgFVplueo8Ur/Bzlo7JrF/FTtC3cn
VQfqduVJ1EUo+d2NysGPOGEKK6qygcxmI942zpvl0kdCl/3dQ+mzl1hUbbevBG2J
TUAVga/NBiNNGMWHHQHx1ectzFHyrG6HrDlu6slpp1M9EY0xqWaAeRzTMS0HAssq
5qxQwqBMIuNvM6UQt/6FVwHFpU1lkG+L432ye8KhomchbtyJoctuzfbZ9sbXSgT9
4P3Uwe65wx1P5/Mf2ontansjwC0a1kfU8OIA9MhMugwdhRCnTS3NaqaVlmhlVy+P
JpRLA6uHew7DU50W40TxtvkbzVOXjQyMy4vRUEmwsf/U
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:22 2025 by rpki-client