Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Mxyiie7qe5ia80Be_uHIDIba0o8.roa
File: Mxyiie7qe5ia80Be_uHIDIba0o8.roa (raw, json)
Hash identifier: OZPJsvN/jXEAsrm8d5GQ5tmLw/KfAC6wimMg6cF8aoM=
Subject key identifier: 33:1C:A2:89:EE:EA:7B:98:9A:F3:40:5E:FE:E1:C8:0C:86:DA:D2:8F
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF9422130BC231F6AAFD00AF779A4CC
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Mxyiie7qe5ia80Be_uHIDIba0o8.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29538
IP address blocks: 185.213.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:42:21:30:bc:23:1f:6a:af:d0:0a:f7:79:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=331ca289eeea7b989af3405efee1c80c86dad28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:62:b0:8c:27:9e:69:a4:fe:56:20:12:a8:
d8:49:c1:66:6c:0b:be:d4:55:5b:12:11:da:97:67:
7c:f6:b4:a4:57:62:87:a7:4a:a1:b5:25:91:73:65:
f1:86:5f:7a:14:30:e3:39:fc:31:98:04:38:00:6b:
f8:41:26:00:f9:91:03:9f:04:1c:d6:b2:88:34:48:
fd:4b:4f:35:fb:86:0c:60:33:0c:60:bc:b1:d9:5e:
71:33:c7:36:a4:36:ef:a7:eb:b4:e1:97:6d:bd:2b:
a2:d0:d5:b2:64:e6:13:7c:c9:49:2a:a6:11:ac:f5:
81:80:3b:cf:4a:ca:18:fa:96:7d:51:be:dc:bc:5b:
d0:39:1c:6a:70:8a:ff:ce:9e:b0:b7:88:d4:ce:0c:
6f:d9:e7:06:a6:94:00:0c:4d:4b:f9:4d:1a:f8:d0:
a2:69:dd:6d:e3:4f:f1:fe:fe:5f:82:98:88:d9:3f:
09:c8:ac:27:70:35:60:49:bf:16:2e:74:9d:3b:bc:
6a:da:d0:79:63:f2:f7:ef:7d:1d:06:ba:84:15:b0:
8f:04:c8:e0:4e:1d:bc:7d:6c:09:90:15:83:4c:c4:
4e:ab:8e:0f:b0:d8:f8:23:18:62:c5:bf:54:1b:4b:
2c:ea:69:d0:9a:9f:e9:60:18:fd:3f:3a:76:e0:89:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1C:A2:89:EE:EA:7B:98:9A:F3:40:5E:FE:E1:C8:0C:86:DA:D2:8F
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Mxyiie7qe5ia80Be_uHIDIba0o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.240.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bb:44:ce:47:68:86:11:aa:b1:29:44:63:c7:31:f2:8d:3a:
d2:8b:30:b4:67:8c:3d:07:1f:0c:2b:e2:0a:fe:62:0c:28:c6:
5a:7f:37:26:23:d3:d0:a1:8b:2b:49:b4:38:fb:e2:eb:9a:8a:
7e:f1:07:07:ef:02:f1:bd:89:52:79:f3:99:11:26:44:e4:95:
54:aa:fc:8a:59:e4:ad:da:7e:e9:09:34:8f:93:76:84:31:89:
d2:7a:b2:8d:8e:63:a2:b5:e4:90:e8:b3:82:d3:ee:4d:e3:55:
2c:27:2d:49:a0:cf:a4:61:77:d8:cd:06:6f:a6:5f:7a:8c:62:
a0:be:1d:a7:b4:83:92:78:f7:39:0b:86:2a:52:e0:d8:32:4e:
39:ed:51:f8:ed:1b:ec:cb:3f:9c:c0:62:60:2e:00:f7:fd:44:
56:60:e3:90:66:ce:70:4e:e7:98:35:b6:fa:3d:46:04:94:1a:
c0:27:1c:21:a9:1b:a9:54:4b:bb:34:19:cf:02:8e:24:da:1c:
f3:1f:59:43:e9:f3:5e:39:f8:46:14:4c:8a:1d:a0:db:ef:3c:
1d:8d:25:5c:ce:29:95:7a:9a:8b:05:68:03:fc:4e:8b:27:86:
e6:5d:e3:0f:26:4f:09:b8:b4:5d:5b:5b:dd:39:3c:6e:1d:00:
fa:cd:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:00 2025 by rpki-client