Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/mlhryDxeH9FccfN_vVLgp9qFXsM.roa
File: mlhryDxeH9FccfN_vVLgp9qFXsM.roa (raw, json)
Hash identifier: XdM+IU8kS66vO2azmY7cXzpWZZlbdpA37b09juT67VI=
Subject key identifier: 9A:58:6B:C8:3C:5E:1F:D1:5C:71:F3:7F:BD:52:E0:A7:DA:85:5E:C3
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03866242
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/mlhryDxeH9FccfN_vVLgp9qFXsM.roa
Signing time: Fri 04 Feb 2022 07:33:09 +0000
ROA not before: Fri 04 Feb 2022 07:33:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.213.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59138626 (0x3866242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Feb 4 07:33:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a586bc83c5e1fd15c71f37fbd52e0a7da855ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:33:da:73:53:d5:93:a0:76:1f:f9:e0:ea:
c4:ec:8e:7c:6c:d3:f2:fa:68:54:7a:9c:3d:df:66:
97:cf:07:a5:ad:f3:d0:01:8f:6c:05:d7:f6:ee:0b:
bc:38:31:4f:9c:86:05:5e:b1:98:06:8b:f5:21:15:
47:7b:f1:10:66:4f:81:cc:2b:5c:11:f9:f9:23:e7:
a6:ba:00:6a:8d:11:7b:a4:55:42:32:c8:01:7a:67:
6f:33:81:58:74:11:0b:e9:fe:a7:0c:07:2c:86:d8:
f0:2c:f2:ae:f8:a2:bb:e6:06:ce:75:57:93:52:4d:
29:c7:d7:62:58:a7:a0:6d:88:3c:f9:d6:a5:56:6e:
ab:98:2b:49:40:e1:8e:f1:63:52:f6:c8:88:7e:c2:
08:55:a4:f6:75:50:32:e8:cb:3b:65:bb:ca:a0:94:
5e:51:43:4b:db:ab:38:2a:f2:48:97:cb:f5:67:08:
0e:31:8c:44:32:32:f5:e8:2e:d1:9d:69:de:3b:30:
ee:5b:bd:50:d6:41:e7:1b:f6:b8:9a:1d:91:61:91:
b7:d7:df:07:dc:6b:44:80:f9:20:c1:15:06:1d:96:
28:f7:24:42:a9:67:9f:a4:75:6a:b2:be:17:86:ae:
9c:26:73:5a:31:a9:3e:dd:6f:cc:89:c5:ec:c4:fb:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:6B:C8:3C:5E:1F:D1:5C:71:F3:7F:BD:52:E0:A7:DA:85:5E:C3
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/mlhryDxeH9FccfN_vVLgp9qFXsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.243.0/24
Signature Algorithm: sha256WithRSAEncryption
20:16:c8:e7:23:6f:54:24:94:f7:72:50:62:29:32:b5:33:c3:
5b:ad:a6:88:a3:3e:b3:f7:29:cc:80:a2:af:a9:6c:3b:5c:13:
68:1a:2f:e2:cf:42:0f:42:2f:52:bd:3c:e5:d8:88:a6:9c:d8:
79:41:52:5a:6b:cb:10:99:44:73:85:31:e1:a0:85:e7:80:3c:
bc:d0:ab:e8:27:37:28:3f:05:11:05:3f:1e:19:7d:03:d7:af:
dc:43:30:50:56:59:f2:73:e5:ed:a9:75:d5:cd:40:3b:cb:66:
98:1b:74:28:82:98:48:c5:9b:c3:72:14:6b:d3:9b:76:35:22:
c1:fa:92:ae:4c:7b:f8:58:a8:91:7c:ef:92:a2:da:82:c7:85:
e8:5d:5a:17:42:90:b7:0b:c6:3f:13:03:16:a4:11:35:8d:55:
b0:f9:ad:0c:46:fa:9c:f0:df:63:6d:41:6a:cf:ae:9a:9d:5b:
a2:06:58:41:52:b4:08:79:68:09:d6:81:42:c9:57:9c:47:fe:
21:70:c4:7b:4a:b3:7b:48:2c:1a:27:b9:81:9f:1d:91:7c:f2:
c2:5b:fb:b1:80:65:10:3f:07:05:f8:ed:35:e1:1a:68:86:6d:
99:5b:cf:46:2d:30:2e:38:40:6a:42:21:e4:61:71:51:bc:40:
80:03:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:51 2025 by rpki-client