Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/mxzFQ1Iqm7sx-ckt6j2IJRp2FOo.roa
File: mxzFQ1Iqm7sx-ckt6j2IJRp2FOo.roa (raw, json)
Hash identifier: 498HPKltLcKY7YfJFKBgt7pm9SG0cJlLch7vXYUTDjA=
Subject key identifier: 9B:1C:C5:43:52:2A:9B:BB:31:F9:C9:2D:EA:3D:88:25:1A:76:14:EA
Certificate issuer: /CN=44046a683ab92b41819977245ce759e267a5036a
Certificate serial: 018CC3B73A05510B506EF7DCFFD51EBDFB2E
Authority key identifier: 44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/mxzFQ1Iqm7sx-ckt6j2IJRp2FOo.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39902
IP address blocks: 185.1.99.0/24 maxlen: 24
2001:7f8:ba::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3a:05:51:0b:50:6e:f7:dc:ff:d5:1e:bd:fb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44046a683ab92b41819977245ce759e267a5036a
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b1cc543522a9bbb31f9c92dea3d88251a7614ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:71:9c:22:3d:7d:94:d3:38:2e:5a:8f:6c:
89:d0:b7:8d:90:89:8d:78:0f:9e:5f:08:3a:5a:22:
58:af:95:93:c2:eb:4e:5b:07:59:d0:d8:2e:1f:a1:
7c:c8:65:fc:9b:b9:29:87:dd:33:0c:ab:a9:89:c3:
69:cf:af:19:6a:e6:79:91:6a:f9:d2:38:ba:29:48:
c0:da:a3:ed:86:45:14:5c:d2:47:8d:12:1c:bf:00:
3b:ae:6f:01:f3:df:b3:c1:92:b1:6e:31:cd:73:5b:
75:e2:21:0a:fd:cd:e6:69:5f:74:15:3f:d0:e3:6e:
79:4f:b8:da:d2:e9:74:e9:ec:52:9b:34:da:96:27:
28:7b:08:fc:b1:c1:ae:74:92:22:a0:84:d2:23:46:
ad:ff:3c:8e:85:6e:6e:1f:8f:fc:c2:22:84:8d:c6:
56:26:03:4e:c3:3f:82:a6:a6:48:7b:ba:4c:ba:bf:
e7:6d:1c:8f:ee:da:ea:c6:3d:03:e4:be:22:d2:94:
88:07:54:15:cf:3d:d8:c3:af:e0:56:1b:a2:7f:a7:
39:4f:5f:21:80:5a:4e:17:af:bf:ef:6a:b1:02:58:
5b:d5:61:52:7b:c2:71:2d:a2:8e:01:46:43:bc:17:
bf:b9:12:70:8f:76:00:e4:5f:ed:4f:c4:37:26:89:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1C:C5:43:52:2A:9B:BB:31:F9:C9:2D:EA:3D:88:25:1A:76:14:EA
X509v3 Authority Key Identifier:
keyid:44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/mxzFQ1Iqm7sx-ckt6j2IJRp2FOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.99.0/24
IPv6:
2001:7f8:ba::/48
Signature Algorithm: sha256WithRSAEncryption
7b:8d:9e:24:e3:a6:e2:a7:fe:f4:a5:c7:86:25:7e:55:56:9c:
38:28:ee:bf:1d:6f:63:f7:79:e2:24:1d:3e:00:43:78:ec:84:
3a:70:a4:a4:77:9c:9d:12:65:b9:0a:17:d5:61:ff:85:2f:ca:
9a:4c:be:b4:c9:72:5c:07:53:3d:f2:2c:36:e1:c9:43:42:e4:
37:8f:f4:92:73:55:07:5d:37:44:b9:2d:d3:05:56:86:30:66:
04:b5:1d:07:80:d6:7c:4e:7e:1a:4f:11:a1:d8:5e:8d:59:c4:
25:bb:15:a9:c1:9e:89:40:b0:3c:e7:5e:2e:79:34:bd:09:55:
52:0e:f9:e5:d9:ae:a9:50:0a:e1:dd:ef:67:e7:62:3f:73:71:
d8:ae:42:6f:27:6b:e6:79:c9:00:fa:df:15:40:41:97:6e:63:
af:17:a2:8b:92:d1:67:3d:4d:e9:fd:13:24:e1:5d:de:3b:57:
8c:5d:c9:44:33:67:26:d7:bb:af:e3:61:78:fe:bb:b1:41:f5:
04:11:aa:0e:28:83:6c:b5:7b:11:d6:a2:98:be:b8:f7:01:20:
63:a8:29:74:e6:8d:c8:32:1d:ba:e9:ec:7e:49:e7:0f:48:b7:
44:7c:9e:27:91:ad:75:d1:8d:1d:c7:00:89:67:4f:85:35:0a:
ef:57:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:22 2024 by rpki-client on console-fra.rpki-client.org