Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/mcgcQPu7bFI2yHdGjk2jyviCKOM.roa
File: mcgcQPu7bFI2yHdGjk2jyviCKOM.roa (raw, json)
Hash identifier: TVlKY/KbYfUw+ksd0VXOvV8lduE6TiT2WKdXVXKeDBg=
Subject key identifier: 99:C8:1C:40:FB:BB:6C:52:36:C8:77:46:8E:4D:A3:CA:F8:82:28:E3
Certificate issuer: /CN=9be9cf3eb15ad59372d64632b593f26ae890194d
Certificate serial: 013769
Authority key identifier: 9B:E9:CF:3E:B1:5A:D5:93:72:D6:46:32:B5:93:F2:6A:E8:90:19:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-nPPrFa1ZNy1kYytZPyauiQGU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/mcgcQPu7bFI2yHdGjk2jyviCKOM.roa
Signing time: Sun 17 Apr 2022 12:44:38 +0000
ROA not before: Sun 17 Apr 2022 12:44:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8849
IP address blocks: 5.44.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79721 (0x13769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be9cf3eb15ad59372d64632b593f26ae890194d
Validity
Not Before: Apr 17 12:44:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99c81c40fbbb6c5236c877468e4da3caf88228e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:c0:4a:a1:a6:ff:96:2f:0a:ea:8f:31:f7:
ba:8d:12:ff:42:c2:aa:49:5c:d7:b0:25:2b:ad:98:
aa:e2:94:ac:99:ca:5b:14:08:48:2b:3e:98:51:3a:
cf:3e:76:9c:e9:b5:34:0e:b7:54:68:9c:46:bb:fa:
99:5d:af:c7:df:ef:b9:1b:ed:1d:df:97:b7:dc:5f:
8f:82:71:50:5f:43:9d:d8:b9:b9:78:02:d4:ca:b7:
66:07:d1:68:a6:57:e1:07:ec:93:3a:24:fc:8e:0e:
a3:73:19:7e:0d:fc:e5:a0:fd:2b:3e:bd:3a:13:40:
94:09:9a:7e:e5:e1:0e:47:0f:98:3e:aa:a9:a6:72:
c9:cc:7e:db:a7:ed:4f:ca:31:0f:41:e7:b7:d7:5b:
35:02:ab:c5:a5:6e:62:67:56:06:c4:3c:50:5c:0b:
00:2f:ab:85:2d:f0:85:1c:16:b4:4a:1f:a3:35:89:
55:03:e7:9b:0f:42:ed:b5:42:a7:63:54:48:40:18:
f4:8e:dc:97:df:e9:8c:df:9c:15:29:e0:90:75:8d:
18:2f:46:b5:34:aa:59:5d:fa:99:a5:63:43:80:87:
7c:dc:87:8d:33:c4:c0:7f:91:2d:6e:4b:49:ff:00:
e8:dc:69:40:8e:2e:01:10:5e:5e:52:38:00:c7:69:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:1C:40:FB:BB:6C:52:36:C8:77:46:8E:4D:A3:CA:F8:82:28:E3
X509v3 Authority Key Identifier:
keyid:9B:E9:CF:3E:B1:5A:D5:93:72:D6:46:32:B5:93:F2:6A:E8:90:19:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-nPPrFa1ZNy1kYytZPyauiQGU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/mcgcQPu7bFI2yHdGjk2jyviCKOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1b32ae-3c59-4b3d-9197-f3be848fde15/1/m-nPPrFa1ZNy1kYytZPyauiQGU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.249.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e6:06:f4:cf:44:d4:7a:63:29:92:38:62:36:b9:18:d1:0a:
76:a8:28:3e:7b:65:73:c7:c8:ce:2d:84:63:37:d3:91:f0:5d:
3e:2c:7f:4c:e9:2b:11:9f:49:21:bf:69:22:db:f8:29:79:80:
c7:6e:b5:a2:84:e8:3b:a3:b5:28:47:bd:26:4e:07:d6:05:9e:
73:9e:54:25:82:17:b1:f7:a6:d1:d5:d1:a4:55:b4:a3:06:c9:
34:05:01:20:3a:42:a3:aa:7c:ad:21:4d:bb:0f:80:ea:d6:c5:
64:c3:d9:4a:b3:3b:2a:bf:07:05:dc:ab:97:79:58:34:c4:20:
8e:93:e2:dd:8f:6c:b6:e1:9b:16:bf:d6:b1:d0:07:f5:9a:57:
a0:93:f5:6f:1a:35:68:b5:f8:b5:0b:cf:d0:39:58:15:40:f9:
6f:5f:50:03:09:c5:4a:c6:14:20:79:d3:af:d6:12:a3:de:f5:
84:c1:77:9a:2c:df:d4:6c:40:06:15:08:e8:77:14:c4:f1:01:
5e:56:14:18:02:82:09:df:49:86:70:a5:5a:8e:16:a0:12:28:
6d:2a:cd:6f:38:73:b1:5d:f1:30:a6:1e:c0:0e:9f:12:a4:d0:
b0:63:e3:b6:f6:92:ef:c6:08:1e:e7:b8:b2:ff:94:7b:e3:1a:
49:cb:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-fra.rpki-client.org