Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/MxGuc5pvwR-k1WVifPMO2Z506hA.roa
File: MxGuc5pvwR-k1WVifPMO2Z506hA.roa (raw, json)
Hash identifier: H2THbkN9BAIyEjNTo3gfQHVFpyeJ+wKCm7QByIdCfZs=
Subject key identifier: 33:11:AE:73:9A:6F:C1:1F:A4:D5:65:62:7C:F3:0E:D9:9E:74:EA:10
Certificate issuer: /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial: 44AEC8
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/MxGuc5pvwR-k1WVifPMO2Z506hA.roa
Signing time: Wed 16 Feb 2022 13:03:16 +0000
ROA not before: Wed 16 Feb 2022 13:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 5.181.182.0/24 maxlen: 24
5.181.181.0/24 maxlen: 24
5.181.180.0/24 maxlen: 24
185.176.92.0/24 maxlen: 24
185.176.94.0/23 maxlen: 23
185.216.104.0/24 maxlen: 24
185.229.222.0/23 maxlen: 23
185.229.221.0/24 maxlen: 24
185.216.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4501192 (0x44aec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Validity
Not Before: Feb 16 13:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3311ae739a6fc11fa4d565627cf30ed99e74ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:ca:30:5d:a2:1f:0b:4e:c3:59:d4:a2:46:
68:59:3b:64:16:6e:e1:ad:95:b4:f4:6e:4c:21:e4:
bd:e4:9d:78:97:d5:0c:e4:69:ae:ce:49:91:79:28:
32:ed:5f:65:70:32:b9:d7:07:90:8c:a2:f7:e0:f8:
9b:89:59:d2:5b:32:72:64:19:de:1b:07:ca:d7:2d:
c9:e3:ba:e0:f9:00:7a:1b:84:84:fb:89:02:ce:e5:
41:ea:a6:d7:80:30:ff:af:d8:34:26:6e:e9:0a:3e:
22:ff:9a:35:ff:cb:a0:9c:8c:e5:82:ff:07:19:67:
5a:3f:40:f4:3c:fc:29:47:68:ec:3d:3b:a3:a3:a2:
6a:9f:9f:5e:ef:c6:a5:73:d8:91:04:d8:cd:b5:23:
7a:ad:6c:90:3f:75:c8:d6:4f:73:cd:f2:32:0b:6f:
cb:d7:9c:fc:c4:25:06:79:27:49:4a:0e:56:0e:d1:
53:fa:ba:4a:c3:be:24:c7:a6:80:0d:8d:f3:b3:59:
85:bc:1f:41:b0:19:0c:a5:ba:02:e6:e2:84:a0:83:
9a:25:67:23:80:9e:e8:59:eb:8a:67:83:8b:da:a4:
92:4d:94:1a:1d:9d:47:3a:c5:1d:6c:b0:29:9e:15:
09:2d:43:d6:ff:08:f5:13:dd:17:b0:84:87:55:1e:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:AE:73:9A:6F:C1:1F:A4:D5:65:62:7C:F3:0E:D9:9E:74:EA:10
X509v3 Authority Key Identifier:
keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/MxGuc5pvwR-k1WVifPMO2Z506hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.180.0-5.181.182.255
185.176.92.0/24
185.176.94.0/23
185.216.104.0/24
185.216.106.0/23
185.229.221.0-185.229.223.255
Signature Algorithm: sha256WithRSAEncryption
49:1f:12:19:28:44:06:7a:c8:eb:c2:76:eb:75:46:e8:d4:73:
97:2a:9c:5e:b1:37:9e:e1:e2:23:b1:4c:68:b9:9f:d4:d8:f9:
af:77:12:44:c9:02:f5:be:fc:72:a2:a4:24:b5:1f:f2:79:c9:
a1:42:76:56:dd:b0:4f:37:0b:a8:ff:6f:36:87:c9:c2:90:ab:
70:84:4d:68:12:d7:07:31:e7:7f:e5:05:af:a6:61:fb:a5:2b:
0b:f5:5b:b0:af:e4:26:ca:02:8a:1c:58:69:63:10:32:2e:70:
66:e1:04:48:03:58:cd:4a:d6:27:05:23:bf:9f:97:17:81:5d:
3f:9c:c1:6e:f9:d8:2a:8a:11:2f:9b:d9:e3:d3:3f:db:75:1c:
89:af:ec:3e:3d:9a:68:f4:11:bf:32:6f:80:4c:2c:2d:58:9b:
4a:e2:27:5d:f3:21:46:9f:dc:f5:a2:47:d7:22:f4:2e:4e:b4:
5d:2f:99:df:29:3a:29:36:06:a9:fb:27:72:b8:58:4e:5d:ae:
12:df:a6:2e:bf:29:f0:49:8b:a3:e0:9b:94:e7:66:90:1b:7d:
44:21:75:a7:b3:22:50:4f:d7:a7:20:b0:ab:fb:45:5f:94:ea:
6e:ab:81:cf:61:79:52:7d:96:af:ee:dc:40:46:e0:b0:6c:18:
ca:5a:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:12 2023 by rpki-client on console-ams.rpki-client.org