Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa
File: 1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa (raw, json)
Hash identifier: PStPHb4lTLJU09zEEQt3VITVX4/0ZCKXPP8T/MgjW6A=
Subject key identifier: FA:61:C2:BD:D8:79:3C:8B:1B:41:4E:8F:F1:76:90:34:DC:87:1C:89
Certificate issuer: /CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
Certificate serial: 084C3DEA
Authority key identifier: F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa
Signing time: Sat 01 Jan 2022 11:58:28 +0000
ROA not before: Sat 01 Jan 2022 11:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.250.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139214314 (0x84c3dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e3179a8a21762ca9dc3ffa4c2d84b839f0fb38
Validity
Not Before: Jan 1 11:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa61c2bdd8793c8b1b414e8ff1769034dc871c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:a1:43:32:cf:70:4a:64:ed:9d:25:65:c6:
79:e6:07:b9:95:69:77:5e:61:a7:8b:31:bd:e5:ae:
8f:ad:25:a9:1d:1f:79:42:16:35:a5:3f:f7:52:b1:
9e:f2:a9:ef:6c:fa:f2:0a:c6:cf:e1:47:2f:c8:50:
5e:d8:3b:e8:cf:e8:0d:40:50:9d:0b:ee:41:a5:fb:
b0:8c:72:c6:bf:4b:ef:be:fd:11:b1:9e:04:ab:52:
16:43:06:78:11:0b:b0:ed:17:3a:89:ac:3f:4a:94:
59:bd:30:c2:21:de:0a:08:07:a2:b6:68:ef:b1:4b:
8b:fb:1d:b1:9a:b0:0a:66:8a:ac:28:1e:6b:6b:90:
e2:de:e1:51:e3:d0:37:19:36:cf:0c:7d:d8:0e:0f:
85:b9:a9:aa:a9:15:fa:4a:22:cf:0f:bb:b9:8f:7d:
2b:40:13:a7:62:85:00:7a:3a:c7:e3:55:c9:4c:68:
fc:97:84:45:47:fd:e6:67:1e:64:ba:a3:1d:3d:69:
94:3d:5a:87:76:59:ed:33:65:ed:8a:b2:88:33:ed:
f4:68:07:72:35:bb:70:d6:57:42:3e:77:a9:88:d9:
74:b3:f0:6e:f7:de:a8:1c:e9:f0:c9:e9:4d:c9:68:
a3:de:d6:e5:41:b6:75:f0:46:5b:e7:ab:33:99:bf:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:C2:BD:D8:79:3C:8B:1B:41:4E:8F:F1:76:90:34:DC:87:1C:89
X509v3 Authority Key Identifier:
keyid:F3:E3:17:9A:8A:21:76:2C:A9:DC:3F:FA:4C:2D:84:B8:39:F0:FB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-MXmoohdiyp3D_6TC2EuDnw-zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/1-mHCvdh5PIsbQU6P8XaQNNyHHIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a22199-ccd5-4308-9eda-5fa0c7c96acf/1/8-MXmoohdiyp3D_6TC2EuDnw-zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:55:9f:73:ea:85:1e:a2:2d:f2:4e:e3:a6:d4:e9:1e:79:e4:
6f:f8:4c:fd:88:a9:9f:48:ba:cb:c6:0a:da:b8:d5:70:16:90:
39:1b:20:6a:f7:b4:f0:4e:5c:bf:47:88:5a:0a:04:8d:28:dc:
51:ad:10:bf:66:97:0f:65:85:f7:be:06:be:4e:31:ec:81:fd:
1f:1e:88:a7:df:1b:75:92:72:c8:27:c7:f7:61:25:09:8c:55:
39:55:27:da:77:83:bb:78:37:a8:3c:88:19:70:d4:67:a2:c7:
fa:48:60:02:d5:f0:e4:cf:30:4f:25:1e:b8:08:c6:7b:c8:56:
9a:7d:1f:d3:ef:d5:7a:b8:0c:51:55:8f:4e:86:7d:7e:49:bf:
cf:7f:f1:22:51:d8:ca:31:37:73:eb:2b:11:3c:e1:1a:d0:e4:
50:ce:5f:8f:ff:fb:a9:93:2c:fd:ca:4a:60:19:a1:dd:23:0d:
0d:6b:51:ce:61:ca:62:21:f2:05:2a:6f:e3:32:8f:b9:56:58:
19:c2:25:82:9c:3a:0b:1c:47:e7:bb:2d:6d:6c:40:2a:32:1b:
ed:a7:8f:ea:c7:fc:95:29:01:c5:8e:5c:d3:b0:d3:94:5f:98:
18:1c:38:d9:19:14:23:74:77:ee:21:0f:06:70:08:cc:be:c5:
e9:56:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:56 2025 by rpki-client