Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MvQHHvkVoQy3lVu02hdZ6FgqbBg.roa
File: MvQHHvkVoQy3lVu02hdZ6FgqbBg.roa (raw, json)
Hash identifier: m2m+bjvJcfx4y9hxUx6SCMhUW5rqeRhdVnMt4uwz5JM=
Subject key identifier: 32:F4:07:1E:F9:15:A1:0C:B7:95:5B:B4:DA:17:59:E8:58:2A:6C:18
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194708A691705D2E55651D624045546C836
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MvQHHvkVoQy3lVu02hdZ6FgqbBg.roa
Signing time: Thu 16 Jan 2025 19:15:06 +0000
ROA not before: Thu 16 Jan 2025 19:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213568
IP address blocks: 185.176.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:8a:69:17:05:d2:e5:56:51:d6:24:04:55:46:c8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 16 19:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32f4071ef915a10cb7955bb4da1759e8582a6c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:03:33:e4:f0:a2:32:ad:14:c2:c9:e3:51:
99:d4:05:42:07:32:02:ef:ab:98:ea:8c:20:e4:3e:
88:87:73:34:ba:18:1f:df:fa:28:ee:8e:39:f5:54:
2b:a1:5a:d8:ac:5e:f7:a7:a7:9f:fb:54:42:e9:74:
20:b4:4f:a2:39:86:08:c1:dc:7f:69:ab:85:73:e2:
53:d2:b2:e8:37:09:fc:31:c4:de:0f:7e:7f:f0:c8:
71:fb:eb:9d:77:9e:6c:9b:5a:a5:28:16:ae:2f:e0:
fd:79:5b:11:1c:f7:0d:3e:fd:38:bb:f1:42:41:0d:
1b:a8:56:23:15:40:a7:91:29:03:ec:de:81:e8:6b:
9b:d9:ec:c2:30:9e:cd:1c:19:02:a3:d5:86:5b:05:
e6:e4:87:51:31:28:a5:2d:6b:97:a0:e5:6a:a3:dd:
7a:d9:60:9b:47:09:6d:99:a3:31:11:b8:52:1e:b5:
f6:50:b5:24:f1:11:61:77:bf:2a:f7:ba:f4:44:46:
a3:0e:b5:5d:c0:0e:65:a4:04:2b:fc:ad:5a:00:fd:
13:27:7a:1e:72:33:3c:2a:e4:0a:3f:3b:73:d1:28:
7f:51:bf:46:bf:e2:57:bf:6a:55:d2:90:13:ed:1b:
15:ae:be:18:28:01:80:8d:46:df:91:8d:6a:7a:cb:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:07:1E:F9:15:A1:0C:B7:95:5B:B4:DA:17:59:E8:58:2A:6C:18
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MvQHHvkVoQy3lVu02hdZ6FgqbBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.94.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5b:79:17:f6:0e:e5:f8:95:76:ce:20:ec:34:99:d5:e0:4e:
96:b4:ac:23:89:15:7d:90:33:c6:fb:86:25:00:07:6b:20:52:
3f:9f:59:c6:4c:56:c8:07:92:41:0d:17:c5:3e:15:bc:73:31:
8b:b0:b7:e9:72:a3:90:cc:44:61:04:d7:9c:6c:96:90:eb:95:
69:ac:1f:24:88:07:d0:fc:70:68:42:d1:00:26:d8:a5:56:cc:
8b:55:74:73:cd:18:69:76:e8:be:87:57:d1:23:36:04:5e:41:
b4:f8:3e:19:ff:7d:96:fd:4e:39:3c:90:2d:c3:73:a1:a9:bd:
c9:ab:3e:b6:6d:88:3f:e2:5a:3f:55:ac:01:51:bc:b8:c1:95:
25:e7:2c:8d:41:1c:6b:94:25:66:44:54:6c:2d:2e:c3:18:1c:
e0:a9:b5:53:f5:87:03:d7:71:f8:c4:d1:74:bc:ad:2e:d3:d1:
fc:f8:81:04:ce:c7:28:c9:3c:b5:aa:44:5d:ef:12:38:ad:0e:
c9:20:24:f4:c6:f4:d5:a9:12:b1:2d:e9:5d:dc:b8:a1:98:bc:
6b:35:ab:f9:b2:29:1c:25:89:27:8c:03:3b:47:79:cc:0c:a6:
41:b4:90:6b:3a:c0:0e:44:6d:c5:b9:e8:d1:7b:ee:85:b3:51:
b9:ad:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:34 2025 by rpki-client