Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/Mhgc93WZPs8h2F0GXXavUjpjHpk.roa
File: Mhgc93WZPs8h2F0GXXavUjpjHpk.roa (raw, json)
Hash identifier: 41oh20AgX9hW8RA2rWP41aGKJmWYumZW5nKnxdpW850=
Subject key identifier: 32:18:1C:F7:75:99:3E:CF:21:D8:5D:06:5D:76:AF:52:3A:63:1E:99
Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial: 01856E0B1C4CD5F82B74BEAA50C9B70A4DCF
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/Mhgc93WZPs8h2F0GXXavUjpjHpk.roa
Signing time: Sun 01 Jan 2023 15:54:59 +0000
ROA not before: Sun 01 Jan 2023 15:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33943
IP address blocks: 84.19.64.0/19 maxlen: 19
2a0a:8380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:1c:4c:d5:f8:2b:74:be:aa:50:c9:b7:0a:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Validity
Not Before: Jan 1 15:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32181cf775993ecf21d85d065d76af523a631e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:b6:df:01:7e:be:11:25:14:77:3b:16:0d:
66:59:79:0d:8c:27:ca:e8:40:24:c9:f8:1b:4d:d0:
5e:ac:4d:27:55:7b:81:48:e1:a2:a5:c7:84:0c:43:
e2:33:11:55:7d:9d:dc:42:ce:43:db:ce:f5:46:cc:
ef:33:05:8b:50:9b:14:28:97:57:29:0e:75:12:39:
1b:ef:81:cb:62:ce:cf:44:76:2d:b4:b5:c2:f5:54:
62:65:f2:f9:5c:c1:c3:fd:b7:c8:83:83:5d:20:4e:
49:43:53:b0:0c:93:83:72:17:5e:8b:fd:cc:94:23:
7d:8e:e5:41:9a:a0:74:ce:40:10:57:ce:8e:ef:98:
9a:ff:64:e4:9c:b9:00:e1:2c:4b:14:11:d2:56:39:
91:9f:36:c9:c1:14:92:d4:23:28:34:b1:ad:0b:e8:
13:45:b0:f9:78:4b:36:5f:5a:36:1a:a2:de:eb:02:
c3:ea:7a:2a:c5:d8:cd:f1:7d:8c:b2:fc:33:19:16:
5e:30:16:35:37:9d:4b:40:41:7d:09:c4:8a:8a:37:
c1:58:90:85:fd:c2:83:0f:d9:47:b7:4e:0e:ee:d8:
d9:9c:2f:b2:12:e3:b8:d9:26:b7:47:94:1c:ce:dd:
79:e3:49:2e:ed:99:48:8b:ec:0c:78:50:a0:14:aa:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:1C:F7:75:99:3E:CF:21:D8:5D:06:5D:76:AF:52:3A:63:1E:99
X509v3 Authority Key Identifier:
keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/Mhgc93WZPs8h2F0GXXavUjpjHpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.64.0/19
IPv6:
2a0a:8380::/29
Signature Algorithm: sha256WithRSAEncryption
5d:cf:51:09:9b:69:9e:7b:6f:b5:88:98:34:52:e5:8f:13:1d:
76:97:c4:1c:48:a9:4b:9d:4a:56:f2:7c:b8:65:09:45:c8:f2:
83:4c:f6:de:e4:89:6a:43:0f:52:32:56:5b:65:16:01:ec:11:
f1:1d:e4:dc:26:32:23:91:5c:c6:cb:12:f3:90:6c:91:b4:09:
16:c0:27:54:92:93:d3:01:b5:a0:ea:88:ac:b7:6a:45:03:45:
52:cf:78:1c:d9:92:d1:b7:6c:70:e5:7a:96:e4:32:10:d3:47:
50:0f:85:2e:dd:b6:19:e7:20:c4:84:93:c8:f3:38:8c:2b:9e:
fc:90:b5:f8:c7:c8:00:d8:ad:94:f6:d9:e3:26:4a:8f:47:ed:
d4:3d:21:0f:ce:48:f9:d9:f4:2e:1e:90:7e:5c:dd:8f:fd:d0:
48:9d:f0:7d:32:ae:81:6c:4c:be:c9:aa:5e:8d:d8:bb:a6:cd:
01:b6:ef:6e:d0:91:b6:99:07:22:90:b9:e1:7e:62:71:86:3c:
fe:01:61:cf:aa:7b:b6:28:44:21:8c:b1:53:bc:65:b3:11:c8:
94:cc:65:03:6e:28:f0:d7:ef:72:c8:c1:37:e0:37:44:db:a5:
13:77:f7:c0:72:b2:63:cb:27:b6:9a:c4:5e:9c:25:6d:ff:ae:
3a:8e:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:42 2025 by rpki-client