Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MUalWk2JCFdhPE5_2CNoWlvXVAY.roa
File: MUalWk2JCFdhPE5_2CNoWlvXVAY.roa (raw, json)
Hash identifier: JrR9pXAuLgJM80vsMqW1vV8Z9s9CT9dGaR76tiXUzOo=
Subject key identifier: 31:46:A5:5A:4D:89:08:57:61:3C:4E:7F:D8:23:68:5A:5B:D7:54:06
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 444C5A52
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MUalWk2JCFdhPE5_2CNoWlvXVAY.roa
Signing time: Tue 21 Jun 2022 07:23:45 +0000
ROA not before: Tue 21 Jun 2022 07:23:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2859
IP address blocks: 192.121.121.0/24 maxlen: 24
194.68.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145854546 (0x444c5a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 21 07:23:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3146a55a4d890857613c4e7fd823685a5bd75406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:ce:1a:c5:e9:c9:f0:89:ea:57:de:51:4f:
ae:7e:5f:f9:6a:af:19:ac:a6:33:4f:f1:9c:25:39:
82:28:1b:37:2d:9e:5e:60:92:d6:a8:bd:3a:86:80:
56:50:6a:26:bd:d0:56:90:3f:da:2b:e8:34:45:53:
7a:26:7b:b7:28:f5:35:4e:2b:c5:38:e3:17:24:47:
1f:48:bd:4d:d5:b9:57:f1:7b:df:cc:f9:d1:10:dc:
be:dd:d7:2b:cd:86:9b:e8:2f:9a:e9:f0:f4:b5:8a:
0c:b8:e5:39:97:90:5f:3a:68:79:f9:57:41:c0:02:
8f:fd:2a:ce:15:78:ba:14:53:ec:55:fa:2f:85:69:
1a:6f:d6:65:1f:fb:5b:4c:90:3c:7f:f0:7b:87:01:
cb:84:d2:ae:3e:c3:95:61:57:37:69:80:6a:28:49:
0f:a3:68:b3:ff:35:b2:7b:2c:2e:30:c8:62:bd:da:
46:ee:65:ac:96:4d:c3:6a:a2:44:e5:4e:2d:2c:9c:
2c:32:75:c5:0a:04:ca:ab:c7:57:69:3c:f4:d5:9b:
83:2b:1c:44:4c:be:69:ef:df:36:d4:5a:76:9c:50:
02:a2:e9:a8:62:d9:6f:19:4f:67:c7:b9:99:b7:eb:
f1:70:db:f4:3d:26:55:b0:1a:56:c5:84:84:7c:3f:
61:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:46:A5:5A:4D:89:08:57:61:3C:4E:7F:D8:23:68:5A:5B:D7:54:06
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/MUalWk2JCFdhPE5_2CNoWlvXVAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.121.0/24
194.68.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6c:d4:8a:4c:91:87:aa:22:62:f1:2b:a3:2a:61:05:c1:cf:
9f:4a:95:28:5d:56:1d:2d:46:90:be:5c:98:64:a4:86:e0:3c:
c2:ce:f8:74:9d:b0:1b:4a:c3:e6:a4:f8:d0:8c:38:21:99:55:
af:79:90:9f:76:61:4e:c0:84:4c:c3:cd:de:d4:26:62:c1:84:
44:01:2e:d6:47:cf:ec:6c:18:87:31:43:22:28:98:be:c7:21:
8e:4f:bd:3f:a1:77:25:18:92:34:bd:d7:24:87:21:a1:9c:99:
d1:cd:07:18:9d:66:c6:96:02:36:32:fa:a9:0b:94:8f:9f:da:
3a:50:5b:ce:b6:59:7e:b7:19:1c:f9:9c:89:73:bf:94:7e:88:
c9:25:aa:34:d1:bc:b0:5d:9f:07:b7:74:cb:07:bd:b7:f4:50:
f1:e3:11:07:2b:c6:01:75:7a:f6:2d:f7:7d:d9:69:51:c2:7e:
f3:f6:cb:29:e6:c8:89:ab:a3:31:c2:9e:dc:86:c7:a5:18:a0:
88:d3:5f:90:a8:a2:b2:ea:b5:77:ce:48:df:59:dc:22:60:c4:
b7:c3:09:09:ee:b8:f7:70:8c:26:9b:ea:67:df:53:74:00:44:
ab:6f:6d:6d:5c:f8:72:ba:5e:8d:d8:cf:3c:7e:85:12:b4:23:
4a:5a:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:52 2025 by rpki-client