Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/mQxshrThZB5ugGjNVKF8mCIOOlY.roa
File: mQxshrThZB5ugGjNVKF8mCIOOlY.roa (raw, json)
Hash identifier: X9Z0pV8yzVDkq3jYw62I88ytqRnm2q+q1dme2PdUxZ4=
Subject key identifier: 99:0C:6C:86:B4:E1:64:1E:6E:80:68:CD:54:A1:7C:98:22:0E:3A:56
Certificate issuer: /CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Certificate serial: 01904AD2E86878E1037D79A93D60AF1D381C
Authority key identifier: 93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/mQxshrThZB5ugGjNVKF8mCIOOlY.roa
Signing time: Mon 24 Jun 2024 15:17:34 +0000
ROA not before: Mon 24 Jun 2024 15:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57928
IP address blocks: 185.49.120.0/22 maxlen: 24
2a01:4fe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:d2:e8:68:78:e1:03:7d:79:a9:3d:60:af:1d:38:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Validity
Not Before: Jun 24 15:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=990c6c86b4e1641e6e8068cd54a17c98220e3a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:73:e2:f6:51:69:64:53:bb:38:e2:eb:20:
9a:e0:01:aa:c1:e5:23:e0:1a:d9:fa:31:2a:63:4c:
60:94:3f:60:f2:1d:18:0d:f8:6d:0a:95:0e:64:2c:
08:10:3f:7a:0c:0e:40:c9:dc:f2:b2:7c:b5:f1:af:
a4:85:3b:d0:62:3e:74:5a:00:aa:08:4e:df:26:34:
79:5f:8c:26:cb:ea:d0:96:52:cc:96:f3:36:67:8e:
0a:0e:f5:b5:8f:bd:27:13:9f:e7:57:aa:cd:2c:4b:
7a:60:d3:ab:09:c4:1e:85:85:dd:54:9c:c7:f3:09:
bb:41:6a:99:86:bf:0e:a8:1d:66:15:f0:c4:0a:7f:
68:9b:15:8b:66:ac:ca:2f:d2:3b:f4:de:dd:c2:1d:
19:2f:45:a8:e5:bd:75:27:ae:02:f1:49:23:1b:78:
0d:69:35:69:df:89:23:ed:9c:ac:10:2d:8e:56:bf:
ae:02:6c:92:c2:40:ad:b9:9d:7d:cc:bb:fd:e9:4f:
84:06:e5:90:66:05:82:b5:28:95:cd:df:a8:89:7d:
ae:6a:6b:a2:43:58:de:22:aa:61:19:3e:76:7e:f2:
80:ad:37:95:e3:89:1f:64:1b:3c:4a:6e:87:9f:e7:
59:05:23:d7:e7:eb:7d:1f:56:0f:83:b3:48:fb:f1:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:6C:86:B4:E1:64:1E:6E:80:68:CD:54:A1:7C:98:22:0E:3A:56
X509v3 Authority Key Identifier:
keyid:93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/mQxshrThZB5ugGjNVKF8mCIOOlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.120.0/22
IPv6:
2a01:4fe0::/32
Signature Algorithm: sha256WithRSAEncryption
73:ac:38:ec:2a:f7:e2:c1:fa:68:82:6a:f7:ef:7f:8e:13:1b:
77:33:85:4f:b7:27:16:5e:81:01:52:dd:53:44:72:79:59:95:
7d:c5:fb:e3:0c:5b:59:91:0c:87:fc:f2:77:f3:cd:31:72:9a:
68:84:50:60:b0:7f:af:f0:53:4d:8b:96:4e:74:47:3c:65:78:
21:61:af:8c:c3:97:7b:a4:0d:1f:ec:c0:0b:eb:a2:c5:72:1d:
12:6d:6e:42:42:12:44:17:e7:ba:66:73:25:b7:14:02:8d:01:
29:af:5e:c0:f1:68:a7:94:9a:9c:9d:b6:85:f2:4e:e9:77:9c:
59:0d:9b:f1:21:1a:2c:c4:0b:00:e2:e0:56:60:c1:68:e0:c7:
64:9c:cb:17:e2:17:b2:ab:37:5a:73:f3:5a:8f:74:48:2f:9c:
e3:2a:07:59:e3:f7:98:e4:17:63:fc:99:0b:fb:11:57:45:dd:
af:7d:8a:a9:72:53:30:2c:c9:4f:0e:c2:ef:fa:df:3b:ae:27:
21:0f:2b:22:72:fd:46:ba:a8:5f:21:a7:4d:7c:c6:a9:4e:e7:
8d:a4:59:df:da:bd:a7:f1:a3:fe:77:2a:a6:89:cf:9c:dc:2b:
00:40:1d:67:c0:57:b3:ed:2a:cc:d0:70:85:e1:a5:23:6d:1e:
e0:ae:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:28 2025 by rpki-client