Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MHrV2QuiKO6Lk3H4lqbklsyxSFM.roa
File: MHrV2QuiKO6Lk3H4lqbklsyxSFM.roa (raw, json)
Hash identifier: dWcqUtDhpnBYbjfDmc/6tcFQAOYXSxGGcixeXKk1aZM=
Subject key identifier: 30:7A:D5:D9:0B:A2:28:EE:8B:93:71:F8:96:A6:E4:96:CC:B1:48:53
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0A1D37BB
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MHrV2QuiKO6Lk3H4lqbklsyxSFM.roa
Signing time: Wed 04 May 2022 20:32:06 +0000
ROA not before: Wed 04 May 2022 20:32:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169686971 (0xa1d37bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: May 4 20:32:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=307ad5d90ba228ee8b9371f896a6e496ccb14853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:e6:ee:98:ea:ed:5e:98:73:b9:fa:a3:b8:
0c:03:d0:ea:79:80:09:03:7b:96:a0:fa:22:64:b2:
47:7b:95:1a:2b:64:4a:ba:f2:4b:86:d2:d5:c7:57:
96:b3:fb:8a:da:c7:65:56:92:ac:54:e4:ba:61:93:
e7:3f:a8:85:da:19:32:bb:02:86:ff:62:ce:d0:3e:
c1:b2:e0:d5:8d:a3:7b:13:dd:a6:a5:a0:0e:cb:0f:
2f:9a:22:56:46:dd:02:53:bf:ab:c6:63:ba:ce:39:
f9:a5:bf:66:f8:95:cc:18:30:b6:22:03:b7:34:9a:
70:8f:0a:41:4b:ce:7a:e0:cc:23:f9:c4:b4:4a:d1:
2f:ea:ea:32:ad:33:9b:2a:f7:5a:72:59:5e:8c:4f:
13:13:c6:63:33:4f:67:bd:1b:d4:34:39:30:f4:d9:
a2:a9:c1:5d:8e:7d:31:f0:10:06:0b:04:ac:5e:7e:
eb:e4:b4:aa:a0:97:57:e8:48:e9:15:be:7a:47:02:
f2:be:f6:57:d3:b5:1a:db:ee:f2:e6:81:e7:ad:1e:
9c:bf:78:a5:84:0a:e9:90:a7:ac:24:8a:07:5a:8a:
98:d1:ff:0d:97:86:c9:f0:7f:c0:6b:2d:a7:d6:4e:
28:d9:d8:0c:9b:e5:78:7d:a9:7f:ca:8a:61:6f:50:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:D5:D9:0B:A2:28:EE:8B:93:71:F8:96:A6:E4:96:CC:B1:48:53
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MHrV2QuiKO6Lk3H4lqbklsyxSFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2f:3c:8e:5d:4f:05:3a:64:c2:c4:f6:92:69:4b:cf:c4:84:
15:cd:71:5d:30:61:d6:42:e5:a6:7c:fc:f2:4f:2b:5a:ba:12:
9c:8a:10:18:db:a2:9e:33:a6:0e:23:c4:6c:c2:43:5b:14:3d:
8d:5c:f5:f8:19:6a:83:16:47:f9:77:fc:21:8b:91:27:76:5a:
2b:80:58:1f:54:ff:4a:b2:23:f3:5b:2d:0e:06:c5:96:78:ab:
e0:a1:fd:3c:9b:58:4b:b5:1c:80:68:67:24:88:e6:39:64:6a:
d9:60:ec:96:fb:84:55:18:f1:f6:f0:e3:a9:b2:12:0e:78:3b:
e1:fb:98:78:8b:1d:ad:fa:b2:d2:7c:f6:f2:f0:de:b6:02:06:
b6:c9:71:f5:11:1b:35:b7:71:ae:7c:b6:9d:12:81:54:2e:89:
b4:6c:ae:b5:f1:36:4c:9c:96:47:75:85:5c:4a:99:2e:71:ff:
45:ea:d4:48:42:05:6c:fb:08:29:bd:72:84:cc:a0:cb:18:8e:
de:59:40:91:2a:1e:09:05:f5:bf:cf:10:d8:cc:f1:6b:ae:04:
d1:63:a2:d3:d7:0d:b1:33:b6:d2:eb:06:54:c2:cf:a2:68:75:
fb:b1:54:cb:64:50:95:5f:8f:62:41:6e:c5:3c:55:b9:db:a1:
d4:9d:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org