Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/mh-ONtUS47UArhvvP39W8pcq56g.roa
File: mh-ONtUS47UArhvvP39W8pcq56g.roa (raw, json)
Hash identifier: j9SUcEVdvW5MWPOk4jmX4Ipmlx1SrBIjpyPTosAgwoo=
Subject key identifier: 9A:1F:8E:36:D5:12:E3:B5:00:AE:1B:EF:3F:7F:56:F2:97:2A:E7:A8
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 01941FFA763F67DA735AD58F2307C089ED18
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/mh-ONtUS47UArhvvP39W8pcq56g.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.120.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:3f:67:da:73:5a:d5:8f:23:07:c0:89:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a1f8e36d512e3b500ae1bef3f7f56f2972ae7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:ef:05:a7:c2:db:63:ef:35:4f:0c:d9:98:
03:8b:6a:c2:42:04:45:02:e4:3d:41:cf:a7:81:35:
4e:2a:e8:a2:54:33:42:77:a6:94:a8:58:16:be:91:
e7:3e:f0:53:9c:44:89:96:10:83:18:89:a1:e1:e1:
16:da:b9:0d:f2:fa:16:8c:16:f1:ab:45:e1:4b:02:
85:7a:1a:69:a7:71:aa:be:e9:ea:02:d1:da:2f:09:
b4:ab:1d:11:d9:5c:e7:e5:bd:e0:5e:46:52:fb:07:
6f:4a:be:5f:62:24:f7:6b:ba:15:22:63:53:a0:c9:
d2:d3:82:58:85:29:9e:4b:6d:d4:29:56:f2:c5:e4:
15:84:10:3c:f6:dd:61:39:17:65:bd:4c:23:27:bd:
92:55:d2:9c:de:1c:a9:f2:4d:3b:d6:99:87:e8:ea:
b2:7c:f2:7f:38:3e:a5:78:d2:df:32:b2:58:49:25:
1a:ed:97:ec:55:a0:44:9b:2b:94:0c:76:e4:e5:c9:
d1:ce:be:26:bd:94:02:65:80:14:8f:ea:37:91:24:
5b:13:ca:07:04:ac:89:f1:56:85:77:c0:78:10:97:
52:67:25:f2:82:90:ad:5f:2e:54:a5:fb:06:e9:b2:
36:83:81:1e:42:a6:2b:d0:51:d9:2b:7a:3b:05:50:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:8E:36:D5:12:E3:B5:00:AE:1B:EF:3F:7F:56:F2:97:2A:E7:A8
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/mh-ONtUS47UArhvvP39W8pcq56g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:9d:10:4b:2b:df:8e:0c:42:4e:d7:c2:89:4a:d9:6e:e2:3e:
7d:df:ab:4d:54:f5:b7:d4:9e:9f:5f:85:58:a2:f6:71:35:10:
23:d6:fc:da:69:02:9f:45:c5:41:86:76:f7:ca:43:92:a5:22:
4b:c2:2f:8e:ac:24:d5:fa:28:38:15:53:eb:5b:36:5c:10:bc:
ad:61:d1:c2:a1:93:3b:9b:24:a7:d9:5c:c4:23:18:96:1b:78:
77:d3:69:92:67:1c:02:99:cf:bf:9b:dd:87:ef:dc:7f:c2:21:
94:75:ce:c8:18:97:0c:34:4a:59:04:9b:1d:e1:31:f1:57:4c:
8a:12:48:42:f1:16:ff:69:cc:b4:59:a1:83:82:4b:ae:f2:9f:
a5:d8:ba:b7:7a:a5:55:be:7f:42:41:91:4e:0e:40:2d:d4:33:
14:c7:94:a9:a9:24:47:37:27:41:8e:e1:d9:72:42:c5:bd:16:
46:4a:29:3a:3e:f8:70:cf:27:3b:03:69:0f:57:86:66:bd:56:
cf:4a:32:34:3a:ac:4d:7c:fb:ab:b0:a7:43:13:5b:80:c9:df:
b2:58:3b:fb:74:77:4b:04:8e:95:b2:05:1e:50:e8:b4:48:3e:
aa:90:26:ce:8e:26:71:5a:d6:24:e5:6a:33:19:45:b3:37:67:
cd:ae:7d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:18 2025 by rpki-client