Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa
File: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (raw, json)
Hash identifier: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=
Subject key identifier: C7:D9:A0:9F:EC:02:50:3F:2B:4F:5B:53:8B:D0:BB:99:BC:8C:02:D2
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0194228DD8BAAE2F2DD0F5CD0A18B9445BE0
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61113
IP address blocks: 185.3.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d8:ba:ae:2f:2d:d0:f5:cd:0a:18:b9:44:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7d9a09fec02503f2b4f5b538bd0bb99bc8c02d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:fd:7a:d2:29:c3:63:bb:4b:4c:55:e4:92:
8e:d4:e5:94:2e:4f:98:d3:68:c4:10:53:60:d8:35:
cb:7b:4e:52:44:60:ac:ca:82:9f:ff:68:6a:4b:06:
2f:fc:b8:bc:73:f2:39:0c:cf:cd:0e:a0:6a:a7:e2:
f4:2b:03:ce:aa:38:1d:c5:9a:ca:09:fe:14:b7:13:
5c:c0:e0:fc:42:16:a2:2d:55:d1:af:90:26:4c:0b:
04:ae:6f:02:13:d3:46:77:78:ed:20:a0:ce:96:e7:
33:a3:3a:93:d6:c1:23:be:b5:6f:82:4e:60:87:62:
99:84:42:63:36:ee:69:63:c0:28:04:ed:7a:53:93:
c2:7d:b4:c3:75:b4:26:d4:bc:0d:d6:a6:0c:c1:73:
bd:5c:32:97:30:d6:ad:0d:bd:99:1f:db:d0:4a:6f:
53:25:d2:d9:a3:6b:17:d7:14:00:cb:ea:31:6a:ca:
66:2d:9f:56:28:e7:cc:e7:54:68:80:ed:0a:f7:c6:
65:dd:be:9a:a5:ce:1a:83:f2:e3:5a:e6:29:b4:1c:
26:f1:a6:61:36:6b:a0:ee:41:65:6d:0f:6e:1a:6e:
d3:01:ad:64:aa:bb:a4:27:1e:b6:cb:cb:1c:16:ce:
33:cb:e1:4a:3e:9a:48:41:c7:bc:07:10:c7:35:1f:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:A0:9F:EC:02:50:3F:2B:4F:5B:53:8B:D0:BB:99:BC:8C:02:D2
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4c:6f:8d:08:9b:a7:91:01:40:e2:d9:3b:ff:d4:77:4a:f9:
5e:68:8c:47:f4:35:fb:b2:66:5c:e4:32:ae:ab:a2:ee:da:32:
62:b7:dc:9e:5d:3c:51:43:d1:28:7d:af:81:f5:11:9b:62:40:
2d:94:a1:69:73:a2:f2:8d:66:22:0f:2c:35:d9:8c:9b:7d:f2:
e9:43:fa:98:c3:85:9c:4a:6d:b2:28:57:00:67:53:50:1d:0f:
52:91:81:01:67:51:89:ee:c0:95:bb:9b:89:8c:92:a3:a6:3e:
4e:b5:d2:9d:1e:02:5b:05:17:34:17:1f:ab:3d:91:6f:a2:e1:
31:f0:90:9f:3c:94:a4:ae:bd:f5:10:7f:1a:9d:1f:74:9f:26:
28:f7:e7:ab:22:ba:92:63:0f:41:c4:73:2c:0b:68:a2:e0:da:
85:49:20:70:a6:44:a3:fa:26:17:89:a4:b7:99:56:32:c4:e8:
9b:79:e5:c9:95:5a:44:f6:d7:bf:ef:72:47:68:4e:3a:c1:a9:
53:bb:fd:16:d7:bb:f7:89:ca:91:ee:a9:54:7b:93:49:f9:f8:
19:51:f0:95:f6:c2:dc:a9:7f:62:58:e9:69:52:c0:1d:87:d6:
f4:aa:43:dc:ed:1e:01:50:cc:f9:ca:e9:45:e2:82:71:19:a0:
18:84:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net