Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/mpGMS7GoniScCIZ1yKqQ67UbO7w.roa
File: mpGMS7GoniScCIZ1yKqQ67UbO7w.roa (raw, json)
Hash identifier: cqVoNWXcKz6tLYUP/1j67v5QSUFr9HoUVD319m1SaB0=
Subject key identifier: 9A:91:8C:4B:B1:A8:9E:24:9C:08:86:75:C8:AA:90:EB:B5:1B:3B:BC
Certificate issuer: /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial: 019427B3EF30D227F332C6F2C8D04F5F0986
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/mpGMS7GoniScCIZ1yKqQ67UbO7w.roa
Signing time: Thu 02 Jan 2025 15:48:10 +0000
ROA not before: Thu 02 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60534
IP address blocks: 91.225.8.0/22 maxlen: 32
185.54.102.0/24 maxlen: 32
185.135.120.0/22 maxlen: 32
185.244.239.0/24 maxlen: 32
2a06:f3c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ef:30:d2:27:f3:32:c6:f2:c8:d0:4f:5f:09:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
Validity
Not Before: Jan 2 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a918c4bb1a89e249c088675c8aa90ebb51b3bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:7b:00:a9:02:53:07:4f:f2:2c:41:59:3b:
eb:c9:17:f8:35:be:68:7e:82:ff:f5:02:b2:3b:88:
ef:5d:8d:7d:1e:1e:ed:36:a7:b6:c6:b1:14:57:57:
28:6d:b4:ba:92:00:87:51:74:94:38:8f:a0:98:57:
6a:e6:8f:6a:51:f8:55:cf:39:7c:f6:40:50:81:ed:
7f:c9:95:55:89:af:71:0d:61:5f:c9:43:21:9a:7e:
9a:a0:8f:1b:71:6c:9a:06:68:35:04:9c:65:fe:65:
f0:2c:02:71:70:6c:12:0e:20:ed:9a:7b:fb:e9:cd:
22:79:87:17:92:a6:64:72:34:f8:a3:d8:c1:3b:95:
b5:99:dc:ea:98:9a:b7:8f:24:fd:06:9d:67:bc:06:
86:29:78:bd:21:16:2f:72:82:00:9c:e7:93:38:8e:
f4:da:08:ab:68:b0:12:6b:44:c6:2f:75:b8:3c:bd:
f1:3a:79:71:f5:95:d4:ef:ca:ef:de:5e:cf:1b:a3:
41:e8:6b:a9:2a:0f:9c:b2:19:30:37:9e:84:f7:40:
13:ef:04:9c:07:62:02:40:70:5e:99:6a:f3:c4:4d:
3c:f7:15:f4:26:68:88:fe:d9:39:fb:75:ec:d2:9f:
e5:5d:ff:d6:aa:d1:63:41:e6:0a:11:71:76:80:13:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:91:8C:4B:B1:A8:9E:24:9C:08:86:75:C8:AA:90:EB:B5:1B:3B:BC
X509v3 Authority Key Identifier:
keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/mpGMS7GoniScCIZ1yKqQ67UbO7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.8.0/22
185.54.102.0/24
185.135.120.0/22
185.244.239.0/24
IPv6:
2a06:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
27:0e:0b:6a:94:56:a8:68:35:67:9c:06:b1:f7:9a:7c:46:27:
13:3a:4c:74:54:9c:a9:35:b3:73:40:bb:ed:87:be:15:60:8f:
a3:bf:93:7e:ee:96:37:e8:c5:9d:de:e8:99:aa:1b:44:aa:81:
1f:23:45:33:c8:2d:5e:73:86:f6:f0:b2:91:b4:84:e5:fd:1f:
20:69:4e:b5:5c:ee:e1:a5:91:b0:bd:ee:79:19:20:4a:03:82:
2b:1c:f6:d7:13:ea:f7:7b:89:6a:75:32:d3:cd:f3:52:32:8a:
61:18:26:d1:11:28:74:98:58:cc:8c:72:0d:38:71:44:12:7f:
c4:86:19:47:cc:c7:fe:17:2e:5f:5f:8f:55:85:36:55:2a:5d:
b1:47:39:9b:eb:c6:b5:81:31:bb:52:55:0f:f5:28:69:c7:63:
32:18:10:03:50:fe:eb:2a:2a:a3:6d:00:14:69:83:1f:39:d3:
d5:db:b6:27:a8:79:3b:d9:f5:c7:a6:cd:66:a3:d0:ad:59:10:
02:ce:c6:55:b9:f9:86:7f:96:ce:d3:e2:7d:1d:8e:9c:4b:1d:
9d:dd:26:47:52:01:2e:fb:b6:23:71:5a:c7:40:2d:df:1a:c7:
91:86:a6:c0:f4:70:af:5f:73:bc:b9:99:38:f1:e8:51:7a:62:
4d:36:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net