Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MbRguSkl2zOfg0IlzS79tHDWgHg.roa
File: MbRguSkl2zOfg0IlzS79tHDWgHg.roa (raw, json)
Hash identifier: 1wPqo7QwYVG42zUpmnAero8Wbgokz7blPtf6Jn3jqkM=
Subject key identifier: 31:B4:60:B9:29:25:DB:33:9F:83:42:25:CD:2E:FD:B4:70:D6:80:78
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961BEDD152C3E912D2BFE7715C9D9C9C06
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MbRguSkl2zOfg0IlzS79tHDWgHg.roa
Signing time: Wed 09 Apr 2025 19:01:32 +0000
ROA not before: Wed 09 Apr 2025 19:01:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215439
IP address blocks: 94.103.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:ed:d1:52:c3:e9:12:d2:bf:e7:71:5c:9d:9c:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 9 19:01:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31b460b92925db339f834225cd2efdb470d68078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:88:5c:71:da:e9:6e:48:cc:ca:b8:43:7c:
88:51:a4:c9:58:7f:75:f8:c5:a8:db:ae:02:81:71:
b3:01:8d:03:e8:24:fa:1c:cc:77:2f:be:23:c8:c1:
ee:3e:ac:7b:37:fe:80:fb:65:22:f6:83:a1:e2:f7:
f2:de:e3:28:dd:13:8b:b4:e3:9d:f5:75:4c:ee:2e:
7d:5d:5a:54:85:07:5f:46:03:0d:a8:ee:b3:11:6f:
bd:2c:8a:71:77:3c:20:70:96:96:41:4e:83:55:d5:
82:55:97:d5:ee:7a:2d:bc:c3:f5:14:04:68:39:eb:
05:ce:d9:d4:46:6d:6c:01:e9:c6:09:04:73:97:ab:
7e:5f:84:5e:ff:0d:70:92:e5:54:a3:2c:38:d0:cc:
9f:a3:a7:26:5f:b2:e0:74:84:8b:a4:7c:a5:24:59:
a6:c7:a4:20:16:63:39:12:4b:c5:d4:7f:e2:1f:12:
4f:70:e7:ca:74:a2:82:98:55:2a:59:b9:ed:fc:58:
14:97:b8:5d:0b:b0:49:c3:12:d5:74:06:32:11:19:
f1:d6:fd:1a:29:69:76:83:34:03:1e:25:ba:33:f6:
f3:b3:93:32:97:e0:cd:28:6a:e8:ab:82:69:8d:2b:
40:a8:31:3c:dc:53:bb:fb:b4:30:8a:15:01:fc:01:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:60:B9:29:25:DB:33:9F:83:42:25:CD:2E:FD:B4:70:D6:80:78
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MbRguSkl2zOfg0IlzS79tHDWgHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e2:61:a6:e6:44:7b:55:71:ab:ab:26:a4:40:4c:b9:d3:9d:
91:65:09:ff:97:f3:44:71:a3:87:24:48:1b:f4:73:7b:4b:d7:
da:8c:ca:e5:05:f1:7d:da:6e:dc:cf:4e:65:91:76:5f:fa:64:
2a:01:f6:9f:1a:4d:5e:99:2c:6c:2c:cf:cb:6f:cb:0f:63:e0:
61:e0:d8:c5:8f:35:52:b0:50:6c:c9:79:99:2f:49:63:29:26:
fd:9a:04:fd:b0:11:8e:77:47:17:29:2b:ba:fd:1c:bc:8f:a2:
0e:bf:10:15:3a:95:a5:90:78:f6:37:d9:2d:3e:05:81:d8:e6:
52:22:1b:ec:b5:7a:b2:1d:86:78:cf:e6:ed:94:6f:bd:42:2f:
34:fb:d8:f1:e9:a9:81:bd:ce:20:e8:ba:82:4a:d1:99:7a:e8:
b1:76:89:5f:a3:65:76:3b:8d:74:e7:81:45:a3:df:78:d7:a7:
2c:90:9d:06:0a:c8:7e:64:7b:62:1b:84:3e:7c:4c:d9:63:3d:
f7:24:48:19:b4:65:db:69:fa:74:c9:ef:d4:53:f3:fd:be:19:
1b:58:b5:54:3a:b6:78:bc:81:2e:27:9e:54:25:d9:10:0a:45:
de:a5:1a:3e:9a:38:03:d1:7e:a1:c3:dd:24:fd:ea:49:58:9d:
45:bc:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net