Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/mlswz8Ncs32ae7C2It5n-o0yiHo.roa
File: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (raw, json)
Hash identifier: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=
Subject key identifier: 9A:5B:30:CF:C3:5C:B3:7D:9A:7B:B0:B6:22:DE:67:FA:8D:32:88:7A
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 0194228E1886AF7057E3F5EF9FCB4328D53F
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/mlswz8Ncs32ae7C2It5n-o0yiHo.roa
Signing time: Wed 01 Jan 2025 15:48:45 +0000
ROA not before: Wed 01 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57255
IP address blocks: 45.88.4.0/24 maxlen: 24
91.230.156.0/24 maxlen: 24
2a0e:f300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:18:86:af:70:57:e3:f5:ef:9f:cb:43:28:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a5b30cfc35cb37d9a7bb0b622de67fa8d32887a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:ad:9b:af:ac:44:ac:a8:5a:d6:58:3f:32:
a0:c5:31:e9:8e:7a:be:cc:4e:5e:54:87:1c:c9:a1:
7d:c6:cb:95:e9:04:54:f5:69:7a:bf:f3:02:f8:54:
a8:ba:4d:dc:74:c1:a3:51:ab:32:5c:80:0f:5a:52:
e5:fd:64:ab:38:bc:4d:2f:f6:f8:ed:75:72:80:48:
f9:5a:20:ee:2e:02:80:76:65:ff:27:7b:30:41:f9:
c8:4c:a5:59:8f:61:af:af:ce:ac:46:2b:a9:0b:c8:
40:15:9b:e2:7a:0e:4d:bd:e5:31:3c:a5:c2:40:fd:
62:66:07:f9:09:da:be:a1:b1:e6:94:82:3b:80:66:
c6:5a:11:bc:fb:65:cb:d4:f1:9d:8d:07:08:43:50:
b2:c2:6d:7c:26:95:8e:58:12:20:4e:01:fd:56:aa:
f1:c5:98:2c:7e:42:4d:09:f6:cd:93:50:ce:53:5c:
ea:5c:9f:cf:ab:63:29:b2:d2:ac:b9:c3:6b:11:34:
ba:dd:53:39:8c:7b:60:ed:15:58:02:4d:8a:bf:27:
88:5d:69:a9:2d:0b:f2:12:57:e1:fe:47:ba:fa:bb:
79:24:77:c3:cb:51:46:50:65:ea:34:2d:6b:0a:2e:
4f:77:c7:fa:d6:e7:60:7e:d2:dd:ce:eb:f9:98:d3:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5B:30:CF:C3:5C:B3:7D:9A:7B:B0:B6:22:DE:67:FA:8D:32:88:7A
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/mlswz8Ncs32ae7C2It5n-o0yiHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.4.0/24
91.230.156.0/24
IPv6:
2a0e:f300::/29
Signature Algorithm: sha256WithRSAEncryption
7e:74:0d:f2:b6:d7:f4:76:b4:6c:7f:3f:22:88:c1:0a:2e:b3:
d8:1a:5a:bb:53:68:04:80:75:4f:fb:d5:89:bb:50:84:4f:b6:
90:46:3a:8e:58:83:94:05:8b:20:eb:f2:98:5b:39:7c:18:6b:
d1:9e:62:09:97:27:a8:fd:98:51:71:2e:61:f8:00:ff:c6:da:
18:35:1b:be:19:0b:c5:71:99:18:e6:87:ec:f5:6b:70:05:9e:
05:39:69:0c:02:73:e0:96:8f:d5:c7:da:e6:31:03:63:10:1f:
f2:a1:e4:2c:d1:6d:1d:5e:ef:2e:42:64:e0:64:20:a9:4c:a0:
ea:f3:c8:f4:f0:ba:1b:40:8e:84:eb:b6:c5:74:14:2a:68:d7:
e2:c1:99:93:d7:6d:e3:94:85:b8:6d:4c:b3:ae:23:f4:8c:aa:
09:2f:a2:d6:49:a0:12:fb:16:f0:29:bf:5f:a6:42:9f:c1:a5:
0b:26:9e:5d:ad:47:70:30:53:c0:73:2b:25:ab:5f:42:5c:16:
1b:63:2d:9c:f7:5e:10:f0:c1:a4:d7:9b:77:c2:25:6c:fe:8c:
52:f2:4a:2e:0b:f6:91:56:38:fe:54:95:bf:d1:41:8d:6a:23:
8e:69:7d:4d:fe:a6:fe:1e:b0:30:5a:4a:4e:e3:30:38:2c:02:
0e:8d:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net