Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/mslAiLHq2RhVoMBrlDZ7StvNRw0.roa
File: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (raw, json)
Hash identifier: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=
Subject key identifier: 9A:C9:40:88:B1:EA:D9:18:55:A0:C0:6B:94:36:7B:4A:DB:CD:47:0D
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 019420D6197FAECFA2B077CAD2746857A8F0
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/mslAiLHq2RhVoMBrlDZ7StvNRw0.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60946
IP address blocks: 159.146.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:19:7f:ae:cf:a2:b0:77:ca:d2:74:68:57:a8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ac94088b1ead91855a0c06b94367b4adbcd470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:18:6e:75:63:20:01:2b:7a:97:3b:31:86:
9c:46:56:3c:82:11:46:de:2c:d7:79:8d:b5:6e:87:
09:ed:c1:63:95:ba:ec:7e:a7:b6:05:f1:c2:e7:e2:
4c:62:d0:f1:cb:c3:8e:76:9b:06:de:aa:4d:69:54:
d6:d1:6b:0f:71:a6:4c:e6:8b:06:3a:b4:d6:f2:21:
88:1b:68:77:41:86:95:1f:90:6d:25:13:5f:ce:fe:
1d:a9:72:12:62:c8:6a:b1:46:37:14:a5:3e:0a:9d:
ae:a1:cb:d3:e1:60:ed:41:0d:8b:a8:00:5c:fa:74:
46:09:08:74:f6:06:a8:57:5f:ee:36:9b:e5:5d:a0:
11:9c:a6:80:f5:fb:a4:f3:67:d0:ed:72:5c:2c:60:
e5:a6:bb:d5:9b:b9:d9:11:cd:0c:83:57:6a:eb:ec:
dc:27:1c:2f:14:47:ee:a5:29:1c:88:73:71:17:b9:
df:05:14:02:37:45:25:85:18:35:15:f2:07:5b:6a:
a7:65:5a:d0:95:f3:ba:96:cc:92:c2:df:36:fa:ce:
a0:41:54:bf:40:91:46:ec:3e:43:a4:6c:38:1f:a1:
a9:0c:74:8d:10:79:68:ff:d7:e6:2b:4c:3f:1a:7e:
bc:95:9f:7d:ac:f3:64:2d:36:5b:c0:91:1f:49:fa:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C9:40:88:B1:EA:D9:18:55:A0:C0:6B:94:36:7B:4A:DB:CD:47:0D
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/mslAiLHq2RhVoMBrlDZ7StvNRw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.146.124.0/24
Signature Algorithm: sha256WithRSAEncryption
62:64:11:b4:16:ea:dd:c5:b1:ca:a4:f6:fc:45:cc:26:d6:d3:
46:e5:aa:4b:bf:0e:9c:66:6e:00:aa:4c:72:ea:dc:89:ab:bc:
72:ad:4c:22:3f:f1:e8:25:67:f2:f0:1d:a3:43:a1:e8:5a:4f:
1f:b7:2d:c6:1f:5b:7b:55:03:4b:b4:86:25:d8:a1:40:d2:c3:
ec:fd:c7:07:a8:d8:ef:46:c5:51:e7:9b:79:36:49:19:f3:49:
0f:b3:61:b6:44:51:9a:27:fb:5e:5f:fd:b6:de:2c:2a:f1:f7:
86:8e:aa:f9:f8:0b:bf:82:80:2d:7f:ca:84:76:40:46:f3:bd:
a1:fc:41:0d:4b:5f:b5:94:48:aa:7a:7e:3f:7d:a8:24:cc:af:
ad:1c:3a:ab:d0:dd:4e:0e:e1:8d:2b:69:3f:ba:24:d1:36:6c:
e1:0e:30:31:f4:36:cf:46:2a:75:1f:47:73:0f:eb:b8:a0:8a:
c4:76:4c:33:ea:35:5a:89:e7:96:69:a1:55:38:cd:f0:b7:cd:
2c:fc:32:d6:6b:61:c1:10:48:2f:8a:54:a6:15:8d:41:64:1b:
35:c9:91:26:0f:2c:80:19:6e:20:be:5b:d5:49:7b:90:2f:d0:
65:cf:e7:2c:cd:10:c4:89:96:4f:d3:ef:f3:22:8c:2e:27:86:
4a:78:5c:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1hl/rs+isHfK0nRoV6jwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjUwMTAxMDc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWM5NDA4OGIxZWFkOTE4NTVhMGMwNmI5NDM2N2I0YWRiY2Q0NzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nIYbnVjIAErepc7MYacRlY8ghFG
3izXeY21bocJ7cFjlbrsfqe2BfHC5+JMYtDxy8OOdpsG3qpNaVTW0WsPcaZM5osG
OrTW8iGIG2h3QYaVH5BtJRNfzv4dqXISYshqsUY3FKU+Cp2uocvT4WDtQQ2LqABc
+nRGCQh09gaoV1/uNpvlXaARnKaA9fuk82fQ7XJcLGDlprvVm7nZEc0Mg1dq6+zc
JxwvFEfupSkciHNxF7nfBRQCN0UlhRg1FfIHW2qnZVrQlfO6lsySwt82+s6gQVS/
QJFG7D5DpGw4H6GpDHSNEHlo/9fmK0w/Gn68lZ99rPNkLTZbwJEfSfrGVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJrJQIix6tkYVaDAa5Q2e0rbzUcNMB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvbXNsQWlMSHEyUmhWb01CcmxEWjdTdHZOUncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5J8MA0G
CSqGSIb3DQEBCwUAA4IBAQBiZBG0FurdxbHKpPb8Rcwm1tNG5apLvw6cZm4Aqkxy
6tyJq7xyrUwiP/HoJWfy8B2jQ6HoWk8fty3GH1t7VQNLtIYl2KFA0sPs/ccHqNjv
RsVR55t5NkkZ80kPs2G2RFGaJ/teX/223iwq8feGjqr5+Au/goAtf8qEdkBG872h
/EENS1+1lEiqen4/fagkzK+tHDqr0N1ODuGNK2k/uiTRNmzhDjAx9DbPRip1H0dz
D+u4oIrEdkwz6jVaieeWaaFVOM3wt80s/DLWa2HBEEgvilSmFY1BZBs1yZEmDyyA
GW4gvlvVSXuQL9Blz+cszRDEiZZP0+/zIowuJ4ZKeFzd
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net