Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/24_mmtOlkG05yQ7mb26MLLzNTPk.roa
File: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (raw, json)
Hash identifier: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=
Subject key identifier: DB:8F:E6:9A:D3:A5:90:6D:39:C9:0E:E6:6F:6E:8C:2C:BC:CD:4C:F9
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019424B331E1A15ED673B909B8D3E17E41EC
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/24_mmtOlkG05yQ7mb26MLLzNTPk.roa
Signing time: Thu 02 Jan 2025 01:48:30 +0000
ROA not before: Thu 02 Jan 2025 01:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60132
IP address blocks: 185.56.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:31:e1:a1:5e:d6:73:b9:09:b8:d3:e1:7e:41:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jan 2 01:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db8fe69ad3a5906d39c90ee66f6e8c2cbccd4cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:d2:f2:5d:f3:eb:79:9a:f4:f2:67:e5:5a:
69:81:2f:52:64:db:e5:40:64:e0:e5:e3:1a:b7:62:
9e:57:85:ec:54:be:92:18:7f:c3:e7:f8:d3:07:74:
d9:fc:28:01:6a:a6:75:08:e5:a1:b5:be:8c:6b:db:
15:bd:70:d1:58:4f:a3:4e:c1:a2:58:01:0c:c9:e7:
d7:6f:f2:3a:b8:a2:7f:64:b6:b5:2d:d6:89:35:95:
bc:a3:65:14:c0:56:55:e7:76:89:15:30:1a:69:a1:
bf:e8:8a:69:22:82:21:0d:16:07:22:d4:30:83:b2:
72:ac:fb:7d:2c:61:7a:92:58:4f:2f:60:69:35:db:
77:87:29:9c:ae:bd:01:f9:fb:87:0a:85:d3:b9:5e:
a8:32:27:f2:06:2a:bd:73:e4:7d:2d:9d:9e:8a:0a:
71:34:24:96:20:74:fe:9e:42:01:08:36:71:c6:23:
7b:e8:03:25:00:e3:56:a7:17:88:56:0d:9b:83:f3:
83:d0:64:82:b6:70:41:9a:16:21:3b:b4:b3:09:a9:
a5:16:54:fd:e0:d8:1f:98:e7:8a:0e:72:aa:d7:a6:
62:7b:81:b0:d9:d0:0c:8e:9c:6e:04:6e:1b:60:df:
fa:1b:16:c2:d9:dd:92:36:a2:4d:c4:34:0a:c8:f2:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8F:E6:9A:D3:A5:90:6D:39:C9:0E:E6:6F:6E:8C:2C:BC:CD:4C:F9
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/24_mmtOlkG05yQ7mb26MLLzNTPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.153.0/24
Signature Algorithm: sha256WithRSAEncryption
36:96:fe:4a:8f:35:ac:93:eb:fe:66:40:7d:70:9a:56:73:6e:
1d:fa:4b:16:19:f2:4c:37:4c:e7:ac:ae:87:f9:ce:db:d4:11:
66:45:1b:10:23:73:79:43:08:fd:c6:c0:af:07:8a:fd:c6:61:
e6:70:7e:df:9e:18:03:4d:bd:3b:9d:19:d8:1f:69:07:37:cd:
4e:8a:e0:15:14:d5:0c:4b:ba:0e:e4:af:a2:e7:b5:f5:81:07:
ac:f0:55:bb:0a:22:2f:15:be:a1:ee:17:b1:b4:3d:2d:49:1b:
48:e5:f8:9b:ed:e1:e7:0c:13:a5:6e:12:08:de:f3:56:84:04:
fb:b6:78:63:86:13:4b:0b:18:51:9a:52:2d:d9:8f:d0:88:c0:
a1:23:8b:88:de:3a:80:94:1f:cc:d5:16:ed:bb:a6:62:e7:29:
33:23:ae:ac:1e:8b:9a:a6:18:e8:40:12:39:ce:1d:85:d5:1c:
98:e0:78:f4:b7:8c:bb:a1:de:54:a1:24:f2:d1:a1:c3:20:bd:
ef:44:1e:54:6b:e9:3b:86:10:ac:66:41:26:00:0c:fc:bd:ea:
bb:bd:11:84:a9:d3:86:c5:ca:c4:47:97:32:f4:e2:ae:b5:d8:
88:0b:2d:49:02:57:da:0e:da:6a:95:eb:86:40:7b:16:67:89:
df:6f:cf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net