Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/mvWYG3Szrm43KC75LYG12evT6Tw.roa
File: mvWYG3Szrm43KC75LYG12evT6Tw.roa (raw, json)
Hash identifier: 4WFo1aP3if7E+HR8AtlT22AkpYZcaF9KLtyYq1l1dRc=
Subject key identifier: 9A:F5:98:1B:74:B3:AE:6E:37:28:2E:F9:2D:81:B5:D9:EB:D3:E9:3C
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 0192BB860B0A9DA0F024E9DF61C0CD9A6C37
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/mvWYG3Szrm43KC75LYG12evT6Tw.roa
Signing time: Wed 23 Oct 2024 22:36:16 +0000
ROA not before: Wed 23 Oct 2024 22:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15457
IP address blocks: 62.169.72.0/22 maxlen: 22
62.169.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bb:86:0b:0a:9d:a0:f0:24:e9:df:61:c0:cd:9a:6c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Oct 23 22:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9af5981b74b3ae6e37282ef92d81b5d9ebd3e93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:00:3f:3e:81:bd:dd:08:cf:15:4c:f6:44:
39:00:79:00:53:1d:32:44:60:0a:18:ad:38:83:33:
d6:db:0d:d8:08:a7:03:49:42:6b:83:78:dd:91:a0:
e3:f7:8b:a3:7f:f2:29:b3:66:1f:af:44:fc:4d:71:
e4:73:f9:de:4a:c8:9b:97:90:a6:0b:ec:97:45:55:
37:00:a5:fb:90:7e:34:5f:85:7f:b3:9c:7f:b8:b1:
90:04:27:47:07:64:f4:9f:71:bd:35:bc:03:98:84:
53:90:cd:ea:10:53:22:1f:52:e1:57:50:34:14:7a:
9a:60:a5:8c:47:42:82:84:47:52:00:a7:ce:59:77:
da:90:ba:09:58:e6:60:27:2b:81:83:44:6b:78:18:
e0:21:e6:3e:dd:4f:3e:40:cf:21:54:95:b1:6f:25:
ec:d7:a1:58:28:78:21:4d:f0:ac:eb:1c:f0:2c:90:
3d:d5:0c:ce:00:4e:d2:d7:28:d8:26:ad:8a:8a:ac:
77:07:dd:45:2e:c0:74:36:29:1b:89:23:d8:77:17:
d8:47:b7:7d:4a:b4:c7:87:80:b2:1a:f7:ab:71:e0:
c3:05:6a:ae:ba:6d:77:e6:45:7b:08:8d:92:88:ae:
7e:51:fc:70:a4:9b:60:b3:6b:55:9b:f6:bb:2c:e6:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:98:1B:74:B3:AE:6E:37:28:2E:F9:2D:81:B5:D9:EB:D3:E9:3C
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/mvWYG3Szrm43KC75LYG12evT6Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.72.0/22
62.169.80.0/22
Signature Algorithm: sha256WithRSAEncryption
93:1c:69:d2:dc:1d:58:8e:d7:4a:47:bb:bc:19:fb:38:7f:e7:
dc:86:de:2e:56:b0:de:db:01:e3:ba:1f:4d:8d:d9:58:38:eb:
5d:23:09:1a:40:93:44:60:d0:7e:5e:12:6f:75:25:f2:95:5a:
3b:0b:df:04:23:07:89:b2:be:e1:0f:36:65:7a:ac:e8:07:34:
ca:88:e0:23:e5:89:5f:33:15:52:1d:f5:5a:82:a7:1e:52:88:
96:82:8c:12:8d:7b:ec:2c:56:a4:f1:52:b9:1e:d7:b2:3d:05:
89:aa:8e:db:e1:a6:c8:87:a6:7e:4b:21:25:d2:c1:76:42:a1:
27:ae:de:57:53:9b:bb:b1:d9:c0:8a:56:68:e1:b7:33:30:1c:
1b:c8:f8:b9:2c:f6:78:7f:a2:2c:51:a5:1c:c7:48:9c:10:b9:
53:43:e6:50:23:2b:0b:79:45:cd:6a:73:a6:f6:79:02:69:0d:
a5:21:0b:f3:65:8c:54:82:ed:08:1b:e7:e4:5f:ea:4d:98:ca:
6d:97:4b:02:87:f0:9d:0b:96:03:42:e7:85:b9:ea:0e:23:e6:
08:54:65:d1:ba:d7:d8:84:6d:23:de:05:3f:7e:1b:f6:0e:e3:
d4:41:5c:9b:ec:59:57:c9:76:cc:e2:33:1a:80:da:65:40:be:
56:56:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:57 2024 by rpki-client on console.sobornost.net