Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa
File: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (raw, json)
Hash identifier: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=
Subject key identifier: 99:07:31:06:46:7B:FA:65:AA:CE:4B:F6:66:D2:EB:34:A0:AC:5D:7C
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 01942521F3C0A3E9773EDFDB9A68B654743A
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8455
IP address blocks: 31.14.45.0/24 maxlen: 24
45.82.104.0/23 maxlen: 23
185.194.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f3:c0:a3:e9:77:3e:df:db:9a:68:b6:54:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99073106467bfa65aace4bf666d2eb34a0ac5d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:b1:63:09:55:1a:f4:b8:43:23:55:7b:bf:
bf:6f:fd:31:53:0b:45:10:e3:a4:64:f5:d2:eb:d5:
31:ac:8a:3a:b7:18:ee:6c:7f:38:dc:7b:c6:32:43:
f0:fe:4f:04:3a:36:4c:e3:d6:ea:77:9d:23:7e:c9:
0e:02:ee:71:34:57:ed:b7:23:14:f0:3f:6d:f3:9e:
7d:71:c8:90:a5:29:0d:80:a5:97:16:86:37:ce:a6:
29:b0:55:ca:87:6e:d7:b6:e1:f8:c1:3d:83:18:b8:
23:62:27:28:52:0a:47:6c:90:29:78:84:ce:24:42:
5c:49:63:00:73:49:3e:ec:59:8d:84:e4:99:2e:27:
6e:95:cc:50:e4:f5:2c:61:54:19:c9:f4:a4:65:6a:
49:13:09:61:d2:cb:c4:62:55:12:ec:d8:5e:3a:e2:
2d:ef:b1:d3:57:3f:0c:d5:48:63:da:dd:03:0f:c5:
ce:49:36:c9:f0:d5:c4:1f:94:24:ee:c1:0e:d3:10:
2c:f3:c5:ad:da:57:b5:38:21:6d:81:98:3a:3f:e0:
cd:8f:35:20:65:3e:f5:e4:46:72:6f:59:60:c3:1a:
15:7d:61:16:b1:a2:72:3e:ea:f8:dc:38:6d:26:a4:
16:c3:3c:cb:2a:a4:78:36:c1:34:34:a2:e6:d0:e4:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:07:31:06:46:7B:FA:65:AA:CE:4B:F6:66:D2:EB:34:A0:AC:5D:7C
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.45.0/24
45.82.104.0/23
185.194.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:46:a5:1a:17:77:6f:b2:1b:8c:c3:55:98:c6:b7:2a:47:76:
b5:6f:f1:15:5a:50:9e:0c:a7:04:3c:46:73:fc:86:1c:57:7c:
f9:b0:68:ad:60:6e:50:d0:e1:59:a4:7e:5b:3a:be:dd:a9:22:
e9:33:27:eb:ec:82:56:d2:19:f4:ad:3b:60:16:9b:8e:52:25:
cc:8e:76:62:bc:6b:24:e4:e5:9b:ff:3e:69:c4:98:ac:5c:a5:
1e:56:ec:38:fb:ba:ac:5b:47:74:2b:f7:f8:2b:17:90:56:3e:
85:59:03:02:90:9a:4d:55:38:25:6c:b3:05:de:6e:47:b5:49:
5f:eb:62:2b:25:e6:d5:3b:f4:d5:dd:38:a1:10:77:4e:b4:d0:
79:12:a0:a3:c5:b6:10:00:80:b4:23:36:55:57:75:f3:ff:f1:
85:ef:65:5e:3d:1c:77:95:05:eb:11:4f:a1:72:67:c6:c9:2a:
73:37:59:60:0c:bb:c7:a1:a7:a2:f5:54:a9:70:3f:db:e3:dc:
36:09:3c:32:a4:4a:49:a4:20:3e:c9:69:6e:a1:1a:d5:47:50:
fb:9b:b2:05:a3:ad:8d:4e:b6:89:06:23:dd:ae:cd:3b:c9:af:
29:75:ad:5e:bd:2b:a1:fe:50:5d:4a:67:19:70:42:72:53:be:
27:3f:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net