Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa
File: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (raw, json)
Hash identifier: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=
Subject key identifier: E7:F8:8C:17:E6:BC:34:C6:B5:60:F4:7F:3F:73:F2:45:04:16:D3:2E
Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Certificate serial: 019424B33A000DC39516D78EA044D8078E69
Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa
Signing time: Thu 02 Jan 2025 01:48:33 +0000
ROA not before: Thu 02 Jan 2025 01:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200146
IP address blocks: 62.3.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:3a:00:0d:c3:95:16:d7:8e:a0:44:d8:07:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e
Validity
Not Before: Jan 2 01:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7f88c17e6bc34c6b560f47f3f73f2450416d32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:2a:2b:83:c6:f3:68:8f:5f:3d:ac:ca:ba:
f9:7f:bd:21:b7:16:6b:05:46:e7:b0:28:8b:fa:28:
7c:03:d2:4d:f1:43:f9:f6:a1:08:95:ef:2e:33:73:
85:03:84:18:39:36:1b:3f:38:d6:a7:5a:90:6c:c4:
b2:c6:93:33:3c:93:0b:86:7d:11:b4:f9:84:4b:74:
d3:b4:1b:ab:6e:ec:4a:c9:68:d4:99:81:a6:5b:d4:
52:94:3a:0c:ba:7e:7f:3d:17:b0:1d:41:76:f3:e6:
97:4d:13:0e:f1:30:54:7d:2a:8a:76:13:f7:91:7f:
28:87:fe:32:c3:b8:77:f9:66:a9:fc:ea:c2:5f:ac:
34:c6:3b:b0:84:2f:a9:74:06:60:b5:63:b7:df:2a:
66:87:68:2f:5d:d1:fd:7b:66:ac:c2:a7:58:d9:b3:
88:52:60:5c:ae:1e:77:66:f2:1d:59:af:0e:3c:8b:
2f:6c:45:c7:8c:9c:05:e9:33:c8:d3:f9:8e:fa:3e:
1b:0e:4c:53:6f:1d:a0:de:46:ca:ad:46:c3:38:74:
41:77:6c:80:79:91:7f:fb:bb:11:fb:bb:9d:47:87:
4b:4d:c1:08:76:a5:18:e7:af:f9:84:9c:0b:15:90:
3a:5c:c2:1d:cc:7f:80:8c:31:d2:03:ca:b2:5d:70:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:8C:17:E6:BC:34:C6:B5:60:F4:7F:3F:73:F2:45:04:16:D3:2E
X509v3 Authority Key Identifier:
keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.47.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5f:1c:fe:e0:d4:c2:45:5d:26:5d:dc:3d:ea:0e:7f:f6:48:
f9:17:7b:e1:f8:74:29:5c:92:60:5b:cd:29:44:ce:91:4e:84:
b0:f7:92:01:15:1d:a2:cb:2a:d7:2f:c0:78:74:73:37:f8:8e:
f2:cb:c0:ea:0d:fd:be:ba:5b:a0:82:21:0e:b3:7f:b5:0f:54:
7c:99:dd:d9:05:98:81:e9:98:d7:6a:54:c5:4f:ec:ea:99:77:
36:77:1b:76:ad:b2:dc:09:5e:c3:f0:c3:5c:40:c1:58:cb:3b:
92:54:ce:21:f8:88:bd:38:71:04:be:27:3e:ba:3b:fb:f4:45:
21:79:01:05:65:30:55:59:a2:b2:b7:63:7a:d3:65:26:36:59:
11:d4:55:c9:ed:11:d5:e6:0b:63:68:40:7c:9e:65:74:06:9f:
e5:0b:08:78:26:e9:f3:f0:c2:b3:66:08:f5:06:79:7b:56:45:
08:92:5e:a2:c5:ab:33:9b:a4:58:5a:c0:f9:9e:f3:81:c4:48:
b9:ed:5b:c7:af:cb:7b:d1:46:b5:b1:d5:3a:54:61:6f:41:23:
d1:f0:07:37:40:e3:30:dc:81:03:77:46:37:8f:67:43:8d:4d:
a1:f5:11:ac:7c:9e:16:73:08:5d:6f:3b:28:d6:5e:87:c5:ac:
fd:13:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net