Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/MRDtmP98O0WNgH87Ax8nCcdZuLw.roa
File: MRDtmP98O0WNgH87Ax8nCcdZuLw.roa (raw, json)
Hash identifier: HrqGeHE20jy2rWDbz9uI3JnGeaBNl8AfA/5tH0i9z5o=
Subject key identifier: 31:10:ED:98:FF:7C:3B:45:8D:80:7F:3B:03:1F:27:09:C7:59:B8:BC
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 019423D6BEE1503F4F6312EF0C99479E78B4
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/MRDtmP98O0WNgH87Ax8nCcdZuLw.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211550
IP address blocks: 185.223.205.0/24 maxlen: 24
212.125.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:be:e1:50:3f:4f:63:12:ef:0c:99:47:9e:78:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3110ed98ff7c3b458d807f3b031f2709c759b8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:55:cf:c6:19:1c:a0:08:8a:38:b1:c6:ac:
62:4b:ee:0e:76:c9:59:7c:62:c6:18:a9:12:74:ff:
7b:3b:32:98:7c:af:0c:67:0d:b5:e2:07:47:27:d3:
0b:9b:1a:3e:8b:66:e8:46:81:90:c2:b2:f4:9b:e5:
b7:6d:61:a6:c3:f0:23:04:c1:1d:07:a9:33:7d:43:
8c:55:4f:d2:6b:f2:2a:b4:98:5d:04:1b:ac:4a:6d:
6d:d7:7d:54:d5:1a:79:4b:6d:be:a1:e1:2d:df:0e:
cd:f0:0a:a2:5d:0e:00:3a:a4:97:b7:af:06:5d:8d:
67:56:ce:4d:64:a0:5f:c6:3b:3e:d0:73:a0:70:a7:
ac:1c:0c:b5:75:6c:fd:95:a1:0e:e5:2f:e1:4f:e8:
39:b0:fd:c6:ff:82:fe:47:77:18:fe:cf:6e:e2:d1:
f6:f3:22:ad:fe:4d:11:2d:f9:d8:14:c5:28:ae:60:
e9:90:86:80:bc:e9:6c:a0:0e:2b:04:ab:6c:a7:fa:
95:4c:ab:a9:19:13:f0:87:2a:d8:61:48:e2:99:0e:
49:1c:1f:6f:c4:b0:f0:dc:51:de:c1:f9:84:65:a0:
db:d2:f7:01:2d:c7:25:8a:0b:c4:04:5d:e1:04:d9:
48:c9:d9:d1:ff:bf:9f:f5:48:d7:9d:56:16:1a:8a:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:ED:98:FF:7C:3B:45:8D:80:7F:3B:03:1F:27:09:C7:59:B8:BC
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/MRDtmP98O0WNgH87Ax8nCcdZuLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.205.0/24
212.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:10:ef:a9:95:68:fe:c1:dd:96:f2:8c:e2:96:d0:9c:67:9d:
5a:01:36:6d:a5:68:a5:ef:23:a4:46:dc:c3:e7:94:dc:0c:98:
ff:a6:75:83:56:5e:4b:af:ca:67:dc:ff:d3:26:5b:26:6a:0d:
3a:cb:46:36:bc:f0:34:33:13:d4:e8:cf:e3:98:33:40:c7:17:
aa:76:45:6e:8a:9b:18:a0:d8:6d:1c:92:51:8f:13:08:c1:dd:
5c:64:3b:95:95:f4:3f:ef:41:e7:f5:f7:b7:03:1d:3f:e8:fd:
42:d8:18:2b:3c:d5:2a:f8:74:94:ea:07:99:d8:7b:ba:59:46:
ea:ba:ef:c9:c9:ff:76:1b:cf:ba:d7:7a:f2:15:99:a3:6f:9e:
3f:00:42:1d:8b:65:5f:16:48:34:84:25:82:2c:b1:f1:f7:3d:
58:d0:ff:48:7c:3d:4c:0f:6b:e7:0c:78:cf:19:d0:57:5d:3a:
aa:fa:5f:8a:ac:a0:05:f7:02:e9:28:c8:4f:d4:b6:ff:ba:64:
f2:70:92:a3:ff:8d:4a:bf:83:76:52:5b:b5:2a:e7:8e:4c:98:
39:62:6f:66:ff:21:2b:a8:d1:80:95:67:f2:4a:0c:2c:3f:3e:
17:28:d7:b6:79:8f:42:d3:18:f7:f8:d9:ff:39:ea:9e:6a:4c:
1b:fc:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net