Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa
File: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (raw, json)
Hash identifier: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=
Subject key identifier: 99:FC:3D:AC:DE:EC:D0:91:F6:2D:5A:FF:22:B2:D3:C0:53:05:4F:B9
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425208021CCE02890F924F8D04879C127
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa
Signing time: Thu 02 Jan 2025 03:47:54 +0000
ROA not before: Thu 02 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214201
IP address blocks: 81.26.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:80:21:cc:e0:28:90:f9:24:f8:d0:48:79:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99fc3dacdeecd091f62d5aff22b2d3c053054fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:6c:cf:58:f2:27:16:0b:c0:fa:02:58:c7:
d4:39:67:6d:33:e7:23:3a:aa:a4:0b:b0:af:7e:29:
cd:f8:67:e5:30:a6:9b:9a:fc:22:bb:28:7d:21:8c:
81:b1:62:31:0a:2f:b2:3e:77:c8:11:17:ea:a3:af:
2b:98:bb:8a:09:d2:ec:23:87:88:5c:4e:b4:19:5b:
c6:b7:75:dd:1b:e9:b4:59:5e:92:8b:60:2e:48:73:
6a:01:fb:25:2e:0e:6d:3b:81:5a:cf:e1:32:b3:46:
1e:60:65:72:88:d8:7b:d6:fb:a2:55:d4:25:2c:20:
d3:e6:20:8c:80:cf:d0:65:c8:80:8e:00:42:92:07:
14:86:ee:a3:1a:13:76:04:bc:ce:e8:10:db:9f:8a:
0b:c0:d4:52:85:d5:e4:ce:58:2d:9f:0d:94:b2:6a:
26:50:da:a7:d5:52:71:16:d6:e6:d6:4f:4d:d2:38:
80:21:66:91:a9:eb:b0:ff:ae:d8:54:44:d1:0a:7e:
cc:5d:ea:ed:dc:42:86:f8:e2:11:76:98:16:5a:7f:
76:72:74:cd:be:35:bb:df:ff:76:0b:db:d4:1e:f2:
83:75:cd:41:57:82:d4:3e:18:ef:b7:44:7a:05:bf:
ae:13:d4:3a:71:22:ca:cf:b7:ae:c9:ac:ff:2e:fa:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:3D:AC:DE:EC:D0:91:F6:2D:5A:FF:22:B2:D3:C0:53:05:4F:B9
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.157.0/24
Signature Algorithm: sha256WithRSAEncryption
30:57:e1:67:5c:ed:24:bf:51:b9:33:8e:cc:19:fa:eb:73:ba:
64:a3:d6:1d:83:ae:d2:b9:4b:87:eb:17:29:ee:fb:33:8c:e1:
53:4d:70:b0:56:63:25:2b:c2:b1:f3:13:9c:96:1f:21:87:13:
05:f5:0c:33:cc:53:4b:c1:ab:a9:d7:a9:e9:75:52:53:fc:a7:
5f:0f:09:10:e6:a6:76:0b:19:91:1c:de:62:10:d5:4c:38:a3:
c7:c8:95:3f:e3:b9:c3:7d:80:07:4b:b2:f1:a8:39:26:59:55:
7a:0e:3f:5c:a9:e6:d7:c0:59:b1:d7:24:7b:4a:ae:cf:d6:26:
37:75:7d:61:97:c6:1a:8f:fe:ea:d2:14:c0:ae:4c:7e:d8:8d:
ba:3a:05:07:52:90:60:ea:dd:a6:9f:b9:49:e0:f8:e6:c3:36:
d9:da:fe:02:6d:14:70:94:eb:bc:59:4f:b6:e7:73:53:0e:16:
f3:24:af:01:51:1d:99:a1:d8:7a:6f:f7:16:76:50:1a:6e:ea:
3e:c7:c5:68:29:78:23:f1:59:90:98:d1:86:f5:da:c9:2c:e9:
ae:35:c4:03:50:f3:7f:30:ce:c6:9b:79:cb:09:a9:e5:dd:25:
b7:fe:60:a2:6f:cd:3d:a9:8b:5b:7f:16:3e:fb:72:93:4e:94:
ca:87:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net