Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa
File: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (raw, json)
Hash identifier: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=
Subject key identifier: 31:14:F6:2C:5F:DA:10:E7:85:96:ED:33:D7:CA:11:66:ED:0E:2A:84
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 01942825D20AE22F84666B2DC6A80A4DF511
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa
Signing time: Thu 02 Jan 2025 17:52:34 +0000
ROA not before: Thu 02 Jan 2025 17:52:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48628
IP address blocks: 37.0.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d2:0a:e2:2f:84:66:6b:2d:c6:a8:0a:4d:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Jan 2 17:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3114f62c5fda10e78596ed33d7ca1166ed0e2a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:0b:14:01:9e:a6:d6:20:e6:70:1d:8f:88:
67:b6:00:a0:95:ba:c5:72:74:ec:2f:8c:d7:68:4a:
51:0c:35:75:6a:fd:e0:b5:fc:6e:01:d3:7c:f5:85:
85:70:91:78:a5:52:57:ae:28:43:9a:17:a4:e6:c2:
ab:6f:75:28:b6:39:ac:8e:81:7b:01:d8:ca:56:0a:
83:11:08:ff:23:cb:db:8d:5c:2e:1e:05:1a:23:30:
ba:10:54:79:80:b9:c5:25:0f:77:55:b8:38:f5:02:
8e:35:8f:72:23:99:c1:ce:02:f1:90:25:d8:ce:90:
38:55:19:89:e0:fd:d9:57:1d:6a:b3:02:f1:e6:eb:
87:34:f8:7b:37:f5:1c:bc:c1:ff:13:46:1a:b2:1d:
c0:8d:c9:e8:52:99:f9:fe:f7:d7:b2:cd:fa:cf:3f:
ea:74:26:98:d2:f1:15:ba:21:ce:cb:74:59:e7:6c:
05:d7:7d:75:6f:86:17:7f:e0:0e:c6:1d:c8:46:5b:
83:02:7b:d3:66:07:94:39:ec:31:7d:db:36:78:a8:
2c:9e:de:22:7e:a7:75:9a:ed:18:f3:9e:37:ae:18:
97:15:d4:1c:47:4e:d9:97:d4:b5:25:bf:04:9f:b6:
1b:fb:6b:15:d7:c2:c0:99:c2:4f:91:f7:58:13:fb:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:F6:2C:5F:DA:10:E7:85:96:ED:33:D7:CA:11:66:ED:0E:2A:84
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.8.0/24
Signature Algorithm: sha256WithRSAEncryption
45:01:58:db:ef:dc:22:f2:ae:a4:78:52:0f:92:a6:26:96:50:
6e:15:25:4b:21:ed:62:87:0a:f4:86:6b:24:d5:fd:bb:bb:83:
49:48:63:4f:15:8d:f7:e0:cf:87:78:d6:4d:05:81:08:60:a0:
65:cd:7e:72:9a:0f:51:50:05:15:b2:74:85:b0:21:cf:3c:7d:
d2:8e:91:68:ed:32:72:3e:f2:17:d1:2f:d1:2f:d3:ab:e4:c4:
d2:c5:45:43:85:04:65:d4:de:84:5c:98:5b:28:7b:8e:16:1b:
d6:64:5a:ca:e3:ea:65:ea:0d:63:ec:59:f6:62:2a:d6:89:fe:
06:15:26:4d:c7:2c:43:d9:ef:01:e2:59:64:20:47:6a:94:2c:
ac:bc:a3:94:b6:e9:cc:f0:35:32:46:6d:50:b9:c0:b6:c5:95:
5b:32:19:ea:fb:8a:ad:62:88:98:51:74:aa:08:2b:8f:2c:97:
05:23:1b:f2:eb:7f:39:77:8f:05:c9:3e:27:b7:59:e7:71:b7:
10:44:3e:0c:a0:74:c8:4d:7f:61:33:7c:38:22:ef:24:e2:be:
e4:1f:2c:a1:71:7c:1f:8d:85:cb:73:ea:bc:df:26:d1:ee:14:
7f:cf:21:a8:0f:10:a3:b3:e5:d0:7c:f1:38:7b:d8:2d:d9:81:
d0:63:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net