Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa
File: NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa (raw, json)
Hash identifier: 8ncSaAlvsGwgwEz4IVnirUboMfpzaj3h+0Dd6V+Vjp0=
Subject key identifier: 34:C4:81:19:D5:D9:DE:73:5B:34:CE:87:98:00:F5:D6:76:E3:51:47
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 01942521742002B830C742B90D7919B9CAAB
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2263
IP address blocks: 192.44.77.0/24 maxlen: 24
192.108.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:74:20:02:b8:30:c7:42:b9:0d:79:19:b9:ca:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34c48119d5d9de735b34ce879800f5d676e35147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:69:9f:88:4f:fb:56:b7:f4:ea:d1:33:c4:
db:05:39:cc:a9:f7:8b:be:b1:44:00:1f:3e:56:ce:
45:c2:42:36:91:0b:55:01:41:fc:91:ca:0b:9d:e9:
3b:59:40:21:4d:af:aa:02:be:ba:2c:9e:3a:08:f9:
d4:82:7e:ab:25:ac:30:4c:85:a5:8b:02:ee:dc:3c:
ea:c8:01:c8:af:3d:62:ab:00:73:d4:7b:c6:a0:a7:
b9:a6:cf:ac:a9:a3:10:df:9b:3f:99:c5:1a:58:48:
21:f4:e7:a4:41:30:80:fd:a7:30:8b:2a:d0:96:57:
b8:e7:ba:6a:dd:37:63:9e:c2:18:15:9e:ff:eb:c6:
7c:e9:55:26:07:24:cb:07:60:2b:7a:8b:1c:d6:e6:
58:9b:4a:2f:b8:10:dd:24:22:8a:62:0f:65:a0:9a:
7b:16:dc:21:8f:b3:01:a4:b5:6b:00:b0:f5:33:94:
2e:ab:6d:5d:66:87:33:33:84:4d:62:ed:06:02:e5:
25:3b:24:ba:eb:88:a1:b9:97:ff:d5:04:e0:2c:83:
4e:fe:62:d6:95:0e:97:05:78:d4:3f:21:5e:00:f1:
c2:37:0e:7a:33:34:b2:fa:d9:cf:42:39:17:b4:cd:
55:c4:91:7e:fa:f5:9e:bf:05:4d:00:45:77:c9:c1:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:81:19:D5:D9:DE:73:5B:34:CE:87:98:00:F5:D6:76:E3:51:47
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/NMSBGdXZ3nNbNM6HmAD11nbjUUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.77.0/24
192.108.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:da:0f:5f:00:0f:60:a1:98:30:93:f6:3f:c1:28:ca:c9:bf:
b7:3a:96:1d:da:0d:5f:1e:98:78:03:ef:d1:55:99:c6:01:5c:
28:9c:87:fc:df:2c:6d:0c:ec:97:80:eb:35:ed:a6:85:bd:56:
ad:b7:75:e0:4a:5c:be:20:de:f5:a9:bd:b9:34:d7:d4:20:c3:
d1:f3:89:74:45:72:4c:ba:21:85:ca:f6:88:65:40:db:fb:63:
d8:12:49:72:e1:5e:84:75:09:3e:20:3f:22:16:68:57:2c:cc:
4f:7e:3a:91:f0:ee:e2:f5:64:a3:cb:aa:52:66:7e:9a:25:a0:
1f:99:9f:05:a9:b4:f8:1d:04:86:68:b4:96:a5:72:25:f9:45:
26:a3:40:93:db:3c:45:4c:cf:a5:50:37:5e:25:02:d4:50:a7:
af:45:fa:14:eb:19:96:bb:e3:57:53:7c:15:f8:93:eb:64:25:
94:fb:2b:07:ea:6b:bb:87:d6:4c:59:65:2c:92:74:d2:93:d6:
78:d9:c4:b9:f9:35:35:93:52:39:4a:3e:90:5d:34:49:d1:7d:
eb:24:b1:a8:ef:d1:34:e0:7e:4e:ea:d3:6b:16:9c:27:14:0d:
d1:71:ba:2a:c7:91:ca:c7:83:e9:14:06:4a:8e:9a:81:57:ed:
0f:b7:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net