Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa
File: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (raw, json)
Hash identifier: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=
Subject key identifier: 9A:69:D9:38:E8:78:C5:9A:00:C8:1E:A8:CC:FE:DD:33:3D:2F:A4:E4
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 019422FC05539DAEAEFB5B2CE0BEA5A1AE42
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199951
IP address blocks: 185.41.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:05:53:9d:ae:ae:fb:5b:2c:e0:be:a5:a1:ae:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a69d938e878c59a00c81ea8ccfedd333d2fa4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:0b:44:2c:ac:8d:0a:a2:a4:a5:06:ef:46:
b2:d7:de:9f:d1:ee:fc:15:7d:46:e6:fc:df:3b:9c:
f8:d1:83:62:ee:ed:7a:64:a3:e3:e1:bc:6e:9f:16:
7e:10:b3:8f:3e:f6:d6:3e:1d:61:8d:fd:d1:b1:23:
19:62:ce:49:3c:3a:11:1f:7b:98:5d:dd:0d:44:dd:
ec:e4:4b:56:4d:85:b9:d0:d8:39:23:96:89:a3:e6:
25:cf:cb:f2:49:7e:4a:c3:b2:cc:34:9d:b7:94:aa:
9f:96:58:c5:df:50:6c:eb:73:2b:0c:c3:e4:95:57:
db:ce:52:53:41:3e:b6:22:2b:2d:50:b9:e0:6d:80:
8a:cb:9a:04:05:28:b6:e9:e2:76:44:37:12:ca:1f:
2e:2d:72:04:c9:bc:ad:c4:ac:38:11:41:1a:39:0d:
17:ba:c3:25:40:9a:4a:5a:73:ee:b0:9b:d8:e7:87:
9c:69:e0:34:f7:ed:9b:31:29:03:58:31:c1:60:1f:
70:7c:8e:a7:62:71:10:a3:b9:5a:f6:a7:cd:b4:9b:
e9:96:68:db:57:7a:51:1d:81:79:19:6f:5e:33:ec:
a7:ef:60:c5:f6:6a:05:d7:cd:f7:3c:30:ad:f7:1a:
a4:ea:8b:49:d5:b3:b4:8a:04:4a:b3:e3:e7:9d:fe:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:D9:38:E8:78:C5:9A:00:C8:1E:A8:CC:FE:DD:33:3D:2F:A4:E4
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:0a:9e:64:18:70:7d:c1:9b:db:69:e2:dc:29:26:a0:86:99:
49:a2:87:84:41:c3:86:19:5b:17:db:18:81:c1:10:43:ff:03:
db:5d:67:71:2d:d4:27:39:f4:33:7b:ff:be:13:12:02:66:9b:
97:cc:28:c7:07:9e:48:e6:a5:3d:73:59:f8:a7:b1:20:2e:5b:
a4:57:17:b9:bb:16:7d:de:f0:3c:0b:80:17:fc:09:5c:11:18:
ab:c8:71:89:e8:7c:73:0d:03:d6:c4:fb:27:4b:1d:d6:d4:83:
0a:ee:9a:3a:8f:ce:cd:e3:bd:e8:e1:15:81:e3:aa:1b:bb:0c:
bc:84:07:c9:77:2b:71:80:88:1d:a5:8f:44:a2:fa:0e:09:70:
b2:8e:4b:a1:cf:91:28:42:83:a2:a9:fb:6e:02:66:26:e8:eb:
99:59:60:5d:94:33:a6:d0:ce:98:1f:b7:e1:61:01:8a:7c:fd:
a3:51:fe:a9:5e:22:4a:1a:9c:3f:dd:59:0a:b0:0a:dc:cb:58:
6d:f1:bf:67:9d:de:51:d4:76:ce:67:3f:53:a0:68:ca:9f:5a:
42:12:4f:bf:40:5f:9d:da:b5:41:5d:f9:b3:39:0b:30:df:fa:
39:d3:cd:67:8f:e3:09:a8:f3:45:b2:47:5c:29:84:a1:51:0b:
4c:3c:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:44 2025 by rpki-client on console.sobornost.net