Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/mSN_1NgR8_RP_NHRmSVU0520UIo.roa
File: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (raw, json)
Hash identifier: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=
Subject key identifier: 99:23:7F:D4:D8:11:F3:F4:4F:FC:D1:D1:99:25:54:D3:9D:B4:50:8A
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 0194258FBEE29E7B1D74CC5ACF4A2B868C46
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/mSN_1NgR8_RP_NHRmSVU0520UIo.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209924
IP address blocks: 31.222.52.0/23 maxlen: 23
31.222.52.0/24 maxlen: 24
31.222.53.0/24 maxlen: 24
31.222.54.0/24 maxlen: 24
93.191.194.0/24 maxlen: 24
93.191.195.0/24 maxlen: 24
93.191.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:be:e2:9e:7b:1d:74:cc:5a:cf:4a:2b:86:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99237fd4d811f3f44ffcd1d1992554d39db4508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:60:90:c0:c8:83:70:e8:e4:77:a8:6f:c5:fe:
d8:90:9f:1c:42:23:81:18:8f:92:ed:ad:f6:7e:a0:
56:8f:a0:8b:95:9e:c4:1f:10:67:b3:1f:16:04:a1:
98:b2:7a:6a:33:8c:a5:fa:92:6c:90:aa:58:da:9d:
ee:83:de:46:3f:19:88:c8:b3:9e:74:d5:9f:b1:58:
82:54:3f:0a:e0:f4:7e:6a:c4:fb:bc:5b:06:b7:35:
86:9f:d0:a3:8f:43:5f:a5:3b:07:d3:6e:bb:ed:66:
79:17:a1:fc:b3:cb:03:4e:88:2b:1d:af:98:1e:e8:
ef:f9:69:a9:91:fd:aa:86:e9:c7:e0:ca:95:83:c8:
20:c8:95:4d:64:4a:8c:15:d8:2c:7a:26:c4:4e:00:
87:2c:bb:1a:39:09:75:31:b8:7d:5e:32:9d:f8:00:
3d:fc:7a:04:b8:9d:b0:6e:64:24:e8:2c:20:0e:04:
8d:08:a4:b1:2d:29:bd:f6:eb:26:b3:e7:00:ce:ad:
cb:2f:97:aa:8a:d5:13:54:75:e3:4b:95:1f:a1:30:
6c:ef:c2:c8:b8:fd:90:55:6a:b9:88:30:09:e7:c2:
4b:89:58:be:f4:2e:d8:e7:1d:90:f4:93:9b:e0:6e:
e8:c3:30:c4:23:1a:62:4b:00:7c:c6:c3:6c:da:f0:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:7F:D4:D8:11:F3:F4:4F:FC:D1:D1:99:25:54:D3:9D:B4:50:8A
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/mSN_1NgR8_RP_NHRmSVU0520UIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.52.0-31.222.54.255
93.191.194.0/23
93.191.197.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ca:44:80:5a:a1:92:75:a8:9b:4e:2e:7c:6d:e0:3a:5f:a7:
20:c9:1a:ba:67:08:99:57:23:ee:38:90:06:64:b9:82:1d:bd:
fb:11:8e:ed:eb:91:b6:e2:19:81:eb:f0:25:91:f0:62:cf:c1:
1e:ac:f7:0a:6d:93:74:55:25:13:c0:2b:1b:72:84:61:79:03:
49:0d:d4:85:83:ca:74:34:46:43:6f:4e:fa:9c:2b:57:f3:70:
c0:88:40:e3:dc:d5:4f:ca:2c:57:62:e8:81:0a:33:46:4d:d9:
ff:1f:c0:aa:a7:e7:79:e2:78:cb:6e:29:89:fb:fa:8c:37:08:
8d:ca:58:6e:71:2e:49:8c:2d:da:cd:e1:02:b9:86:2a:a9:63:
0c:2c:8c:68:3c:1f:ab:92:41:72:ed:96:91:19:07:2f:60:e5:
ff:89:0f:5b:d5:ba:4d:13:1f:52:5a:11:b7:3d:05:f9:a4:e5:
b3:dd:8f:a4:cd:a2:30:96:2e:c7:9b:9a:e3:fc:5a:61:f6:57:
fc:e7:11:8f:76:c0:0e:52:79:81:da:b3:6e:ae:ea:d2:53:fb:
6c:8d:5b:2f:29:51:43:39:72:5b:3a:e1:14:a5:ad:98:a1:03:
e1:b5:a1:0c:d0:d9:be:bf:e0:fd:a4:c3:26:87:ed:be:10:e3:
ef:73:b2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net