Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/mZILI8WqqcpHAw37DM7B3iDAuHk.roa
File: mZILI8WqqcpHAw37DM7B3iDAuHk.roa (raw, json)
Hash identifier: BeVHXMxzxy+SJZqCSRve8Im+ETGPeoPOdbCD7qoAgVc=
Subject key identifier: 99:92:0B:23:C5:AA:A9:CA:47:03:0D:FB:0C:CE:C1:DE:20:C0:B8:79
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 0194228D0C643FB8459771038BA29C01F445
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/mZILI8WqqcpHAw37DM7B3iDAuHk.roa
Signing time: Wed 01 Jan 2025 15:47:36 +0000
ROA not before: Wed 01 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5531
IP address blocks: 91.224.2.0/23 maxlen: 24
194.165.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0c:64:3f:b8:45:97:71:03:8b:a2:9c:01:f4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Jan 1 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99920b23c5aaa9ca47030dfb0ccec1de20c0b879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:06:8e:73:89:f7:51:e8:1f:25:1e:47:48:
3b:6e:38:9a:16:24:01:1d:19:c6:27:4a:9f:02:ac:
d7:92:42:73:a2:e4:ff:39:d5:cd:e3:ea:5d:a4:42:
f6:0b:34:18:cb:88:0a:6a:21:3a:ee:ea:d9:9e:61:
84:3f:ad:89:52:37:9b:58:2e:05:2f:ab:2c:2f:c7:
8c:fc:9d:86:9b:d2:9a:b5:03:56:a4:0e:53:a8:16:
e3:c5:be:fd:f9:ab:35:64:30:12:cc:c4:df:ef:0b:
9f:97:90:eb:da:29:49:85:b7:8f:68:04:0b:26:82:
c3:4e:87:3b:69:22:b8:b4:3a:55:c0:18:e1:72:91:
d0:01:40:2f:e1:03:4d:99:2c:6a:2b:57:4f:23:98:
e2:26:6d:2e:7e:97:3d:c3:5c:0c:3d:d3:a8:e2:f1:
4c:e6:66:1d:ec:a2:fa:63:b0:54:c2:68:5f:23:21:
92:5d:5f:2a:8f:83:d9:3a:a3:58:76:58:54:2f:be:
d2:39:58:04:34:8b:d6:26:0b:42:c3:f9:5d:f8:f4:
94:e2:26:f1:6b:b2:98:86:36:ec:58:9c:27:3c:49:
5a:5d:04:b4:97:89:5c:8a:2b:1d:bc:79:0a:94:46:
f3:ec:96:db:d6:c0:8f:c6:fe:97:b1:cd:d7:d8:16:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:0B:23:C5:AA:A9:CA:47:03:0D:FB:0C:CE:C1:DE:20:C0:B8:79
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/mZILI8WqqcpHAw37DM7B3iDAuHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.2.0/23
194.165.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c8:07:30:73:46:5f:95:22:5d:d0:81:8a:16:a7:28:d3:4b:
a9:33:f2:47:95:d3:47:09:aa:23:92:95:f8:3b:a6:3d:8f:fe:
21:85:70:1b:2b:c1:8f:78:ca:2c:d2:c5:62:7b:1f:d2:9e:3b:
83:79:a4:61:7f:31:6e:5c:0e:a8:c9:5e:32:11:4f:32:ab:d0:
1e:58:4a:da:b3:d2:00:f3:e2:e4:31:a0:11:d5:11:20:ae:58:
f3:e8:53:06:ca:34:2b:14:32:d5:62:59:d8:2b:a5:ef:77:10:
29:b4:7a:4e:c7:c6:d2:2c:a1:23:07:f5:49:a7:6a:86:c3:b2:
67:4a:3a:d9:c5:0b:84:e6:ae:c8:43:cd:fe:07:2f:08:cb:32:
fa:89:6a:20:4b:fc:43:c0:43:b4:84:81:97:d3:27:20:8a:67:
83:e2:d0:37:89:77:7d:cc:e2:f1:35:7c:39:5a:1d:ff:72:dc:
fe:c2:47:8c:f9:52:bd:b1:97:97:07:79:a7:6e:2b:2f:11:e1:
1c:e2:ce:4d:55:60:1d:56:fb:2d:b7:bc:3a:8b:3b:0c:7e:95:
6e:63:80:55:52:1a:15:50:96:09:57:de:f2:ac:68:14:38:06:
a0:3b:dc:69:5e:19:4a:af:ed:ab:4e:b5:d1:9b:9c:39:b4:6a:
6f:f9:9b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:41 2025 by rpki-client on console.sobornost.net