Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/MWa-4LSmTVVt3yxgOUo6yH7lFqo.roa
File: MWa-4LSmTVVt3yxgOUo6yH7lFqo.roa (raw, json)
Hash identifier: dMyt2kmb7Gxq18almAvuNIlzcA5G1ZXeCLJmwMMXMXw=
Subject key identifier: 31:66:BE:E0:B4:A6:4D:55:6D:DF:2C:60:39:4A:3A:C8:7E:E5:16:AA
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0193ABBC45FB3126694460E8E5C665A57E2F
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/MWa-4LSmTVVt3yxgOUo6yH7lFqo.roa
Signing time: Mon 09 Dec 2024 14:04:22 +0000
ROA not before: Mon 09 Dec 2024 14:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.79.0/24 maxlen: 24
77.81.80.0/23 maxlen: 23
128.65.172.0/22 maxlen: 22
194.26.2.0/24 maxlen: 24
194.26.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:bc:45:fb:31:26:69:44:60:e8:e5:c6:65:a5:7e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Dec 9 14:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3166bee0b4a64d556ddf2c60394a3ac87ee516aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:b1:d4:fd:88:33:94:56:e1:9e:d3:47:04:
39:d0:05:01:0f:b6:e1:c6:33:47:b8:d2:98:d2:65:
59:cd:af:e0:fc:43:e4:f7:7f:34:50:1a:0c:8f:9f:
da:37:f7:d1:87:2d:7e:97:ca:6d:52:99:cf:e1:33:
97:f4:52:bc:75:97:cd:b8:61:87:fe:c1:f1:bf:70:
38:55:c8:bb:b3:89:a0:34:b0:cc:a1:44:69:18:95:
bc:70:98:b1:1d:49:59:06:45:08:d8:db:a3:77:f8:
68:5f:cf:83:39:ab:58:5d:15:50:83:0a:55:c5:d0:
a6:97:26:c1:79:0e:40:5c:57:39:e3:40:66:66:05:
78:5e:58:dc:3a:2c:70:0a:02:62:7f:fc:19:02:1e:
4b:34:7d:81:8b:19:5a:b2:1f:66:aa:8f:ae:8c:1e:
ed:dc:c4:d9:a9:97:99:f2:bc:81:16:f1:49:b3:eb:
0d:c5:00:0e:bb:8f:ed:5c:f9:58:49:fd:3a:19:37:
85:41:a1:77:a9:5f:5a:1e:56:d5:0b:fd:d6:17:58:
69:d0:0c:fa:67:30:e1:a3:57:2c:b4:ad:39:dc:49:
0d:ee:00:33:19:fe:66:24:e7:3e:75:75:8d:9c:54:
dc:f2:58:a0:00:d2:4c:d8:2c:ba:e2:36:0b:01:ba:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:66:BE:E0:B4:A6:4D:55:6D:DF:2C:60:39:4A:3A:C8:7E:E5:16:AA
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/MWa-4LSmTVVt3yxgOUo6yH7lFqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0-77.81.81.255
128.65.172.0/22
194.26.2.0/24
194.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
92:42:de:40:af:29:79:f6:bd:ba:67:71:38:a8:af:c9:fc:12:
1f:2b:fe:cf:ed:b7:83:25:95:10:c9:a2:58:53:03:9b:cf:88:
13:4e:7f:bb:42:02:8a:8b:4e:f6:0b:08:44:fa:40:fe:41:82:
8d:04:ae:ea:ba:ee:91:8f:04:26:c7:36:72:e7:01:2e:85:44:
d9:0e:5a:ae:30:49:0f:28:f4:fb:35:8f:dc:56:97:4c:9f:15:
7f:e0:6e:b0:ab:57:0c:4c:71:1c:e9:aa:48:ba:83:9d:d4:26:
89:3c:c9:84:03:57:e6:7e:b5:b8:f5:75:30:7a:e6:2c:e9:bc:
6e:4e:ca:5f:30:25:1e:90:07:51:d0:02:5a:2a:0d:62:35:26:
95:50:b1:90:e0:2e:4f:a0:dd:5b:89:31:73:74:01:16:4b:8d:
13:2b:f9:c3:61:2c:d8:a6:8e:64:88:ae:ee:2b:db:83:32:4b:
90:2f:b8:22:78:93:18:16:94:25:b9:e1:3b:15:53:fa:01:da:
a4:77:f0:9b:05:fb:69:f7:da:06:23:32:0d:9d:65:1f:db:1f:
a7:8d:67:81:94:b7:bb:ad:6e:30:b1:14:ae:ea:e3:73:c3:bf:
f7:5d:ed:2d:f1:3d:3b:3e:1f:48:75:af:d4:5d:56:bf:b5:65:
8a:cf:3f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:06 2024 by rpki-client on console.sobornost.net