Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/mogbma_RtoADQ0xZNuTva7SSLFU.roa
File: mogbma_RtoADQ0xZNuTva7SSLFU.roa (raw, json)
Hash identifier: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=
Subject key identifier: 9A:88:1B:99:AF:D1:B6:80:03:43:4C:59:36:E4:EF:6B:B4:92:2C:55
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 01942445232DFD6ABE82DD830DB7333FC471
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/mogbma_RtoADQ0xZNuTva7SSLFU.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48851
IP address blocks: 141.226.207.0/24 maxlen: 24
141.226.214.0/24 maxlen: 24
141.226.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:23:2d:fd:6a:be:82:dd:83:0d:b7:33:3f:c4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a881b99afd1b68003434c5936e4ef6bb4922c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:41:71:0a:ba:1d:fd:19:67:f2:29:6a:e4:
c7:85:42:81:bf:d9:09:f2:08:74:e1:65:fc:e9:73:
8c:ca:4f:1b:e3:77:b7:d7:71:64:61:64:7a:a4:83:
90:f9:6e:7b:d7:fb:48:7b:ce:7c:9e:be:8b:3f:20:
be:c0:69:1e:8d:1a:b9:bb:80:5c:39:7d:6b:55:23:
b9:f8:3b:80:b8:7b:93:48:9c:43:29:dd:60:48:83:
ee:3a:f9:f5:57:ff:e2:5e:27:3d:ae:64:49:fd:da:
55:e0:bb:02:ea:d4:87:ea:26:35:7b:4b:5a:b7:22:
a4:23:01:2e:34:fc:2d:d3:14:4e:88:b9:8c:3c:98:
f2:f7:9c:45:21:c3:09:c9:2d:13:fa:a6:3e:42:60:
4c:1d:e0:79:fe:d0:57:03:c2:ad:57:53:be:af:49:
2b:16:79:4a:7e:19:1a:d6:08:62:c4:d9:d8:0e:ba:
6f:b0:85:77:96:77:bb:cb:52:99:9e:de:5d:9c:9d:
7b:de:33:7c:ff:0b:c1:08:f9:dd:46:3e:63:61:cb:
ca:20:b2:1e:c6:ce:5a:47:d1:2c:7c:b3:a1:df:81:
20:66:09:48:ad:a9:6f:2c:9a:09:18:3e:e9:ce:e2:
b3:f9:0b:f4:bc:b7:a0:bb:2a:67:93:52:0a:6e:e6:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:1B:99:AF:D1:B6:80:03:43:4C:59:36:E4:EF:6B:B4:92:2C:55
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/mogbma_RtoADQ0xZNuTva7SSLFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.207.0/24
141.226.214.0/23
Signature Algorithm: sha256WithRSAEncryption
44:31:82:e7:44:1a:84:21:09:7b:9e:a7:ed:64:ce:4f:39:ed:
15:87:d2:96:da:80:35:fc:a0:4d:ff:90:69:c6:b5:89:de:67:
2a:76:dd:79:52:a8:52:69:e4:70:2f:08:8f:4c:40:08:00:dc:
d3:c4:fd:8e:a7:98:3e:7f:a4:d1:bf:5e:75:32:54:83:d8:d3:
01:02:e0:06:b7:8e:af:9f:b3:3c:51:1a:5e:f5:79:95:c6:36:
b6:b5:96:93:c1:cb:30:30:33:a9:c7:e0:0b:d6:00:57:3d:c9:
ba:a3:7f:62:b1:be:cc:bc:90:97:b5:af:05:b7:63:dc:2b:d0:
29:ce:13:12:81:69:87:55:5f:4b:f0:65:fc:60:e1:c2:d1:b0:
d9:79:41:d2:9d:df:ed:a4:e6:68:ba:a0:88:05:b1:a1:2d:b4:
33:a6:bd:48:b3:f8:d2:88:6b:9f:e0:89:c4:14:aa:99:67:83:
e3:b6:96:9d:6e:8e:1b:0a:cc:42:5c:69:ac:11:66:70:54:1e:
aa:c5:e5:c2:ee:7a:c4:7d:bb:b3:b2:24:2d:1b:36:22:f5:14:
c0:d3:cf:0b:c4:d7:7f:4e:f1:30:6b:f4:e3:1f:56:04:44:09:
52:6b:f1:0a:22:b2:88:c0:c2:ae:a9:43:9b:63:6b:91:bf:e8:
62:ff:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net