Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/mk-EE-jomB4r81nV5hqnq3SbThA.roa
File: mk-EE-jomB4r81nV5hqnq3SbThA.roa (raw, json)
Hash identifier: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=
Subject key identifier: 9A:4F:84:13:E8:E8:98:1E:2B:F3:59:D5:E6:1A:A7:AB:74:9B:4E:10
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 019428231AC87CF12A7EF55DD8367359B806
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/mk-EE-jomB4r81nV5hqnq3SbThA.roa
Signing time: Thu 02 Jan 2025 17:49:36 +0000
ROA not before: Thu 02 Jan 2025 17:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47241
IP address blocks: 37.98.160.0/19 maxlen: 24
46.160.0.0/18 maxlen: 24
109.60.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:1a:c8:7c:f1:2a:7e:f5:5d:d8:36:73:59:b8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 17:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a4f8413e8e8981e2bf359d5e61aa7ab749b4e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:4d:51:b9:e0:80:8f:b8:2d:44:94:a2:47:
02:70:49:ea:cb:fd:69:8e:86:8d:ff:8a:7a:ff:19:
ef:37:8f:28:1b:31:95:b8:af:89:38:ba:0e:b2:9a:
14:37:35:d4:2e:2c:c4:6d:10:37:83:4d:26:b7:07:
9a:3a:61:30:22:ef:f3:6e:b0:f3:0d:a3:f7:dc:a8:
28:2e:ff:23:c7:fa:25:b4:44:ba:5e:ea:51:fe:c6:
ba:af:4d:2e:52:0f:7c:f5:27:3f:40:f6:da:8a:23:
fd:c0:c0:c8:27:a3:8c:bd:44:f6:7b:22:95:83:06:
ed:0d:d0:b9:b4:c4:b4:d3:9a:cd:14:74:7f:f7:3c:
b0:f0:41:17:a5:79:b7:06:2f:2f:70:10:2c:06:46:
5c:26:82:10:6c:5a:48:33:32:6f:00:f7:8e:a0:3d:
0e:5e:55:05:9d:8d:ef:65:ec:48:c3:f4:c9:ce:09:
b5:3a:ea:70:a2:a8:0d:27:47:d7:db:94:e0:8d:75:
bc:ca:ef:65:77:9c:0f:71:01:44:72:77:0d:8b:1a:
b2:08:dc:c4:cb:63:52:eb:dd:35:80:88:69:58:74:
83:78:f3:b1:15:60:18:4f:07:9f:76:0d:41:dd:bc:
1c:02:2b:a1:17:11:b3:0d:ac:08:f8:4c:13:76:88:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:84:13:E8:E8:98:1E:2B:F3:59:D5:E6:1A:A7:AB:74:9B:4E:10
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/mk-EE-jomB4r81nV5hqnq3SbThA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.160.0/19
46.160.0.0/18
109.60.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:c6:e3:40:25:51:1b:9a:d9:21:93:58:de:5f:d6:1e:0f:f9:
1b:ba:5a:d1:c4:33:15:f9:42:a3:0d:9c:d2:a7:10:b8:4a:a5:
98:01:a7:d9:11:9b:d0:07:53:d0:b7:02:95:59:c6:fd:89:84:
de:a5:5e:81:04:ba:c6:cc:45:f4:ce:77:93:68:8e:e1:55:84:
b7:de:c2:f3:75:73:37:1c:3b:10:6b:30:97:58:27:90:10:d4:
03:f8:8d:ce:2d:d7:18:74:63:53:bb:67:ef:b4:c1:3c:10:2c:
87:b7:12:9e:c9:8f:c8:68:c9:42:a4:c5:8b:5f:a3:53:88:f0:
48:c3:c8:9e:aa:af:30:67:92:98:56:a9:93:de:a5:ff:6d:43:
1a:93:51:a1:44:a7:58:cd:a1:01:91:77:36:d5:5c:4f:4f:8e:
26:a8:1f:f4:4e:43:68:45:e4:d2:84:14:0c:0e:e3:97:65:36:
8e:5c:e9:c2:0c:42:38:58:14:86:d6:18:f5:52:19:17:77:7d:
0b:a7:48:ef:d1:91:8b:40:69:94:8b:9e:16:21:96:28:6d:9f:
5a:0a:6b:32:00:e8:b7:a1:72:d8:9f:4f:77:1a:39:39:80:1b:
b8:df:3d:97:35:76:df:bd:08:a4:21:5f:8d:d3:c0:c4:38:98:
6e:c7:27:68
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoIxrIfPEqfvVd2DZzWbgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjUwMTAyMTc0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTRmODQxM2U4ZTg5ODFlMmJmMzU5ZDVlNjFhYTdhYjc0OWI0ZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWtNUbnggI+4LUSUokcCcEnqy/1p
joaN/4p6/xnvN48oGzGVuK+JOLoOspoUNzXULizEbRA3g00mtweaOmEwIu/zbrDz
DaP33KgoLv8jx/oltES6XupR/sa6r00uUg989Sc/QPbaiiP9wMDIJ6OMvUT2eyKV
gwbtDdC5tMS005rNFHR/9zyw8EEXpXm3Bi8vcBAsBkZcJoIQbFpIMzJvAPeOoD0O
XlUFnY3vZexIw/TJzgm1OupwoqgNJ0fX25TgjXW8yu9ld5wPcQFEcncNixqyCNzE
y2NS6901gIhpWHSDePOxFWAYTwefdg1B3bwcAiuhFxGzDawI+EwTdojRsQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJpPhBPo6JgeK/NZ1eYap6t0m04QMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvbWstRUUtam9tQjRyODFuVjVocW5xM1NiVGhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFJWKgAwQG
LqAAAwQHbTyAMA0GCSqGSIb3DQEBCwUAA4IBAQAJxuNAJVEbmtkhk1jeX9YeD/kb
ulrRxDMV+UKjDZzSpxC4SqWYAafZEZvQB1PQtwKVWcb9iYTepV6BBLrGzEX0zneT
aI7hVYS33sLzdXM3HDsQazCXWCeQENQD+I3OLdcYdGNTu2fvtME8ECyHtxKeyY/I
aMlCpMWLX6NTiPBIw8ieqq8wZ5KYVqmT3qX/bUMak1GhRKdYzaEBkXc21VxPT44m
qB/0TkNoReTShBQMDuOXZTaOXOnCDEI4WBSG1hj1UhkXd30Lp0jv0ZGLQGmUi54W
IZYobZ9aCmsyAOi3oXLYn093Gjk5gBu43z2XNXbfvQikIV+N08DEOJhuxydo
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net