Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Mv8ILyWwDOgrknkFh7a9EJ2AM8w.roa
File: Mv8ILyWwDOgrknkFh7a9EJ2AM8w.roa (raw, json)
Hash identifier: hf1fOJzyEUeQ5YRs1aK/+dTHNtpAQIPFIr/oLF1WrVg=
Subject key identifier: 32:FF:08:2F:25:B0:0C:E8:2B:92:79:05:87:B6:BD:10:9D:80:33:CC
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01942445A6F08ABB4FF6BD1251A91837E418
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Mv8ILyWwDOgrknkFh7a9EJ2AM8w.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2001:3380::/29 maxlen: 29
2a0b:3e00::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
2a14:5840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a6:f0:8a:bb:4f:f6:bd:12:51:a9:18:37:e4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32ff082f25b00ce82b92790587b6bd109d8033cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:94:81:17:42:9f:4d:ee:7e:a7:32:28:ec:
a6:6f:ae:f1:f9:ff:00:25:42:1f:5d:c9:1a:be:28:
08:4b:c5:27:df:1f:96:ae:ac:74:a5:bd:b5:d8:3a:
73:ee:bb:e4:65:0e:df:86:39:1b:52:87:01:bf:e1:
41:5c:a6:b2:b2:13:5e:e1:67:af:90:95:1e:35:96:
4d:f3:9d:4b:62:14:b6:2f:ad:13:47:c9:5c:ef:d6:
03:02:63:2c:30:19:e7:6a:89:e0:85:fb:29:2a:bb:
94:bf:84:fb:4c:99:83:3b:d8:d4:28:6e:2d:ac:5a:
b9:1c:6c:39:d1:74:cd:1e:d4:30:f0:40:da:8e:32:
e6:ac:f0:ad:fd:9e:c7:33:14:6a:aa:7c:76:eb:64:
a0:65:23:60:ad:ee:f1:18:e3:bd:7f:c8:00:4a:46:
d3:9a:7b:f4:3c:4b:c2:00:e2:ff:bf:2a:58:61:0c:
ee:f9:25:c8:c6:5c:09:60:85:dd:8f:6c:0c:21:ca:
20:e9:14:68:9f:c3:76:f1:26:e8:02:91:54:8b:22:
c3:c1:b0:d1:0d:71:83:40:27:97:3c:6f:51:77:b2:
af:36:6c:75:09:69:4e:05:1b:43:fe:4a:29:dd:67:
7d:da:c4:82:df:0b:18:71:1f:0f:26:9c:8f:7b:d2:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:08:2F:25:B0:0C:E8:2B:92:79:05:87:B6:BD:10:9D:80:33:CC
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/Mv8ILyWwDOgrknkFh7a9EJ2AM8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3380::/29
2a0b:3e00::/29
2a13:b840::/29
2a13:ddc0::/29
2a14:35c0::/29
2a14:5840::/29
Signature Algorithm: sha256WithRSAEncryption
28:c1:74:ea:2c:e0:d8:8b:34:87:5b:6b:b8:c4:a6:b8:2b:7e:
b4:28:c8:05:49:24:e7:82:59:d5:c4:65:d0:f9:57:26:35:f1:
f4:61:7d:a2:ca:f5:2b:d0:1e:48:06:ee:34:aa:d1:8d:09:cc:
f8:72:be:41:02:4b:93:88:51:6f:8e:0f:09:54:7e:da:70:93:
2b:ad:93:ff:2e:c8:38:76:88:54:01:86:fd:15:44:e2:85:3e:
aa:3e:b3:99:b3:df:c2:df:5d:7c:50:08:41:e7:b6:f7:79:a7:
11:2a:19:30:df:94:83:fe:37:ee:15:d7:1e:32:93:44:86:48:
03:a7:77:fd:a2:19:6c:a6:f9:9d:ee:4c:04:f9:05:20:07:8d:
3f:48:dd:8c:ba:f4:c1:a9:c4:be:a0:52:ed:7d:02:f5:3b:97:
aa:98:eb:a6:38:bc:aa:c1:99:47:51:93:00:74:f9:ea:21:40:
b3:a2:2d:1f:bc:67:3c:3d:04:c5:31:40:05:23:78:90:6a:b3:
59:28:e6:c7:01:4c:c4:44:0e:bd:0d:e7:12:67:bf:40:78:75:
cf:a2:3f:0b:aa:71:cc:c4:cf:cc:b5:5f:0b:57:f7:57:63:11:
31:c5:89:4e:c7:4e:35:af:f6:a8:2a:51:09:09:53:92:5e:20:
2a:14:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:54 2025 by rpki-client on console.sobornost.net