Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa
File: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (raw, json)
Hash identifier: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=
Subject key identifier: 32:CA:E3:C0:F8:A8:7F:04:5B:AB:12:D8:93:51:9A:ED:64:88:6C:80
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 0194266C3CF2DF918072A216652EDAC282B7
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60460
IP address blocks: 46.231.24.0/24 maxlen: 24
46.231.25.0/24 maxlen: 24
46.231.26.0/24 maxlen: 24
46.231.27.0/24 maxlen: 24
46.231.28.0/24 maxlen: 24
46.231.29.0/24 maxlen: 24
46.231.30.0/24 maxlen: 24
46.231.31.0/24 maxlen: 24
176.227.170.0/23 maxlen: 23
176.227.172.0/22 maxlen: 22
185.88.240.0/23 maxlen: 23
2a04:2640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3c:f2:df:91:80:72:a2:16:65:2e:da:c2:82:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32cae3c0f8a87f045bab12d893519aed64886c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:b3:fb:f3:74:ce:77:f5:ac:29:4c:39:4b:
83:aa:6e:57:49:0b:9a:e1:61:42:21:83:45:46:32:
50:b0:33:d0:70:b6:e2:b6:d8:04:a7:09:39:1c:ba:
ee:35:d5:9c:13:49:57:b1:f8:86:6c:8c:11:9d:dd:
bc:de:aa:9a:8c:b5:c3:f6:ad:7b:c6:d3:27:99:9f:
9b:06:c4:31:46:ff:d3:33:3c:91:c5:16:fc:63:e9:
94:b2:05:92:d1:54:2f:fb:aa:89:73:3b:21:e2:c0:
ed:83:53:59:c7:04:b3:01:51:1c:80:76:34:29:2c:
87:79:04:1b:40:04:82:17:b5:98:c9:da:91:e3:97:
6e:4d:01:a6:ac:b8:f3:91:83:3f:fa:76:3a:c0:37:
fc:8e:25:27:55:5a:d6:7e:e3:ea:49:e8:f5:ea:61:
4a:b1:2b:f4:78:d5:c4:08:a9:46:78:16:6a:2e:c0:
32:16:c5:86:48:43:29:31:86:22:18:86:c4:1e:7f:
c2:38:83:66:f6:1a:2f:69:92:c9:02:ea:af:bf:8c:
2d:e6:ea:62:9f:56:c0:1c:25:9d:26:26:b7:5e:39:
11:ed:e3:18:cc:cf:ab:ad:95:54:0c:f5:0f:96:5a:
c4:b8:65:c4:d3:d0:dd:d2:27:d5:7f:51:a9:c0:5a:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CA:E3:C0:F8:A8:7F:04:5B:AB:12:D8:93:51:9A:ED:64:88:6C:80
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.24.0/21
176.227.170.0-176.227.175.255
185.88.240.0/23
IPv6:
2a04:2640::/29
Signature Algorithm: sha256WithRSAEncryption
04:a2:37:aa:35:d4:5e:3c:30:90:db:11:74:f2:8b:f0:06:eb:
3d:6a:8a:28:4f:b4:5d:c2:f6:33:b5:12:b7:ac:94:bb:e9:ac:
51:83:b2:7c:87:91:ab:be:f4:81:d8:19:99:8f:89:f4:77:d3:
df:86:ec:9e:43:59:39:a4:9f:0c:37:67:85:18:8e:82:20:5b:
04:b0:b2:18:ec:11:dc:9a:3f:be:72:ef:15:b3:fa:c1:03:24:
4a:99:40:99:b4:7a:f2:da:d1:c7:4d:12:68:c1:1e:b4:1e:f0:
c0:74:7a:e6:70:34:cd:71:28:50:73:7c:6a:23:2a:2c:34:c9:
60:8c:42:66:99:ba:b2:f8:1f:98:f9:a8:af:03:76:ef:2b:d9:
4a:23:ae:8e:e4:20:16:8e:6e:06:40:84:4a:e8:ab:1c:ee:db:
36:62:27:2c:d4:6b:05:44:07:1d:41:44:ff:c9:66:b0:fe:ee:
74:03:c8:b9:1d:a6:63:7d:7d:1f:96:1e:ec:25:30:be:79:be:
44:17:6e:44:eb:12:4f:64:ff:35:d9:65:d3:f7:cd:95:8d:9e:
ed:52:6a:a3:8a:d1:84:57:74:88:95:1c:70:5c:e3:9f:fb:25:
8b:f9:eb:48:e0:14:3d:ba:6c:f3:27:19:a1:d0:5e:fb:3b:a9:
14:eb:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net