Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/mxU7ZGuWRrVnoU7neP0ntyKL78s.roa
File: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (raw, json)
Hash identifier: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=
Subject key identifier: 9B:15:3B:64:6B:96:46:B5:67:A1:4E:E7:78:FD:27:B7:22:8B:EF:CB
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 0195ECAA7859E1A5679F5B75F8D16A237A12
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/mxU7ZGuWRrVnoU7neP0ntyKL78s.roa
Signing time: Mon 31 Mar 2025 14:45:49 +0000
ROA not before: Mon 31 Mar 2025 14:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 212.6.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:aa:78:59:e1:a5:67:9f:5b:75:f8:d1:6a:23:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Mar 31 14:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b153b646b9646b567a14ee778fd27b7228befcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:7d:17:b2:ce:06:9c:c5:f8:6f:fd:9e:c2:
10:63:5b:d0:f9:0b:07:d4:b0:2e:41:b7:0e:2a:bb:
e9:62:a4:ee:59:43:71:1a:81:0f:26:d4:8f:73:00:
fe:2a:fc:06:c9:59:85:6f:90:77:b6:89:d5:34:3e:
c9:e9:ff:14:b2:8b:ec:1f:99:e3:1c:40:fd:d4:dd:
83:c8:a0:90:e4:29:2b:95:7a:5d:50:14:5d:a4:fe:
f4:41:72:f0:a9:60:62:5f:e7:1e:1d:f4:7d:65:59:
24:8f:a8:27:27:ea:1c:05:18:11:65:6b:75:f0:c3:
be:d6:92:93:a5:76:24:4e:4b:c3:15:51:2b:55:b2:
25:1c:26:c1:4f:b3:bc:92:37:1a:cc:42:35:f1:c1:
a0:e4:bb:4b:66:f1:c4:86:96:64:ab:5f:3c:b0:56:
b3:48:cc:5a:dd:90:d1:04:53:35:4f:26:b0:03:4d:
89:25:fa:49:4b:0f:56:b9:23:7f:56:a7:2b:d6:bf:
41:44:2a:42:5a:a6:d8:72:d9:38:5d:46:bd:2e:5b:
c4:8a:ec:28:6e:2c:a5:51:d6:30:1c:6e:83:c3:d0:
ea:bb:9e:20:82:1f:e0:ad:da:52:44:e7:67:20:5a:
8a:f1:6e:7b:f9:9d:a1:16:7a:d1:b8:72:c9:85:39:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:3B:64:6B:96:46:B5:67:A1:4E:E7:78:FD:27:B7:22:8B:EF:CB
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/mxU7ZGuWRrVnoU7neP0ntyKL78s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.39.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5d:90:10:f1:cc:6e:5d:4a:5b:75:dc:51:ab:10:5d:0d:43:
49:c4:44:78:6d:de:9a:cc:c7:a3:eb:7e:58:c4:f8:a2:ed:a8:
ef:fb:f2:87:02:e5:a8:b2:01:5c:73:0f:d2:f8:59:1f:23:4a:
bd:a7:43:55:86:a0:f0:a2:76:ee:81:ff:da:a7:6a:f2:b6:2d:
ac:3c:a5:0e:9c:09:33:b4:41:6f:b9:59:88:75:79:aa:52:1c:
26:f2:ef:b6:c8:2e:56:b7:d1:64:65:94:6f:94:84:71:b1:c3:
4b:b5:5b:d1:39:8a:cb:4a:34:46:13:3e:c9:da:d0:10:d9:7d:
e4:79:63:96:e6:46:34:f0:16:6b:a4:ab:54:28:31:cd:95:f6:
68:d4:79:54:2f:8d:5e:b3:9a:fd:ff:27:1e:3a:5c:28:e0:20:
e6:d5:1b:f0:43:99:63:e5:71:b0:e0:82:99:95:ed:e8:68:b1:
9d:15:7c:3e:0d:28:46:46:80:3f:98:43:a5:66:ec:83:df:ff:
34:79:d3:af:60:4f:88:dc:bd:28:c0:91:8d:dc:17:50:c5:a8:
cb:0e:f7:28:3f:ec:05:33:cf:b5:94:c5:07:60:93:32:ae:2b:
18:4c:74:9e:27:4b:36:37:7f:bc:58:d5:c4:2f:a5:e3:f1:1a:
3c:ba:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net