Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/MBLlcLhYtHGkG4-pH-R5GlwmdkE.roa
File: MBLlcLhYtHGkG4-pH-R5GlwmdkE.roa (raw, json)
Hash identifier: UEbjMAE5mR3KPxeQxoML20XehEn/2FsWmJQEVJGoKZs=
Subject key identifier: 30:12:E5:70:B8:58:B4:71:A4:1B:8F:A9:1F:E4:79:1A:5C:26:76:41
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 0193CF4C0A47111D8AB894FFC20D4EF49F4E
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/MBLlcLhYtHGkG4-pH-R5GlwmdkE.roa
Signing time: Mon 16 Dec 2024 11:48:07 +0000
ROA not before: Mon 16 Dec 2024 11:48:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209246
IP address blocks: 185.177.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:4c:0a:47:11:1d:8a:b8:94:ff:c2:0d:4e:f4:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Dec 16 11:48:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3012e570b858b471a41b8fa91fe4791a5c267641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:b2:93:f7:99:41:0d:f7:5b:7f:96:cf:3f:
06:b3:46:c6:34:ba:8a:2d:54:6f:3a:b7:3c:45:ca:
2b:91:74:31:62:e5:77:68:c3:42:3b:ef:b4:e1:10:
c1:f3:91:e0:d6:17:0f:7c:8f:13:de:b8:bc:04:08:
d1:64:bc:5a:ec:42:73:36:02:85:2d:c4:2b:f2:08:
1f:c9:d2:cf:d9:a7:74:5f:b2:99:be:e4:33:51:7d:
ab:83:7c:6d:c4:8a:b5:1b:62:82:92:57:bf:f2:72:
1d:07:87:de:d7:1a:80:4d:49:9d:5c:77:42:1b:d7:
36:0e:bc:c7:02:17:5a:60:cc:c6:8f:d2:06:35:d7:
c8:49:78:3a:3f:60:77:bb:e0:24:7d:0a:14:27:8d:
b4:86:ae:97:e1:5b:57:d8:e8:e3:b1:92:ec:ea:d0:
ec:0d:eb:75:32:4a:fb:a9:ec:ab:32:a9:f1:4f:2c:
8b:9a:00:93:86:50:9f:12:68:8b:bf:04:31:5a:17:
18:c5:7e:01:8b:f0:55:af:a3:03:d7:68:dd:73:d5:
b9:ba:09:9d:5a:07:b2:f1:46:d3:60:4b:3e:2a:e5:
36:20:69:d6:64:54:4d:6b:75:f3:f7:fc:33:ba:23:
b6:f4:c4:a2:92:80:cb:51:ca:72:e1:4c:79:6f:2c:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:E5:70:B8:58:B4:71:A4:1B:8F:A9:1F:E4:79:1A:5C:26:76:41
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/MBLlcLhYtHGkG4-pH-R5GlwmdkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:17:0f:05:26:d3:7c:97:cf:68:7a:73:3a:96:dd:2c:0c:13:
45:ea:35:61:92:18:d0:be:82:6d:3e:f2:10:ba:3d:3a:c3:9d:
a2:64:79:22:41:97:d3:e3:86:c3:78:ea:f4:d7:4b:a7:cf:1f:
7a:0b:7e:ca:ea:7d:eb:b9:fe:40:40:cb:38:f4:fd:b4:6e:56:
be:ae:56:ea:aa:0c:02:3c:04:3f:40:19:68:f7:c6:4c:10:0f:
0c:a4:0a:df:08:0a:fa:9b:92:b0:cd:6e:1a:d5:19:29:85:bb:
a4:89:0b:1f:ce:0b:2f:dc:f3:7d:ef:91:02:6b:4c:3d:90:00:
cc:e4:f1:ee:9e:f8:f2:66:aa:be:53:30:03:58:12:ad:45:8a:
47:7b:d9:2b:c1:82:c2:6e:0b:c6:57:48:61:b5:16:0e:03:ce:
41:ee:af:16:04:55:db:fa:f0:c5:89:3e:b0:66:9a:35:f8:d1:
b6:89:ec:15:b4:42:24:0f:fa:3f:bb:10:e8:1d:14:fb:f2:00:
a3:cc:e4:c6:85:67:3c:60:10:ba:0d:a7:06:3d:b6:93:4c:d8:
50:5d:98:1b:aa:66:e7:d9:4d:bd:2f:23:d3:5f:c6:85:1d:9b:
88:ad:df:32:ed:f9:19:c9:46:41:d5:f2:f3:51:c2:b3:c7:ee:
96:84:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net