
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa
File: Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa (raw, json)
Hash identifier: FbjTDRIPu8bBy/5KLYHNgVHrWy/v2L+xeWuUUm4Xmek=
Subject key identifier: 32:89:3A:FC:5A:A2:89:1E:70:60:61:16:64:14:EC:F3:17:9A:56:84
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 01941F8C8290299B84610665EB7C8F279029
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47411
IP address blocks: 195.43.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:82:90:29:9b:84:61:06:65:eb:7c:8f:27:90:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32893afc5aa2891e706061166414ecf3179a5684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:51:63:78:f8:4c:82:01:4d:ce:32:29:30:
f1:7a:2e:12:95:da:25:f1:8c:0f:32:96:ad:4d:c6:
d2:03:5c:85:e9:ea:52:27:30:80:7e:b2:75:03:af:
e8:02:d3:12:be:07:d7:5f:77:2b:f2:22:37:a9:e9:
d0:3e:32:45:53:ed:8c:3e:ce:34:c3:3b:56:da:b2:
4f:82:d4:33:9a:49:29:18:e4:9e:24:3e:88:02:97:
60:8f:54:3f:8b:be:d6:61:e7:cf:18:19:cd:6c:ae:
91:c3:9a:3e:f1:84:69:2a:52:aa:0a:9b:ed:56:b1:
8e:78:49:a2:93:7d:45:4c:04:6e:81:aa:16:14:93:
0e:c4:94:be:48:6a:62:0c:dd:fb:44:9c:0a:08:9f:
56:61:dd:d3:c2:71:c0:e2:b4:23:6c:74:a2:58:5e:
e5:95:b4:37:81:c6:25:bf:23:63:ae:65:23:e8:a2:
37:54:18:26:c7:27:1b:7c:33:75:b3:ee:48:d7:bf:
de:9a:40:1f:f6:52:75:56:3c:b6:24:15:7f:60:66:
07:75:33:e2:3b:fb:50:98:ee:de:d0:f0:21:53:16:
82:6c:dc:38:10:84:ff:dd:9c:6e:16:f2:3a:f5:14:
94:8b:0b:2e:9d:82:35:5d:bc:04:84:2a:75:35:96:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:3A:FC:5A:A2:89:1E:70:60:61:16:64:14:EC:F3:17:9A:56:84
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/Mok6_FqiiR5wYGEWZBTs8xeaVoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.152.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6d:dd:ac:62:79:cf:33:b5:47:e4:d3:90:f7:10:b1:e2:22:
18:ad:e7:04:90:91:2d:d9:c3:aa:5f:13:b2:13:cb:f4:8c:88:
0f:cc:77:c2:ef:cd:34:ba:3b:12:eb:80:1f:50:cc:b9:34:ff:
7e:7e:16:ef:6b:3e:96:91:a0:dd:db:a8:86:74:ac:1f:7a:24:
49:68:fe:69:78:b6:c1:63:c6:1c:4b:f8:bc:a7:8d:37:ee:28:
7b:75:88:3e:23:16:90:08:35:4b:8b:c6:98:e6:9c:23:b2:c0:
00:23:86:47:80:13:df:2a:3b:0a:17:5c:60:1d:6d:25:45:59:
8d:7b:62:d1:a4:ad:2b:6c:71:20:50:69:bb:e8:75:fa:c6:f8:
f5:6f:8a:a9:29:7e:6b:73:65:65:17:72:13:79:23:fd:3a:1b:
3b:fe:db:e7:16:42:a2:4c:e0:c0:64:7c:a3:1e:df:2e:48:fb:
8c:7b:ee:54:cb:5f:ac:71:8a:9a:67:26:a9:e2:3a:55:47:3b:
9e:05:19:3d:49:ac:d3:a9:10:e5:45:55:c9:a6:cf:71:cf:54:
70:33:2e:a9:c0:14:26:c5:d3:26:59:9e:cc:39:25:c9:35:44:
74:b3:15:3f:cd:43:33:ea:ea:28:fc:40:01:8e:0f:25:70:f8:
97:ca:35:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjIKQKZuEYQZl63yPJ5ApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDA0MTYxOTAyMWUzNjMyOGFkNTg5OGU4OTk3ODcwNDZi
OGYwZjkwHhcNMjUwMTAxMDE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjg5M2FmYzVhYTI4OTFlNzA2MDYxMTY2NDE0ZWNmMzE3OWE1Njg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGNRY3j4TIIBTc4yKTDxei4Sldol
8YwPMpatTcbSA1yF6epSJzCAfrJ1A6/oAtMSvgfXX3cr8iI3qenQPjJFU+2MPs40
wztW2rJPgtQzmkkpGOSeJD6IApdgj1Q/i77WYefPGBnNbK6Rw5o+8YRpKlKqCpvt
VrGOeEmik31FTARugaoWFJMOxJS+SGpiDN37RJwKCJ9WYd3TwnHA4rQjbHSiWF7l
lbQ3gcYlvyNjrmUj6KI3VBgmxycbfDN1s+5I17/emkAf9lJ1Vjy2JBV/YGYHdTPi
O/tQmO7e0PAhUxaCbNw4EIT/3ZxuFvI69RSUiwsunYI1XbwEhCp1NZbAcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDKJOvxaookecGBhFmQU7PMXmlaEMB8GA1UdIwQY
MBaAFMgAQWGQIeNjKK1YmOiZeHBGuPD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYt
ZDI5N2RiMjMwYTE0LzEvTW9rNl9GcWlpUjV3WUdFV1pCVHM4eGVhVm9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYtZDI5N2RiMjMwYTE0
LzEveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuYMA0G
CSqGSIb3DQEBCwUAA4IBAQBmbd2sYnnPM7VH5NOQ9xCx4iIYrecEkJEt2cOqXxOy
E8v0jIgPzHfC7800ujsS64AfUMy5NP9+fhbvaz6WkaDd26iGdKwfeiRJaP5peLbB
Y8YcS/i8p4037ih7dYg+IxaQCDVLi8aY5pwjssAAI4ZHgBPfKjsKF1xgHW0lRVmN
e2LRpK0rbHEgUGm76HX6xvj1b4qpKX5rc2VlF3ITeSP9Ohs7/tvnFkKiTODAZHyj
Ht8uSPuMe+5Uy1+scYqaZyap4jpVRzueBRk9SazTqRDlRVXJps9xz1RwMy6pwBQm
xdMmWZ7MOSXJNUR0sxU/zUMz6uoo/EABjg8lcPiXyjXs
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net