Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa
File: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (raw, json)
Hash identifier: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=
Subject key identifier: 31:84:8D:21:06:14:69:20:BC:B2:CE:C4:B7:02:F1:87:40:82:91:9B
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 01941FFAA01E3FA9B8EDFCC40324D22B921E
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57645
IP address blocks: 91.234.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:1e:3f:a9:b8:ed:fc:c4:03:24:d2:2b:92:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31848d2106146920bcb2cec4b702f1874082919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:84:ec:fa:c0:73:2f:49:f7:04:6d:52:8c:
6e:5d:b4:a0:1d:8e:96:48:20:d7:78:11:cb:18:ae:
21:04:b7:03:ae:f5:81:cc:ef:f4:85:82:47:d6:67:
2a:5e:b4:63:04:34:e1:78:33:e7:29:6b:e4:8a:96:
ea:13:f0:36:69:34:47:6b:17:e9:8b:47:05:d7:ca:
32:1d:82:b2:2b:cc:a7:f3:e7:4a:a4:93:35:3b:0a:
41:a4:fd:c7:5f:b7:c5:49:45:70:12:4e:6c:b9:be:
59:3b:61:a1:2f:76:77:64:89:68:98:65:1e:6b:bb:
94:f4:e8:6d:1f:32:16:79:a7:a0:7b:da:e2:63:41:
4c:a4:77:67:7b:38:1d:1d:89:3d:ce:5b:c9:83:2f:
31:08:1b:ea:bb:48:42:5f:e7:5f:01:53:0c:91:7c:
47:e3:6d:e3:bc:9c:14:9a:ea:30:44:71:ca:10:a7:
c1:bc:89:ef:74:b0:f2:9f:f5:27:ff:21:2d:6c:f3:
a0:c0:56:92:b3:8a:2c:d3:8a:6d:48:12:b6:0a:72:
74:dc:41:e6:b1:26:bd:fc:96:39:27:e1:f7:f8:f3:
f8:a0:e6:3b:7f:6d:d2:b7:25:17:38:14:5c:17:af:
ad:3b:55:25:11:1c:d9:16:2b:df:48:ea:19:99:23:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:8D:21:06:14:69:20:BC:B2:CE:C4:B7:02:F1:87:40:82:91:9B
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f3:2e:f2:22:6d:76:69:ba:cf:8e:5c:2c:1a:10:f7:b0:3a:
d5:69:29:04:2a:99:73:86:db:cb:9e:c9:79:1f:42:d5:b0:b7:
b9:1b:0c:66:d6:8e:b9:cb:0e:af:97:fe:46:13:ce:dd:98:29:
57:0b:b6:25:3a:bc:53:ff:aa:21:56:38:52:72:5a:b9:a0:03:
ca:db:dc:57:a5:83:c1:4d:76:39:93:0a:0c:78:98:8b:9a:13:
3a:2f:48:5d:d7:db:ac:c7:ae:96:62:e9:b8:80:ab:f8:ae:cb:
27:fb:92:cf:32:3f:5c:7c:17:fe:17:43:03:74:b3:7d:a5:eb:
d0:80:04:df:9d:65:fb:a4:0e:a0:2e:dd:53:0f:95:47:06:f4:
3e:fc:10:79:d6:f9:b9:dd:f8:b1:7f:56:bf:43:24:af:0c:d8:
93:16:58:31:e3:2a:2d:5e:84:9d:d3:c7:d8:b3:f2:57:63:43:
1b:5d:4b:7f:65:63:fa:ca:e4:b2:fd:2c:e9:f1:e3:07:42:31:
eb:4d:54:d2:c1:f1:e1:bd:3b:30:0a:dd:5c:ca:b9:c1:f0:64:
15:34:06:62:dc:65:57:86:b2:d7:6c:7e:b9:2f:ad:f8:9d:f4:
0e:74:4c:bc:7c:1a:9d:95:a4:6c:e2:b5:42:29:21:a7:72:1b:
b6:eb:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net