Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/Mg2I9qAx-Tc56L2Aw-rq3BoCH0A.roa
File: Mg2I9qAx-Tc56L2Aw-rq3BoCH0A.roa (raw, json)
Hash identifier: AfRPI9y7vg4qHFtr0NX2m5ItgCXKXzKTz1NVYhVoflo=
Subject key identifier: 32:0D:88:F6:A0:31:F9:37:39:E8:BD:80:C3:EA:EA:DC:1A:02:1F:40
Certificate issuer: /CN=b846e854187f9332954c60e08c3351afcdf1085b
Certificate serial: 019424450B50503F2437C618F57D8A62C11A
Authority key identifier: B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/Mg2I9qAx-Tc56L2Aw-rq3BoCH0A.roa
Signing time: Wed 01 Jan 2025 23:48:12 +0000
ROA not before: Wed 01 Jan 2025 23:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200780
IP address blocks: 94.231.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0b:50:50:3f:24:37:c6:18:f5:7d:8a:62:c1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b846e854187f9332954c60e08c3351afcdf1085b
Validity
Not Before: Jan 1 23:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=320d88f6a031f93739e8bd80c3eaeadc1a021f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:6a:40:6b:fb:68:34:e7:d2:42:b2:dd:b4:
ac:52:aa:d6:19:2d:97:64:ab:8f:1b:69:4d:aa:8e:
95:1a:c4:a4:1e:ef:aa:01:78:4a:cc:54:fb:77:8d:
eb:c2:71:70:f8:e5:37:55:96:a1:b4:44:0f:b4:32:
41:c2:bf:91:0c:d6:ee:da:7d:36:af:37:99:b2:1c:
68:0d:18:11:86:9b:b8:8a:50:53:40:a0:86:c3:43:
f4:e4:ed:5c:dd:93:11:fa:3f:8f:a6:d2:29:bb:2e:
62:21:46:ee:ec:d7:30:4b:14:16:d4:b5:f7:66:5a:
bf:ab:a5:d4:21:5d:c0:84:8c:2a:14:a4:b3:9c:0d:
cd:b0:2f:1c:00:76:24:66:7d:b9:bf:74:eb:5e:1f:
d2:50:dd:46:f0:21:1c:df:e2:be:d4:17:30:df:18:
3b:61:45:f3:96:1c:f3:36:ae:44:06:f7:98:30:46:
0c:b7:03:22:5d:2e:e3:b5:64:41:b9:a4:e2:db:08:
2e:25:ba:c3:6a:46:93:4f:3b:a0:83:5e:4f:9d:eb:
69:17:56:fb:b0:d5:a3:fd:f8:5c:c2:4a:f5:ff:a4:
5d:f7:d1:ba:33:1d:78:11:04:9b:9a:9b:56:a1:50:
55:3e:a0:0b:4d:82:1e:08:d3:59:c4:83:60:d4:e6:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:88:F6:A0:31:F9:37:39:E8:BD:80:C3:EA:EA:DC:1A:02:1F:40
X509v3 Authority Key Identifier:
keyid:B8:46:E8:54:18:7F:93:32:95:4C:60:E0:8C:33:51:AF:CD:F1:08:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEboVBh_kzKVTGDgjDNRr83xCFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/Mg2I9qAx-Tc56L2Aw-rq3BoCH0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/536374-dc66-48ac-8a1c-e0eab2f39637/1/uEboVBh_kzKVTGDgjDNRr83xCFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:dd:23:ff:b5:17:fe:09:9d:64:10:fb:0e:1a:0f:65:e0:20:
fc:27:f5:ca:74:01:58:92:fe:86:6c:b1:5e:a9:1e:dd:77:86:
9e:54:a0:18:18:a3:7e:b3:38:f0:9e:4e:7b:3c:7b:d5:9a:d8:
8d:a3:a1:ec:bb:93:28:c3:c3:ca:72:5b:31:b5:37:d4:70:42:
11:eb:8c:9d:d8:ca:2e:05:9d:ad:a5:3e:1e:6d:fc:b4:08:c5:
b0:f8:c6:0a:45:cf:16:be:de:d6:46:a9:16:1f:d6:f8:b0:7d:
d2:12:f8:30:6f:c3:5a:ec:b1:18:df:bd:3c:9e:91:8f:61:1b:
4d:9d:d6:4d:a6:ad:01:8d:11:b0:e9:30:9c:5e:e4:c0:49:a6:
14:27:e5:ab:76:05:ec:95:e5:1c:45:e3:dd:4b:13:5b:22:c4:
c1:44:ae:e7:38:bf:68:90:fd:f8:8a:e8:ec:d3:5c:62:72:88:
cf:67:27:1b:f2:43:c7:04:3b:55:bc:56:97:03:85:10:1e:7f:
6f:e5:75:c7:fd:7d:20:ee:5a:88:78:1f:8f:0f:e4:8d:de:d8:
6f:ca:f3:02:6f:40:c2:99:1d:3f:aa:62:77:bf:7a:8d:fa:3f:
a4:39:52:07:0c:c8:8c:b2:e1:7b:9b:2f:3d:d0:09:bb:b9:23:
d8:0c:83:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRQtQUD8kN8YY9X2KYsEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDZlODU0MTg3ZjkzMzI5NTRjNjBlMDhjMzM1MWFmY2Rm
MTA4NWIwHhcNMjUwMTAxMjM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjBkODhmNmEwMzFmOTM3MzllOGJkODBjM2VhZWFkYzFhMDIxZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kRqQGv7aDTn0kKy3bSsUqrWGS2X
ZKuPG2lNqo6VGsSkHu+qAXhKzFT7d43rwnFw+OU3VZahtEQPtDJBwr+RDNbu2n02
rzeZshxoDRgRhpu4ilBTQKCGw0P05O1c3ZMR+j+PptIpuy5iIUbu7NcwSxQW1LX3
Zlq/q6XUIV3AhIwqFKSznA3NsC8cAHYkZn25v3TrXh/SUN1G8CEc3+K+1Bcw3xg7
YUXzlhzzNq5EBveYMEYMtwMiXS7jtWRBuaTi2wguJbrDakaTTzugg15PnetpF1b7
sNWj/fhcwkr1/6Rd99G6Mx14EQSbmptWoVBVPqALTYIeCNNZxINg1OZe1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDINiPagMfk3Oei9gMPq6twaAh9AMB8GA1UdIwQY
MBaAFLhG6FQYf5MylUxg4IwzUa/N8QhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMt
ZTBlYWIyZjM5NjM3LzEvTWcySTlxQXgtVGM1NkwyQXctcnEzQm9DSDBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81MzYzNzQtZGM2Ni00OGFjLThhMWMtZTBlYWIyZjM5NjM3
LzEvdUVib1ZCaF9rektWVEdEZ2pETlJyODN4Q0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufLMA0G
CSqGSIb3DQEBCwUAA4IBAQCp3SP/tRf+CZ1kEPsOGg9l4CD8J/XKdAFYkv6GbLFe
qR7dd4aeVKAYGKN+szjwnk57PHvVmtiNo6Hsu5Mow8PKclsxtTfUcEIR64yd2Mou
BZ2tpT4ebfy0CMWw+MYKRc8Wvt7WRqkWH9b4sH3SEvgwb8Na7LEY3708npGPYRtN
ndZNpq0BjRGw6TCcXuTASaYUJ+WrdgXsleUcRePdSxNbIsTBRK7nOL9okP34iujs
01xicojPZycb8kPHBDtVvFaXA4UQHn9v5XXH/X0g7lqIeB+PD+SN3thvyvMCb0DC
mR0/qmJ3v3qN+j+kOVIHDMiMsuF7my890Am7uSPYDIMH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net