Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/mW-GeUTpPcmN505mq7SBylbmL1k.roa
File: mW-GeUTpPcmN505mq7SBylbmL1k.roa (raw, json)
Hash identifier: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=
Subject key identifier: 99:6F:86:79:44:E9:3D:C9:8D:E7:4E:66:AB:B4:81:CA:56:E6:2F:59
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019426D9707A5B336291692CE532B4A90124
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/mW-GeUTpPcmN505mq7SBylbmL1k.roa
Signing time: Thu 02 Jan 2025 11:49:31 +0000
ROA not before: Thu 02 Jan 2025 11:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200839
IP address blocks: 185.76.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:70:7a:5b:33:62:91:69:2c:e5:32:b4:a9:01:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=996f867944e93dc98de74e66abb481ca56e62f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:16:1c:c9:b0:a4:67:1c:83:c9:1d:e1:74:
a4:d8:4b:1d:01:b1:ce:57:d1:2c:45:70:a2:7d:7c:
72:7e:11:3f:0a:37:f2:43:f5:d0:8a:78:23:a8:21:
63:ca:c9:1c:9e:c3:c6:c5:a8:eb:44:fb:eb:a5:f7:
e1:69:4a:21:b3:6b:d8:e0:56:1d:f8:9a:4d:8f:ec:
96:8c:0d:a3:18:a9:60:57:6e:a6:54:08:33:51:ce:
07:fb:0b:8c:bf:11:9f:e0:4e:fe:f1:d1:2c:ea:29:
20:7a:83:81:6a:37:be:43:b0:9d:d6:29:27:8e:12:
5e:3f:88:46:6c:62:60:c7:92:6f:08:da:c6:81:f4:
ce:58:65:1b:c8:59:6a:7f:75:ac:59:76:f2:0e:a6:
34:45:c6:1a:3c:2f:ab:92:e0:8d:0a:b3:26:94:59:
aa:82:d9:9c:08:92:6e:da:e1:a4:a2:36:e1:89:bb:
f6:06:56:f0:62:f7:2c:2b:30:6c:71:94:95:68:34:
a2:cc:c5:03:47:77:d5:f8:05:05:8b:b9:af:c5:b3:
95:e7:22:4b:89:96:5f:f1:3a:f6:5e:e0:17:8f:24:
5b:0f:7e:92:33:1e:18:4d:99:6e:e0:dd:27:b7:ab:
6d:f6:d4:1e:f8:89:b8:c3:af:31:f2:71:bb:b4:09:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:86:79:44:E9:3D:C9:8D:E7:4E:66:AB:B4:81:CA:56:E6:2F:59
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/mW-GeUTpPcmN505mq7SBylbmL1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1a:de:cf:35:d8:75:f3:df:f9:02:6a:31:d4:b1:2a:2a:83:
52:30:0e:b4:12:d5:b3:ab:13:ac:a0:20:c1:dd:93:79:2f:18:
4d:74:5f:33:40:f0:6a:80:48:57:2e:8f:30:e1:5d:17:ea:86:
a6:29:38:ed:c4:25:93:b1:0c:a9:73:af:40:29:1b:7f:ec:30:
03:00:31:29:55:57:97:1d:b4:88:97:a8:ad:f7:5e:0a:5a:af:
70:20:f3:e2:56:e4:81:fe:d0:e7:2f:d7:3f:fe:09:27:80:5f:
93:5c:b6:56:25:3b:fe:49:eb:f1:7d:7a:d3:b8:15:7b:e1:35:
4b:10:49:b0:6e:b9:f4:b8:18:ca:34:49:ff:bc:a4:c1:71:7b:
47:5b:35:42:35:4c:48:8a:71:6e:13:3e:79:f3:36:78:25:e6:
6e:9c:9c:76:58:49:45:a2:05:2d:12:e2:bb:1a:e5:5f:a7:2f:
70:05:bc:c0:fa:99:97:77:c9:f3:57:f4:0e:e8:7c:a5:bb:ab:
ab:00:8a:40:8c:a9:d2:55:de:34:d7:85:53:f9:eb:d4:4e:dd:
d2:d0:7a:fb:ee:bd:a7:58:f3:3f:fb:c1:23:d5:24:e8:1d:0f:
70:b0:87:42:a5:a7:3d:12:0f:11:c4:99:41:8f:a4:de:91:85:
f1:27:0c:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2XB6WzNikWks5TK0qQEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2
M2MwYTkwHhcNMjUwMTAyMTE0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTZmODY3OTQ0ZTkzZGM5OGRlNzRlNjZhYmI0ODFjYTU2ZTYyZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC8WHMmwpGccg8kd4XSk2EsdAbHO
V9EsRXCifXxyfhE/CjfyQ/XQingjqCFjyskcnsPGxajrRPvrpffhaUohs2vY4FYd
+JpNj+yWjA2jGKlgV26mVAgzUc4H+wuMvxGf4E7+8dEs6ikgeoOBaje+Q7Cd1ikn
jhJeP4hGbGJgx5JvCNrGgfTOWGUbyFlqf3WsWXbyDqY0RcYaPC+rkuCNCrMmlFmq
gtmcCJJu2uGkojbhibv2BlbwYvcsKzBscZSVaDSizMUDR3fV+AUFi7mvxbOV5yJL
iZZf8Tr2XuAXjyRbD36SMx4YTZlu4N0nt6tt9tQe+Im4w68x8nG7tAnfAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlvhnlE6T3JjedOZqu0gcpW5i9ZMB8GA1UdIwQY
MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt
OGFjYmZlYTJlY2ZhLzEvbVctR2VVVHBQY21ONTA1bXE3U0J5bGJtTDFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh
LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUxoMA0G
CSqGSIb3DQEBCwUAA4IBAQCKGt7PNdh189/5Amox1LEqKoNSMA60EtWzqxOsoCDB
3ZN5LxhNdF8zQPBqgEhXLo8w4V0X6oamKTjtxCWTsQypc69AKRt/7DADADEpVVeX
HbSIl6it914KWq9wIPPiVuSB/tDnL9c//gkngF+TXLZWJTv+SevxfXrTuBV74TVL
EEmwbrn0uBjKNEn/vKTBcXtHWzVCNUxIinFuEz558zZ4JeZunJx2WElFogUtEuK7
GuVfpy9wBbzA+pmXd8nzV/QO6Hylu6urAIpAjKnSVd4014VT+evUTt3S0Hr77r2n
WPM/+8Ej1SToHQ9wsIdCpac9Eg8RxJlBj6TekYXxJwzz
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net