Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/Md8iGia1MbUzqtIWwDExWkmRVgM.roa
File: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (raw, json)
Hash identifier: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=
Subject key identifier: 31:DF:22:1A:26:B5:31:B5:33:AA:D2:16:C0:31:31:5A:49:91:56:03
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 0194236A210F96E1F9AAD1AFD00B8CD2BF39
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/Md8iGia1MbUzqtIWwDExWkmRVgM.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44820
IP address blocks: 91.216.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:21:0f:96:e1:f9:aa:d1:af:d0:0b:8c:d2:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31df221a26b531b533aad216c031315a49915603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:75:0d:fe:e3:bd:67:e2:3e:8a:92:dd:99:
1d:08:78:91:e7:87:62:dd:2c:3c:3e:df:ef:de:89:
ee:b5:c1:d0:9c:96:e8:57:db:04:b3:a6:bd:d5:22:
03:db:2a:b1:38:5d:a3:98:1b:82:14:4f:35:ab:b6:
57:06:42:44:92:e9:c6:81:21:58:07:e7:2f:e9:e1:
15:a3:fb:d2:63:96:0e:04:0e:9a:90:be:bf:b5:80:
d8:88:c7:bb:d0:d1:42:46:0f:e6:66:ff:fc:96:60:
48:94:fd:23:1c:ad:1c:b3:4b:e2:26:a2:20:a4:03:
9f:43:c4:dc:0f:9c:30:88:5d:6a:fa:7e:34:e9:4d:
c0:7a:75:ab:ad:fb:6d:1c:0d:ae:2e:2d:d1:05:11:
a8:8c:00:32:66:93:13:7e:79:71:27:a1:10:fa:88:
f3:b5:44:7c:aa:1b:76:2d:0c:d9:dd:6f:83:49:0c:
fa:d5:ce:b2:bf:49:0b:d6:f9:77:67:11:87:09:d4:
62:82:51:51:90:50:c4:b8:e9:95:64:53:c6:1e:75:
7e:f9:6f:e1:b9:9f:29:09:44:8d:21:d4:b4:34:16:
4c:e8:5f:70:82:35:28:71:c9:c1:ec:75:14:0c:d9:
40:51:fc:12:45:a6:d3:31:98:73:2b:2f:12:ff:ab:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DF:22:1A:26:B5:31:B5:33:AA:D2:16:C0:31:31:5A:49:91:56:03
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/Md8iGia1MbUzqtIWwDExWkmRVgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e5:2b:07:73:22:a5:e0:da:99:e9:26:ea:9e:ee:3c:87:fd:
24:8e:16:10:90:ea:52:e8:7b:6f:ad:75:b4:46:36:9b:ce:d6:
3d:1f:3a:85:ce:45:eb:f9:47:0a:b6:89:64:70:0f:6a:72:9a:
45:5c:be:0b:f5:5c:4f:31:ca:26:ed:60:81:35:4f:a0:73:36:
43:9e:d6:ff:e6:bd:60:d5:7d:1a:05:d8:a7:e4:3b:42:b8:e8:
99:c3:c6:9e:fe:fd:9f:a4:2c:30:34:26:44:23:ed:7c:6e:26:
2b:d4:e6:30:0f:3a:eb:fe:fd:9a:8e:45:74:cc:ce:fe:23:fc:
75:69:c1:f9:3d:89:cd:34:34:eb:d7:d6:5f:da:15:b5:32:bb:
5d:fe:26:d2:b5:98:e3:f5:b7:79:32:cb:cb:85:bf:99:9d:6a:
5d:30:5c:d8:64:ea:9b:b8:4a:6a:34:fc:4f:b2:25:07:1d:39:
93:02:16:8b:9c:8b:2b:b2:b3:30:e7:80:ef:83:44:60:cf:c5:
25:5d:18:af:c4:7b:63:45:83:99:b2:a7:24:fd:4a:1c:07:66:
b5:1d:fe:26:d0:1e:4b:45:3a:0d:b1:5a:e3:ff:4a:83:eb:03:
03:61:4f:c6:06:13:92:dd:da:69:c2:7e:08:f1:ba:dd:0f:f5:
2d:e8:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net