Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/mprfUYWLFFvcoporgivp8S18oz0.roa
File: mprfUYWLFFvcoporgivp8S18oz0.roa (raw, json)
Hash identifier: uZGl5TRJLtjM+YCzDi4j+2EG/6oM3QIc/9AdR4GUda8=
Subject key identifier: 9A:9A:DF:51:85:8B:14:5B:DC:A2:9A:2B:82:2B:E9:F1:2D:7C:A3:3D
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 0194258FA44DC948F3795B309D2F79DAB0E1
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/mprfUYWLFFvcoporgivp8S18oz0.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203500
IP address blocks: 185.22.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a4:4d:c9:48:f3:79:5b:30:9d:2f:79:da:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a9adf51858b145bdca29a2b822be9f12d7ca33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:96:04:4e:56:8c:25:1f:5c:f6:dc:d2:c9:
d3:63:b3:7d:61:c3:1f:0d:cc:b7:96:56:73:07:c7:
b8:2f:a5:7d:8a:84:15:aa:2d:2a:0d:ba:16:17:b1:
6a:fd:5f:43:af:d2:20:08:02:32:d6:44:1d:f3:34:
67:f3:de:e5:7d:f1:ee:e1:2e:d1:9f:d0:57:ed:af:
ec:2a:26:cb:42:1f:aa:43:f0:38:ab:12:b1:50:0f:
a2:d7:98:e9:25:f1:26:41:c7:06:07:07:b8:06:99:
a5:a5:ad:d4:8b:78:e5:7f:39:09:0c:13:fb:ce:53:
25:66:e3:77:bc:61:68:d4:2d:28:25:be:99:a0:3e:
6a:84:e7:5a:e0:8a:59:59:07:40:9b:02:3e:fe:ae:
45:85:48:5d:d9:33:9b:ac:64:3f:f6:a1:a0:5e:3e:
f8:09:c9:9c:0d:4f:3f:67:02:da:20:ca:99:c4:a1:
2d:98:80:74:f7:f8:f7:00:d0:82:55:00:41:d8:59:
d4:97:07:6b:28:6d:47:0a:da:c2:1f:70:44:2a:87:
2f:12:0e:b8:7b:ee:70:d6:c7:07:0e:77:f8:13:14:
d6:19:75:8d:fa:f5:36:47:d9:e7:b8:fb:5c:95:25:
08:e5:0c:5e:e7:11:7d:b8:50:04:d4:65:a8:cd:28:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:DF:51:85:8B:14:5B:DC:A2:9A:2B:82:2B:E9:F1:2D:7C:A3:3D
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/mprfUYWLFFvcoporgivp8S18oz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.130.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d5:05:ad:cf:82:0c:b2:75:43:fc:c1:5c:0c:ff:0b:02:15:
97:44:28:1e:94:94:c6:a3:b4:ec:80:4b:9e:36:06:30:cb:71:
70:5e:bc:93:c5:66:cf:a7:90:5e:7e:9f:38:ee:af:75:a3:9d:
28:6a:3f:03:b8:c4:ff:92:7b:9d:f8:5c:0a:b0:cd:9f:03:39:
a9:99:4c:26:4b:ed:18:35:ba:30:f2:8c:50:52:40:95:08:23:
6f:c6:cd:17:b6:a1:40:41:d0:d5:90:e5:13:97:24:12:08:9c:
62:d4:1a:6e:98:ed:0f:73:0a:39:fe:c2:4e:84:aa:52:ee:fe:
89:d7:6b:f0:a3:39:af:61:52:92:91:77:98:31:e6:d9:d4:82:
f3:24:e0:8f:74:0c:50:e8:81:ed:e4:cb:77:dc:be:00:d1:0c:
6c:1a:3e:fb:45:f9:1f:4a:7f:63:de:cd:b9:36:06:42:84:6f:
f1:d3:df:29:1b:65:e6:e0:30:18:5d:9b:eb:fd:e0:cc:d3:64:
67:7d:45:1d:f9:7d:dc:3f:a0:6a:26:32:b3:7f:c4:58:35:4e:
cb:b5:06:e1:d5:8a:5d:53:bf:ab:b3:61:49:29:78:38:25:59:
9e:37:72:42:ce:15:90:69:b7:51:7a:8f:97:5f:91:0f:a9:99:
79:f9:e2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net