Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/mWerV9ecmS13bC31nbnCHc6FJxA.roa
File: mWerV9ecmS13bC31nbnCHc6FJxA.roa (raw, json)
Hash identifier: rKACMdpnyV7aqjlY5sgpyk7TvN/15ypEQqYmvbC0Kys=
Subject key identifier: 99:67:AB:57:D7:9C:99:2D:77:6C:2D:F5:9D:B9:C2:1D:CE:85:27:10
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 019422FC4061D069A64A964E956F5D783868
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/mWerV9ecmS13bC31nbnCHc6FJxA.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41044
IP address blocks: 194.24.228.0/23 maxlen: 23
194.24.228.0/24 maxlen: 24
194.24.229.0/24 maxlen: 24
217.113.192.0/20 maxlen: 20
217.113.204.0/24 maxlen: 24
217.113.205.0/24 maxlen: 24
217.113.206.0/24 maxlen: 24
217.113.207.0/24 maxlen: 24
2a11:fac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:40:61:d0:69:a6:4a:96:4e:95:6f:5d:78:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9967ab57d79c992d776c2df59db9c21dce852710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:de:62:88:5f:de:21:73:81:4b:45:e1:ec:
06:d1:1c:2f:06:9d:5b:b5:41:42:a7:01:ec:58:11:
36:00:48:81:ad:31:c4:bd:57:65:98:a7:3a:28:2d:
b2:71:68:27:ff:2b:fc:91:2d:4a:cb:23:e0:4b:d0:
94:96:d5:ed:7d:10:53:e1:59:3b:8b:f1:7a:07:d2:
2f:b6:92:42:05:e1:a4:01:ff:69:bf:c2:a5:65:e5:
5a:7e:40:76:a7:8d:4a:d1:5c:d8:0a:47:27:8d:b1:
8e:0f:bf:41:f7:19:47:54:5f:dd:6a:81:9a:a4:16:
36:6f:37:ba:e2:8d:18:14:d3:f2:50:39:d3:7e:09:
f4:1e:81:21:2d:d9:5d:dd:33:71:e6:30:76:cb:39:
4c:c1:14:b9:07:81:3a:6f:8a:50:b7:96:84:88:8c:
80:72:4d:44:fa:2b:a0:f9:32:d9:f8:45:7c:c6:f1:
77:15:41:c3:e6:d7:90:a6:57:0e:aa:52:d3:57:d2:
7d:31:c5:0c:94:64:6e:4c:8d:ad:a9:b0:02:37:31:
f1:d4:f4:81:bd:82:5e:0b:f5:9e:41:91:99:db:8f:
42:ca:1d:3a:6a:1f:c9:7d:e9:0f:ba:31:9c:21:30:
40:9a:fd:2d:16:1e:b4:d7:e9:85:c6:ef:02:8c:2f:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:AB:57:D7:9C:99:2D:77:6C:2D:F5:9D:B9:C2:1D:CE:85:27:10
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/mWerV9ecmS13bC31nbnCHc6FJxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.228.0/23
217.113.192.0/20
IPv6:
2a11:fac0::/29
Signature Algorithm: sha256WithRSAEncryption
84:1f:56:60:a8:81:4c:31:f7:f1:a8:6a:1a:8d:ea:35:16:5f:
5c:72:8b:f4:3f:3c:ac:87:b1:fe:27:98:4e:52:af:83:dc:e2:
6e:a0:5b:e7:1b:f5:c0:ac:91:1b:94:20:43:01:2a:c5:59:57:
d3:f4:b8:99:4a:45:b1:f2:10:94:94:bb:df:ec:0b:15:27:3b:
a7:98:e5:ac:a0:bf:09:c4:33:1f:5d:f3:0b:82:52:68:c0:d8:
db:f4:27:13:46:32:08:4b:39:39:0e:a5:80:db:16:b9:74:29:
48:af:71:ff:51:e1:6e:73:bc:d5:95:cb:57:b6:31:ec:1b:cb:
34:e1:5d:a8:cd:31:9b:f0:7f:85:df:a6:fd:d1:18:7b:52:a0:
fb:5c:fc:2a:57:ea:a2:c9:04:32:62:b8:2d:f3:76:46:32:0f:
1f:86:78:f3:28:06:c4:0d:db:10:06:9b:9e:6d:79:51:82:39:
52:93:7b:93:b8:50:fd:aa:76:00:c9:1e:82:46:34:42:a4:57:
30:a3:52:c3:ab:2e:cd:6b:87:56:57:63:ba:7f:ba:bf:4f:af:
1e:02:d8:d9:fc:3b:49:14:8f:94:05:27:0c:46:9a:92:9f:59:
30:39:a7:26:8e:95:5b:7d:c3:62:ca:ea:e7:d4:09:57:c5:76:
3e:cc:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net