Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/MWh5oxD0mlPfv3wl5DDlIllo7IY.roa
File: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (raw, json)
Hash identifier: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=
Subject key identifier: 31:68:79:A3:10:F4:9A:53:DF:BF:7C:25:E4:30:E5:22:59:68:EC:86
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 0194258E9BABE25B34CB530E5843B62ED5BA
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/MWh5oxD0mlPfv3wl5DDlIllo7IY.roa
Signing time: Thu 02 Jan 2025 05:48:10 +0000
ROA not before: Thu 02 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210986
IP address blocks: 88.151.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:9b:ab:e2:5b:34:cb:53:0e:58:43:b6:2e:d5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Jan 2 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=316879a310f49a53dfbf7c25e430e5225968ec86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:1d:0d:bd:71:b1:22:46:d5:87:26:e4:9e:
bc:8d:92:ef:9c:15:a3:bd:fe:87:8b:e3:f0:87:82:
fd:aa:bf:6d:ea:53:ad:6e:2b:6e:43:00:35:a1:78:
86:81:b4:14:eb:14:4a:27:cf:26:f2:c9:b4:3c:90:
5e:8c:ee:1f:fa:2f:2b:8a:ed:ca:65:94:8f:01:3b:
7b:52:ec:dc:de:f5:e2:32:69:1b:7f:70:3f:c3:4d:
3c:94:31:82:cb:e3:8b:4c:c2:d2:df:16:3b:28:2c:
99:2e:77:fb:2d:a1:e5:02:ba:f1:5a:42:0e:1f:79:
da:d8:d5:00:b5:5a:91:44:1d:ec:64:1f:25:83:d4:
d6:69:94:1f:fa:56:20:e0:98:a2:ad:5c:e3:df:bb:
b8:90:ce:36:db:c4:a1:b9:ae:bd:fd:7e:9e:9e:94:
cb:6c:99:b8:96:9d:35:45:24:7a:db:96:48:19:2d:
b6:30:34:1f:5a:d4:fb:da:d7:12:3e:cd:fb:6e:cc:
71:de:6f:49:83:5a:4b:43:a9:de:50:21:ea:15:5d:
60:9e:80:12:11:4b:25:48:0b:18:69:5b:d3:66:dd:
d9:84:ed:07:b6:06:10:72:01:75:77:46:7b:28:74:
5e:2f:9b:37:38:a0:69:15:c1:45:97:02:e6:26:de:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:68:79:A3:10:F4:9A:53:DF:BF:7C:25:E4:30:E5:22:59:68:EC:86
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/MWh5oxD0mlPfv3wl5DDlIllo7IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.113.0/24
Signature Algorithm: sha256WithRSAEncryption
13:54:86:cd:c5:2f:e5:ed:58:20:e7:9b:71:ea:f0:ec:25:3e:
2c:8b:57:98:3f:4c:70:0a:07:a3:db:22:01:fa:5d:81:2a:4e:
fb:f1:8c:2e:50:a8:bd:7b:e5:13:d2:b8:1b:49:30:c9:cd:6f:
c8:0d:5b:48:5d:c3:55:01:1a:44:f8:57:06:1d:a3:64:fd:d0:
c2:4f:b5:1a:19:6a:f0:0a:bc:3e:eb:e9:cf:c6:1d:0c:57:3d:
eb:a0:22:29:35:b7:3c:74:3d:a3:3f:39:81:a5:01:a8:d1:c2:
d3:9f:a7:d5:ef:bf:e4:b3:2b:fd:d2:6f:46:55:47:c7:56:f5:
e6:ec:32:93:40:25:45:86:2f:c0:9e:b3:d7:5c:d1:65:72:7b:
51:76:25:31:c7:6f:bd:d5:89:6e:70:26:c0:f1:b4:f2:79:fb:
ac:e7:cc:ea:6d:36:ba:62:d6:fd:58:2a:be:61:5f:0c:93:3f:
0b:8b:84:61:58:c3:89:1f:65:0f:e7:73:85:7a:bb:85:71:5b:
21:fd:29:89:53:af:37:2d:c3:a2:b9:f4:f9:81:fb:d4:d2:6f:
d2:ca:b2:9f:79:f3:30:63:19:ed:c6:71:0d:7e:0c:66:a2:4a:
6b:84:ea:59:a2:14:f5:b1:74:ce:6a:22:70:a3:e2:95:b8:35:
c1:0b:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net