Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa
File: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (raw, json)
Hash identifier: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=
Subject key identifier: 32:16:27:CE:62:DF:64:3B:CE:3A:94:F1:E0:32:65:0F:CB:AF:1C:0C
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019423D72FEC7A8112D502B7F9BD59AA0221
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197772
IP address blocks: 91.226.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2f:ec:7a:81:12:d5:02:b7:f9:bd:59:aa:02:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=321627ce62df643bce3a94f1e032650fcbaf1c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:b7:05:88:de:01:04:37:84:57:c8:ba:43:
09:55:f5:cd:d3:ff:3c:c7:97:2d:33:c3:0e:bc:07:
6a:4e:0a:0d:5a:81:22:0b:29:6f:d3:77:6e:d1:97:
8b:59:32:71:e8:e8:65:b8:1b:30:dd:84:66:cc:d8:
c7:5a:24:1b:60:6d:3d:21:51:13:02:81:05:16:ff:
ff:c0:e2:e9:fe:46:bb:70:92:e1:56:31:7a:80:91:
b6:f7:0d:f8:67:79:06:f1:6b:cf:24:aa:7f:45:73:
e0:12:4f:7c:1a:f9:2b:25:ee:23:67:43:54:40:00:
b8:5d:95:44:5a:be:89:70:0e:f5:25:08:a9:2a:92:
cd:ae:ec:98:c8:d6:40:3a:ec:93:d7:30:ef:01:12:
28:3e:f2:e9:15:bb:c0:e0:57:2d:5f:05:8f:9e:c8:
4a:34:cf:90:30:04:31:1b:c7:27:07:72:a4:7c:61:
f8:b9:15:46:8c:3c:11:fd:c6:fe:a5:2e:2d:81:c1:
2f:e5:38:33:f1:36:28:54:a4:28:62:ab:62:b5:97:
2b:00:a3:f3:1a:4c:61:e2:e0:25:32:12:a6:1f:bc:
bf:8c:a7:a5:99:c0:e1:a7:c4:9f:e1:64:e6:75:d9:
aa:79:db:ab:e8:da:8d:d2:e0:f7:63:57:db:e3:9c:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:27:CE:62:DF:64:3B:CE:3A:94:F1:E0:32:65:0F:CB:AF:1C:0C
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.176.0/24
Signature Algorithm: sha256WithRSAEncryption
18:06:00:c5:a8:4a:53:63:0d:a5:b0:f5:2a:d9:c3:8f:44:02:
06:41:8a:a9:bc:cb:ff:7e:bb:bc:78:3a:0c:a1:fe:78:d1:09:
1e:78:06:1b:ca:e3:ae:87:ff:32:53:2d:78:32:34:d7:97:7b:
96:c2:20:89:4f:59:6d:4f:a3:4d:04:80:1f:aa:26:09:18:e9:
c6:4b:61:c3:bc:bd:b5:ef:97:9c:4f:ab:d9:a1:62:d9:18:d6:
a7:7c:d4:36:ac:19:0d:1c:af:65:7e:ec:f7:dc:0d:f8:34:f1:
62:1f:6a:9e:41:93:81:16:0f:21:e9:d1:af:57:67:83:44:9e:
be:08:fa:72:b7:cd:54:f0:7f:24:2a:b4:f8:8d:bb:8e:be:2a:
e9:aa:4b:c1:2c:da:62:e8:cc:e4:c0:b4:3b:e1:7d:87:4e:2d:
97:b1:25:be:dd:a4:fa:97:71:0f:7c:51:cb:7d:7f:21:b7:89:
77:cd:89:2f:9e:dd:f2:43:ff:9c:e5:e8:ea:c0:54:23:a4:55:
c1:e9:f9:2e:c6:9d:c1:64:99:d6:02:fe:3e:9d:2e:d0:eb:f0:
7c:84:7e:70:d3:79:59:d2:8b:b7:e6:0e:06:ae:e2:1a:dd:e8:
9f:d5:b7:83:fb:53:51:64:d6:7b:46:b4:54:ba:35:e3:df:10:
86:86:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net