Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/MI6QTYgXUnVHZJtFKBJ6j87d9nY.roa
File: MI6QTYgXUnVHZJtFKBJ6j87d9nY.roa (raw, json)
Hash identifier: ogLPbxQnwTSRD4Ngu1+xrXPhGTFDPzl73EchbVTj+Fk=
Subject key identifier: 30:8E:90:4D:88:17:52:75:47:64:9B:45:28:12:7A:8F:CE:DD:F6:76
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 019542B0911CF9B2C8546F4AD6AB1DFB680E
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/MI6QTYgXUnVHZJtFKBJ6j87d9nY.roa
Signing time: Wed 26 Feb 2025 14:37:02 +0000
ROA not before: Wed 26 Feb 2025 14:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12686
IP address blocks: 91.199.205.0/24 maxlen: 24
194.8.224.0/23 maxlen: 23
194.8.224.0/24 maxlen: 24
194.8.225.0/24 maxlen: 24
194.145.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:b0:91:1c:f9:b2:c8:54:6f:4a:d6:ab:1d:fb:68:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Feb 26 14:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=308e904d8817527547649b4528127a8fceddf676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:1c:1b:fb:1b:28:0b:43:cf:e2:72:00:e9:
c4:fc:fa:1e:80:65:88:61:23:6d:a6:a7:f0:26:e1:
ba:84:1a:00:9e:b6:e0:c3:9e:de:ed:83:d4:91:9e:
96:ff:aa:de:9d:8c:8e:96:ee:a8:48:aa:6e:39:b1:
20:1e:3b:02:b1:42:37:e9:b0:45:b9:5c:b3:9a:ec:
4a:4a:2d:e8:4c:af:f2:49:47:70:f2:0d:e4:25:36:
96:83:82:5f:e1:3e:75:d7:19:9b:4f:35:10:1c:e8:
d3:b5:c9:ba:8d:1c:dd:df:cd:1e:cf:80:50:2e:9f:
3e:cd:3c:a0:6a:8a:4e:6c:55:be:57:4b:a8:3a:05:
23:15:fa:f0:32:8c:31:41:f9:98:2e:29:4a:7c:87:
16:c6:ed:ff:f3:89:ec:40:ef:24:95:39:e4:2e:d9:
29:1b:04:59:1f:db:7d:b0:65:21:7b:be:2c:47:dd:
85:53:a1:c6:e0:22:26:0b:99:cd:9f:2a:30:b9:96:
72:53:3a:88:c4:c9:de:8e:45:bb:a6:92:80:38:d8:
36:25:e7:b9:5a:04:67:2b:44:64:79:26:2b:6f:43:
27:85:b3:5e:4e:55:29:18:d6:55:9c:fa:06:b2:fd:
14:da:f8:ea:50:f3:28:ee:e9:26:f5:20:ab:7d:5d:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:90:4D:88:17:52:75:47:64:9B:45:28:12:7A:8F:CE:DD:F6:76
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/MI6QTYgXUnVHZJtFKBJ6j87d9nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.205.0/24
194.8.224.0/23
194.145.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5f:03:b1:a4:45:2d:3a:cf:e6:52:80:82:81:2e:eb:99:f6:
5a:a3:9b:c6:41:a6:64:a8:54:bf:c2:4a:75:69:37:05:f1:47:
c4:32:30:43:75:db:1e:6c:4f:36:7d:80:66:f7:64:e5:34:ba:
2f:32:02:8b:8e:db:7f:b5:5a:16:70:14:45:68:0d:9f:af:5a:
e8:14:97:47:aa:b4:ab:a5:de:48:2f:d7:c4:40:57:12:ef:2e:
a9:1f:d5:7a:04:0c:f2:9e:b3:2d:60:16:3a:85:33:1a:97:9f:
e2:c5:a9:27:66:14:c9:ba:b0:06:6e:a2:44:9d:f2:bc:1b:36:
00:0a:e2:52:9b:07:0f:b6:4b:97:61:5f:45:6f:77:d8:50:18:
c2:b8:08:95:16:b2:db:12:25:b0:d4:3c:0d:98:b7:59:13:d0:
7a:e4:d0:c3:3b:b0:00:56:07:48:b6:fc:5a:3d:90:f4:d3:c3:
9c:b9:fb:df:18:d4:0e:3b:c9:21:97:18:1a:b8:58:a1:4f:50:
c8:57:1a:27:2c:c4:cf:c2:d1:6b:50:ac:f4:cf:2f:36:b6:c4:
24:ab:75:13:0f:ef:85:8e:43:bd:5e:c4:af:a5:05:b1:84:b5:
a4:c4:36:ed:2c:e6:c4:e0:00:ca:24:8f:e7:19:99:48:7a:c3:
b0:70:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net