Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/mfyRKyki9KIilboLxZkR4V98u1A.roa
File: mfyRKyki9KIilboLxZkR4V98u1A.roa (raw, json)
Hash identifier: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=
Subject key identifier: 99:FC:91:2B:29:22:F4:A2:22:95:BA:0B:C5:99:11:E1:5F:7C:BB:50
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 0194258F21881979994E83F6629E72602057
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/mfyRKyki9KIilboLxZkR4V98u1A.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43322
IP address blocks: 193.186.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:21:88:19:79:99:4e:83:f6:62:9e:72:60:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99fc912b2922f4a22295ba0bc59911e15f7cbb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:7a:a3:4a:aa:c8:fb:ad:2a:e6:ba:ed:0a:
9f:e9:3e:4e:e5:66:a3:77:61:4c:71:c0:9e:09:6c:
01:9c:a5:1c:43:cb:bd:50:d4:23:6b:6b:6a:1c:e6:
a5:bc:b2:04:6a:67:03:5b:e7:a6:d7:db:d2:2f:f5:
7e:9b:66:27:eb:4f:5c:e8:2d:d0:5b:00:c2:de:c7:
6d:81:9d:bb:ee:9f:ba:5f:5b:f0:21:64:67:9a:2f:
7a:9c:ec:95:33:6f:f2:c8:e5:6a:10:6c:c2:91:56:
40:7f:f3:13:e5:df:da:b8:26:6c:6f:ec:50:8c:65:
50:6b:27:9e:58:00:e9:91:a3:4e:6e:61:24:3d:c8:
d5:7c:e1:c8:0f:9e:93:b5:9c:9f:a8:d4:a7:19:cc:
31:64:48:fd:38:dc:ff:06:0e:e5:a3:96:a3:8e:6b:
2d:02:11:e0:7e:ec:20:fe:ef:d3:32:fa:66:d0:60:
1e:0a:40:77:b0:dc:08:4f:48:84:03:49:4c:8d:f0:
2c:ab:46:cc:41:a2:77:6f:6d:50:c3:b9:0d:02:8e:
6d:5e:28:7d:ad:cc:8c:7f:44:08:08:a6:49:82:6e:
20:23:7d:cf:09:06:56:97:82:3a:25:0b:f9:cf:47:
7b:a9:a9:db:d8:bb:f1:55:c8:78:c8:89:61:d8:9f:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:91:2B:29:22:F4:A2:22:95:BA:0B:C5:99:11:E1:5F:7C:BB:50
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/mfyRKyki9KIilboLxZkR4V98u1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.208.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8f:27:91:ed:c3:5a:09:08:99:5c:43:4b:a6:bd:f4:08:35:
ec:a6:8f:26:2f:73:03:f7:a8:6a:d5:16:7b:93:44:73:08:04:
af:89:65:3f:5c:97:4b:87:fd:09:7e:b3:38:2b:cf:8c:62:3c:
d3:b2:7b:c6:d2:f1:72:dd:77:e1:75:ed:36:69:a4:a3:c7:82:
6d:78:8f:d0:ac:bc:ee:7e:b8:be:6d:4f:64:23:e3:af:17:67:
b2:50:51:32:39:5d:7e:3a:aa:5d:2a:62:f7:a0:fb:67:6c:ae:
9a:fc:a9:70:e8:1a:ba:84:86:94:68:57:23:90:f2:0f:84:d1:
d0:cc:67:69:c9:1e:b5:3e:4d:d6:8c:60:30:76:cb:ff:a4:01:
f3:47:4b:1c:c3:02:47:47:3b:d9:76:96:ad:84:d5:f1:f5:87:
f0:c6:2c:ea:19:97:97:5c:bb:ed:ae:6c:05:0e:42:73:e7:ec:
48:3b:2c:33:68:43:f0:50:af:bc:ab:d9:8e:3e:7c:8a:82:09:
24:54:5c:7d:2b:22:15:75:16:8b:cb:4e:9d:4b:d1:26:dd:ff:
ad:e1:10:4c:9e:0d:b9:3b:16:6e:08:2b:a9:fe:a8:64:8f:28:
5a:da:f3:5c:6d:06:e9:f4:89:de:11:cd:71:e1:10:10:cf:8a:
a2:86:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net