Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/MnAFAkCtgzLcYcNFwN10QWcGsK8.roa
File: MnAFAkCtgzLcYcNFwN10QWcGsK8.roa (raw, json)
Hash identifier: 6b6kNF5nIgi+BcUotmCWsx7IX4qtT26omA/Wf9SJHJA=
Subject key identifier: 32:70:05:02:40:AD:83:32:DC:61:C3:45:C0:DD:74:41:67:06:B0:AF
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 01942521B4BF45BD113D4014E2112DA5D828
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/MnAFAkCtgzLcYcNFwN10QWcGsK8.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56816
IP address blocks: 91.228.16.0/22 maxlen: 24
91.228.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b4:bf:45:bd:11:3d:40:14:e2:11:2d:a5:d8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3270050240ad8332dc61c345c0dd74416706b0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:1c:2c:9c:45:90:33:88:94:58:cf:6c:92:
ed:fa:1f:41:11:20:3e:3f:b5:bf:01:e1:1d:6d:ed:
99:14:0b:ac:5a:5a:bb:4b:4a:c3:d8:cf:8d:71:82:
fd:0e:a8:40:96:42:03:34:81:d0:c3:cf:f6:13:89:
80:34:e7:2c:d5:66:fc:fe:69:ca:72:0b:fd:ea:f9:
60:11:8a:9c:b8:a4:40:26:cd:bf:23:cc:8a:a6:39:
b8:78:65:c3:98:df:6b:4a:c3:f3:28:e6:78:8e:0f:
5b:3b:e6:c0:5f:3a:26:96:b8:04:57:4e:d4:7a:8f:
05:06:04:44:ca:40:ae:04:49:1c:ee:47:20:c0:44:
15:8f:66:52:40:d3:ae:32:1f:39:e1:9c:ec:f7:b0:
92:23:02:36:d7:f5:b7:83:cc:98:02:76:54:88:c8:
f2:aa:bc:4d:7b:b6:6d:e8:4d:1e:17:da:e0:59:99:
dd:3d:8a:85:61:2a:16:e2:c2:6a:d3:90:c0:12:b4:
c6:c7:a7:a6:b4:ad:0d:a1:02:c5:63:db:6e:40:6a:
af:3e:c8:6e:7f:5c:16:df:f2:9f:63:e3:8f:b4:fa:
30:89:c9:37:c7:4f:a9:c0:a1:eb:84:d9:51:44:08:
f6:55:93:dc:2f:4b:84:7d:58:20:c1:29:16:e1:15:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:70:05:02:40:AD:83:32:DC:61:C3:45:C0:DD:74:41:67:06:B0:AF
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/MnAFAkCtgzLcYcNFwN10QWcGsK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.16.0-91.228.21.255
Signature Algorithm: sha256WithRSAEncryption
5b:4b:02:05:09:6f:9f:30:a6:1b:3b:e7:6a:0e:99:a2:49:b9:
7d:1d:62:3d:40:b4:2e:9f:93:ca:c0:93:c2:ee:36:48:ad:b7:
df:44:03:d0:d4:5c:aa:47:b0:6c:9d:36:59:2b:39:19:3c:60:
b3:4d:5e:4c:dc:06:e6:a9:d1:26:ec:90:39:ce:09:78:42:4d:
80:0e:bc:6a:84:d8:ca:22:19:b7:ed:5a:78:8a:da:c7:6f:7b:
c1:5e:4e:47:7e:91:27:f4:77:e0:cc:69:81:bd:d6:58:15:47:
b1:e6:af:85:2d:e0:20:66:05:85:ad:d8:1d:3d:bd:52:63:ba:
b4:9c:a1:48:ab:d9:37:55:85:be:80:e3:d0:3b:66:6a:96:3d:
aa:89:5e:40:4c:6e:de:65:d9:8a:c9:4f:8a:5f:3d:52:8d:25:
84:23:d3:d9:8f:9f:f1:2d:9d:5f:92:8b:68:bc:a4:d8:bf:d9:
0d:fb:47:d7:fd:bc:2d:04:34:68:ba:1b:65:fa:f7:ac:85:fe:
73:e7:72:2a:99:c3:71:62:99:02:0a:58:3c:32:bc:ac:00:11:
88:73:be:81:06:50:53:38:ad:f7:bd:4f:bf:46:ba:f0:19:47:
80:5d:92:e5:0f:55:e9:1e:5f:ef:34:f5:6b:81:d2:ea:81:27:
84:d8:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:43 2025 by rpki-client