Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mglBNgMdDuQJqu_ome6lp6hFg3A.roa
File: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (raw, json)
Hash identifier: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=
Subject key identifier: 9A:09:41:36:03:1D:0E:E4:09:AA:EF:E8:99:EE:A5:A7:A8:45:83:70
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 0194DF9931FD61A5AB3670498FF63D09D48B
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mglBNgMdDuQJqu_ome6lp6hFg3A.roa
Signing time: Fri 07 Feb 2025 08:49:06 +0000
ROA not before: Fri 07 Feb 2025 08:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209956
IP address blocks: 45.158.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:99:31:fd:61:a5:ab:36:70:49:8f:f6:3d:09:d4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Feb 7 08:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a094136031d0ee409aaefe899eea5a7a8458370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:16:4f:1d:55:d6:42:fe:86:7e:35:d9:6e:
13:28:e6:c4:e2:d6:20:af:34:25:32:6c:bc:44:ca:
6b:af:05:39:47:18:36:09:a3:74:79:eb:9a:9e:7d:
93:17:5c:7e:92:7a:44:0c:a9:83:1f:74:57:c2:86:
4f:87:bd:eb:45:fa:5f:0a:d7:ce:4e:74:7a:9c:62:
a9:2b:d7:5c:f1:a0:8e:cb:bb:f4:d8:4a:89:ab:6e:
6c:c2:20:ce:32:c5:6b:4c:60:2b:06:91:40:aa:c2:
f9:6b:18:8a:07:df:7b:36:c4:30:bd:55:86:9c:62:
59:ab:f6:ba:f7:86:6b:be:f3:2d:35:a0:a9:33:20:
2e:9c:33:39:82:13:b0:50:85:e9:51:f2:20:2f:9e:
a7:ac:54:4b:46:27:d9:3a:88:cb:2f:51:bc:9a:c3:
07:97:8e:dd:d6:de:18:26:82:d5:d7:2c:ba:41:df:
db:e7:4d:c4:37:38:c8:9e:19:f3:74:5b:41:ed:87:
39:0e:dc:fd:50:7c:e4:e7:27:84:ca:fd:6c:7f:3d:
44:49:ca:8d:7c:67:79:e8:81:47:85:a2:8a:58:c4:
7a:c8:a3:8d:c1:ad:60:43:ac:01:a2:26:a1:c4:c3:
94:b4:14:7f:c9:1e:74:e1:a8:39:ea:b4:a7:6e:37:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:41:36:03:1D:0E:E4:09:AA:EF:E8:99:EE:A5:A7:A8:45:83:70
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/mglBNgMdDuQJqu_ome6lp6hFg3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:1f:93:53:2e:41:a1:8d:04:06:e0:d2:a2:25:80:d4:de:
aa:00:f5:1d:03:50:dc:72:48:32:b8:a5:34:49:4a:99:71:7d:
b1:9f:24:56:9c:24:c6:66:bb:76:cb:93:f3:65:ca:94:07:11:
05:d0:fb:e0:e5:25:30:4d:70:08:18:b8:b7:30:e6:e0:b3:bc:
29:25:2c:1c:e1:39:e7:5b:5b:c3:d1:40:14:98:91:40:a2:9f:
c5:ee:35:62:15:49:03:44:fa:29:8b:89:55:4c:21:94:03:4f:
ef:cb:d1:6c:8f:6f:76:2e:6d:df:10:4f:d6:41:7f:b2:f8:62:
07:d3:c3:e9:ed:75:fd:84:c8:6a:ff:5f:6b:8f:e0:f2:22:ac:
f1:95:7c:b4:de:4c:ab:4a:70:06:34:66:a4:66:b9:96:70:1b:
30:08:28:70:a4:b9:b9:b4:0a:60:b3:ec:49:83:f2:c5:ff:f2:
37:d5:f4:0a:46:da:46:f5:14:1e:5b:01:e1:fc:90:ee:7d:af:
eb:8e:b8:5b:91:41:d8:68:8e:a5:94:fd:e4:1a:db:16:8f:48:
0f:ae:5e:be:0b:2b:4b:7a:ea:90:f5:f0:ac:40:63:9a:f6:08:
54:fe:81:28:30:79:fc:5a:46:12:0c:8a:21:a6:a3:d8:01:84:
82:be:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:46 2025 by rpki-client