Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/MGnicurHTjlOJCX6LW36oHU9Ec4.roa
File: MGnicurHTjlOJCX6LW36oHU9Ec4.roa (raw, json)
Hash identifier: GzvJKFtksjoNmYlsWqlKSz46VONc2OFZ/3Ty5Q2V3a0=
Subject key identifier: 30:69:E2:72:EA:C7:4E:39:4E:24:25:FA:2D:6D:FA:A0:75:3D:11:CE
Certificate issuer: /CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Certificate serial: 6EA1
Authority key identifier: 34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/MGnicurHTjlOJCX6LW36oHU9Ec4.roa
Signing time: Tue 25 Jan 2022 18:23:32 +0000
ROA not before: Tue 25 Jan 2022 18:23:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 91.226.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28321 (0x6ea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Validity
Not Before: Jan 25 18:23:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3069e272eac74e394e2425fa2d6dfaa0753d11ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:c2:c8:e3:e4:89:7b:2b:99:8d:4d:f9:3d:
8c:7b:18:45:9c:34:2b:63:cc:6f:d2:d2:ca:ba:56:
19:b9:6f:2b:28:f4:69:e0:a6:d7:66:85:87:55:a4:
14:f5:51:ec:f8:79:15:5f:c9:3b:1a:44:75:87:d8:
81:b8:b0:a2:26:0c:46:ed:a8:6b:7d:5a:8c:d3:35:
e8:8c:a4:d5:7f:0c:46:37:d7:d7:ff:90:5c:8e:85:
f5:83:64:d5:f6:cd:f0:19:ca:c7:fd:12:53:14:39:
98:15:a1:f9:c4:0a:f2:fa:f7:6f:24:cd:bd:0f:96:
92:23:33:fa:4c:08:2c:cf:49:d4:fb:d5:09:68:76:
69:fc:7f:bf:f2:64:d8:c6:e3:00:27:aa:12:b6:7c:
e4:7f:29:75:15:88:cb:57:f6:b2:fc:7f:63:6e:4e:
30:76:55:9a:61:6b:98:24:d3:90:ee:fa:3f:cf:ea:
a5:e8:cb:1d:98:62:6d:9a:f0:d3:10:e6:d6:61:88:
1a:47:bc:d6:af:20:d2:89:93:1e:63:39:7c:1f:19:
30:5f:da:0c:62:86:d6:d7:7e:14:1d:cf:9a:ec:4f:
56:f7:bf:73:2b:92:69:82:89:3b:c3:d9:54:21:5b:
a3:31:ad:44:76:b1:99:a9:02:68:5e:d9:ae:4d:b8:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:69:E2:72:EA:C7:4E:39:4E:24:25:FA:2D:6D:FA:A0:75:3D:11:CE
X509v3 Authority Key Identifier:
keyid:34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/MGnicurHTjlOJCX6LW36oHU9Ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.247.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:27:0c:1a:5b:b3:44:78:d1:90:61:ed:4a:b4:8f:e0:ae:c5:
63:02:2e:6f:00:d9:0c:d4:be:55:67:0e:be:8c:d4:c9:4d:5c:
6d:5b:13:1d:3c:be:2b:6f:3b:5f:ed:99:bc:09:e1:09:92:a5:
9d:d0:31:21:4b:b3:b6:9f:cd:11:a0:bb:db:b8:53:3d:d8:4e:
b0:7c:6b:bb:2d:db:85:27:fd:1f:1a:1e:7b:9d:b2:42:59:c3:
64:55:db:8e:51:9a:7c:e6:06:80:5b:35:d9:de:84:bc:2f:62:
3b:6b:aa:92:aa:80:e9:32:92:49:18:80:fe:6d:c0:36:2a:53:
19:84:18:2f:e6:be:04:0b:60:08:f7:1b:0b:a8:62:c1:8b:02:
ac:76:86:20:33:3f:96:38:24:29:49:eb:db:9d:4b:63:b1:63:
4c:cb:ac:27:00:c3:06:68:81:8b:94:f0:d8:e1:25:a3:b9:dd:
67:dd:0e:73:2b:40:b4:d2:e7:7e:e5:35:2d:5b:1d:39:95:02:
19:38:78:fc:86:3e:c9:75:d1:af:fb:03:1a:1c:99:3b:c5:12:
89:cb:01:30:bd:ed:c3:64:b5:eb:b5:4f:da:d8:66:de:a6:a6:
2b:42:93:45:1b:78:16:03:17:fa:91:f1:54:64:d7:7d:49:c9:
af:0f:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org