Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/krakPppfz7flLx069ZARtir4dzE.roa
File: krakPppfz7flLx069ZARtir4dzE.roa (raw, json)
Hash identifier: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=
Subject key identifier: 92:B6:A4:3E:9A:5F:CF:B7:E5:2F:1D:3A:F5:90:11:B6:2A:F8:77:31
Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694
Certificate serial: 0194221FD8E11A795D7AE11E80EB2D10309A
Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/krakPppfz7flLx069ZARtir4dzE.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198915
IP address blocks: 91.240.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d8:e1:1a:79:5d:7a:e1:1e:80:eb:2d:10:30:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b6a43e9a5fcfb7e52f1d3af59011b62af87731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:1e:17:7f:9d:87:8f:7b:28:e0:66:28:89:
5f:ba:39:25:fe:1b:bb:fb:be:b8:69:cf:ef:71:e7:
da:29:47:20:aa:35:8c:aa:64:0f:21:11:08:e7:2e:
9a:37:fd:7f:08:0a:42:d0:3e:cc:bf:92:f5:90:fa:
a1:9f:d0:b2:78:98:5a:a6:4a:17:b5:4f:fe:f7:17:
c8:00:28:18:9b:4d:70:98:61:9d:01:5d:13:19:a2:
ec:1b:c8:79:08:f0:75:ef:20:7d:7f:6f:b7:fe:09:
7d:35:bb:02:88:35:94:e2:7c:03:8c:24:fc:ff:33:
48:b7:b6:65:08:3f:c4:59:2c:f5:1b:eb:14:4f:38:
4d:66:cc:85:a9:25:c7:4f:f0:21:b3:e5:9d:2d:fd:
f9:84:22:74:3f:6a:c6:5b:79:5f:a9:a3:73:9f:30:
eb:88:3a:eb:cf:df:99:e8:75:0c:52:b6:fc:76:9a:
ba:0d:59:67:c3:d2:09:81:38:e0:6c:99:4a:f2:7b:
82:50:d8:8d:85:95:51:1d:15:50:f8:b1:8d:bd:b4:
51:87:21:fe:39:74:07:4b:e2:e6:43:9a:c1:30:c0:
ec:06:ba:a6:b0:d0:af:d0:8d:57:fa:45:73:04:03:
e0:c3:d9:9c:d7:e6:da:e1:1f:f8:12:22:62:b0:37:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:A4:3E:9A:5F:CF:B7:E5:2F:1D:3A:F5:90:11:B6:2A:F8:77:31
X509v3 Authority Key Identifier:
keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/krakPppfz7flLx069ZARtir4dzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.70.0/24
Signature Algorithm: sha256WithRSAEncryption
04:84:d4:32:08:c8:12:3c:43:0f:2a:09:aa:06:1f:93:97:43:
36:d0:dc:6b:9a:26:78:44:1f:2d:9d:80:65:cc:c9:bb:87:6a:
ad:2e:de:eb:d5:b5:4b:02:5a:43:a7:e6:70:3d:fa:7e:91:8d:
8c:ec:18:88:fe:20:3f:ae:9f:a7:6f:e8:e3:25:21:0e:a1:af:
ae:eb:93:03:87:e6:30:68:16:84:b6:c7:49:ae:63:e2:e4:d8:
d0:52:4a:f4:63:5d:e4:71:e7:16:2e:9d:ba:c8:f5:5e:46:8d:
4c:db:cd:94:75:90:36:d0:50:cc:5f:e2:35:4f:6c:60:6a:86:
fd:a8:4e:fd:c7:ba:d1:4f:f6:2d:6f:fb:57:2f:d6:cb:3c:77:
c2:5c:07:cf:e0:ab:ea:f0:53:1c:6f:d3:e5:1b:7e:e9:8e:5f:
3e:7c:95:e2:47:96:24:79:ae:4a:14:2e:af:f3:7a:03:63:ed:
48:ce:c6:d0:e7:37:1a:b7:de:db:4b:e9:6c:ab:7b:3e:a8:5d:
d3:33:1a:7c:f7:79:52:16:01:33:10:86:0e:3f:e5:95:72:ec:
e5:cf:48:11:b6:70:8c:94:5a:94:41:0e:2f:3a:ce:53:9e:13:
30:97:1a:9c:43:d9:36:51:01:76:4b:42:42:61:d8:4f:c2:72:
3e:da:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net