Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/kAy4RLfssItqnKihng08SJ24kLU.roa
File: kAy4RLfssItqnKihng08SJ24kLU.roa (raw, json)
Hash identifier: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=
Subject key identifier: 90:0C:B8:44:B7:EC:B0:8B:6A:9C:A8:A1:9E:0D:3C:48:9D:B8:90:B5
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 019424B3A573BAE28D46FCD82A336E1E812B
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/kAy4RLfssItqnKihng08SJ24kLU.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209915
IP address blocks: 2a0b:1300:81dc::/48 maxlen: 48
2a0b:1306:1dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a5:73:ba:e2:8d:46:fc:d8:2a:33:6e:1e:81:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=900cb844b7ecb08b6a9ca8a19e0d3c489db890b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:04:e0:3b:0b:80:19:06:c0:d1:ae:60:f5:
6a:8c:d4:fa:ba:85:75:ee:24:ce:ce:6e:44:6f:eb:
00:85:4a:ea:c1:0a:2f:b9:b4:47:89:fa:a4:81:e4:
a4:7e:fa:1d:31:15:3b:87:55:03:9c:56:6b:1b:16:
7a:e1:75:b9:97:f6:df:32:82:ad:2f:49:a7:24:15:
50:c3:00:23:d7:fb:52:e7:39:d7:b4:ff:65:42:7c:
59:e0:be:72:30:76:da:38:b3:e3:cf:82:43:0d:33:
26:53:56:86:6c:fc:3c:4c:c0:e1:f7:24:a3:09:f3:
a7:e0:f8:92:3e:04:45:7a:8d:31:c8:6b:27:67:c0:
37:e6:3e:a0:55:70:5e:90:ba:92:41:f4:c9:c3:ce:
b6:c1:e3:af:93:4e:20:09:7c:8f:86:71:fb:a4:81:
bc:99:47:3d:79:fd:9e:26:f8:65:af:ae:de:99:40:
52:3b:7e:2b:06:fc:4b:9d:dd:20:64:09:8d:91:9c:
66:b4:ad:5f:1f:75:e0:50:2b:d1:da:8e:34:fd:fb:
fe:d9:9e:21:ff:ea:2b:26:a6:ac:ab:80:a3:f6:83:
d2:6d:91:37:cb:a4:ac:f3:e2:ff:36:4d:33:39:34:
3d:84:cc:c8:67:e4:87:0d:39:d5:02:eb:dc:ea:05:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:B8:44:B7:EC:B0:8B:6A:9C:A8:A1:9E:0D:3C:48:9D:B8:90:B5
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/kAy4RLfssItqnKihng08SJ24kLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1300:81dc::/48
2a0b:1306:1dc::/48
Signature Algorithm: sha256WithRSAEncryption
38:e2:f6:62:58:51:e3:a1:33:a7:90:2e:c1:61:6c:95:01:c1:
d3:e9:08:f2:09:f3:f0:bb:61:df:f3:5e:ec:69:e7:5a:c3:2a:
ec:f1:9f:a8:8e:88:42:fd:31:00:1d:a4:e0:35:0d:80:8f:80:
6b:aa:86:e3:8e:dc:b7:a3:29:6d:11:47:e1:e1:ce:28:81:1e:
05:d0:55:84:a5:35:62:7a:93:3c:7f:51:ae:b9:22:85:26:c4:
8b:28:11:46:43:c2:9a:fa:75:47:96:f8:c5:bb:82:fd:a1:98:
e4:7a:42:e5:44:d2:05:45:7e:e1:60:86:07:7d:93:31:1a:44:
28:e3:93:21:9f:1d:09:29:a4:c1:c7:66:a8:14:19:55:cd:85:
4e:e9:cc:19:b8:99:c2:81:1b:88:ba:7a:39:d9:de:b6:0b:58:
e1:fb:d5:6b:bd:05:c3:33:cb:3b:61:2d:0a:3a:cf:16:3d:8f:
ce:c6:c4:2a:b7:75:0f:39:dd:bb:19:c3:df:27:88:90:64:cf:
83:8d:a4:76:a4:ba:6c:43:8c:8e:ba:90:c5:59:ee:df:14:69:
49:92:a9:0f:b2:03:c3:7a:f1:85:a5:5d:95:8c:56:d6:97:d2:
03:75:af:cd:31:cc:4d:67:1c:6e:e1:29:e9:75:44:a7:04:b0:
03:14:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:04 2025 by rpki-client on console.sobornost.net