Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa
File: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (raw, json)
Hash identifier: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=
Subject key identifier: 2B:E6:09:9B:8C:0E:78:B2:46:F1:A2:7B:28:8E:35:04:B5:80:33:EE
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 0194236A4F6FEDB242CA8E2C661CD65AC85D
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207151
IP address blocks: 185.165.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4f:6f:ed:b2:42:ca:8e:2c:66:1c:d6:5a:c8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be6099b8c0e78b246f1a27b288e3504b58033ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:c1:1e:81:3d:9c:ca:89:ae:87:ef:5d:a6:
b7:5f:6e:17:0c:a5:33:c0:29:24:09:1f:4e:d2:12:
f9:7c:e3:81:01:7e:65:9f:16:8a:1b:a9:2c:c9:f2:
b1:68:75:01:27:30:9a:fb:6b:00:9c:24:6d:c9:47:
a8:29:85:8f:e8:a3:2a:28:05:67:64:c8:ee:2b:ba:
58:85:36:b1:c1:aa:ca:a8:6c:95:73:60:62:36:1e:
5b:57:fc:b7:38:53:9e:a6:4b:f2:41:35:2c:31:4c:
5c:35:c6:af:48:17:8a:c8:28:38:1d:32:ef:49:97:
d1:e6:a3:01:37:29:cb:98:5a:f9:e8:49:86:19:48:
da:91:f7:31:d1:45:60:3a:40:24:47:1e:5b:e4:c6:
43:cc:b3:03:d7:f5:36:f2:73:4e:fd:fc:c8:ae:27:
a3:7b:55:15:cc:a1:02:f6:e4:0a:06:cd:33:db:3b:
c9:6b:18:8f:f3:55:78:e1:d9:88:6e:33:40:2b:6b:
8d:62:9a:1b:a3:17:c6:d9:62:f7:a4:4b:d9:ad:89:
9a:87:ba:85:8e:2e:14:55:31:48:a9:04:23:34:2e:
1b:72:df:bb:4b:c1:29:b3:69:ab:2e:dc:a2:f6:94:
80:f6:70:19:5f:7f:2e:62:c9:c5:be:a6:a1:af:86:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E6:09:9B:8C:0E:78:B2:46:F1:A2:7B:28:8E:35:04:B5:80:33:EE
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.64.0/22
Signature Algorithm: sha256WithRSAEncryption
65:4a:0e:1c:78:84:e1:2f:95:06:d3:d3:d4:27:fe:18:91:f0:
e9:31:ad:02:d1:57:c7:fa:8b:5b:82:5a:b9:ec:c1:a0:8b:11:
f3:b4:85:4a:17:2d:27:14:b3:fa:7a:5b:79:84:b4:82:d1:9c:
bc:df:cc:d0:e2:bf:d7:3f:bb:d1:70:92:92:50:92:d0:d3:1f:
2b:07:53:dc:8d:d6:38:0d:05:d3:c7:e0:64:99:5a:71:d5:8e:
19:5e:01:a9:6c:f7:75:3d:dc:7a:58:f4:34:29:80:6c:39:40:
0c:57:4d:86:1a:8f:fa:b1:c1:d7:d2:9d:f0:67:d1:50:f7:8f:
50:03:65:0e:be:76:bc:9d:20:ca:44:c4:e4:2a:d2:b5:7e:84:
fc:0e:ec:65:17:ed:eb:98:b0:f6:30:48:08:cd:1d:0f:78:bb:
bd:3a:be:f2:1c:6d:81:02:ab:90:e4:83:95:27:f0:ea:95:2c:
2b:74:0d:44:95:c1:4a:5b:d3:8a:d3:bd:cb:29:e5:80:ea:cb:
e7:23:f6:e1:df:21:51:78:80:73:ca:50:b6:72:25:83:e9:86:
b2:54:75:d0:96:09:4d:91:37:39:5f:6c:05:c7:da:8e:ca:3b:
2c:de:15:62:e8:dd:1a:91:4b:07:ec:5f:3a:f1:4e:47:de:dd:
e2:10:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net