Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/K9i5BAZ6MzcgF9CzcPcItueT7VY.roa
File: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (raw, json)
Hash identifier: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=
Subject key identifier: 2B:D8:B9:04:06:7A:33:37:20:17:D0:B3:70:F7:08:B6:E7:93:ED:56
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 0194266B3D847581A45CC9DF86AD80BBFD46
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/K9i5BAZ6MzcgF9CzcPcItueT7VY.roa
Signing time: Thu 02 Jan 2025 09:49:09 +0000
ROA not before: Thu 02 Jan 2025 09:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8991
IP address blocks: 192.135.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3d:84:75:81:a4:5c:c9:df:86:ad:80:bb:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bd8b904067a33372017d0b370f708b6e793ed56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:f0:7b:4b:b0:7b:08:05:1b:84:01:5e:48:
83:58:49:fc:99:fc:80:bc:81:e7:fc:18:a2:d5:66:
b4:58:2e:1e:64:b7:bb:a8:8a:54:d8:7c:e2:e4:bd:
95:59:2d:65:d5:d6:21:f2:9e:5e:22:d6:62:46:2c:
ef:e0:71:a3:ee:56:df:01:8e:c9:97:6d:21:8b:7e:
f9:9f:1a:ea:23:47:25:ec:b1:82:cb:44:b3:87:94:
c2:22:fa:4c:9c:ca:47:9b:a3:8e:af:d5:cd:2e:b0:
5e:42:23:ed:12:46:01:5e:0d:a1:64:44:6f:9e:39:
9a:5b:aa:e0:47:57:7b:ab:25:36:97:76:9f:fe:1d:
40:85:61:e9:cf:d3:64:c1:1e:5a:ad:d0:91:16:0c:
58:db:84:4e:8e:7b:15:02:23:87:0c:b3:a1:51:44:
e8:43:2e:49:1d:40:8d:d5:2e:9c:8d:33:5c:7e:73:
30:e1:f3:d0:0f:2d:88:13:fd:e6:05:9c:93:d0:dc:
be:10:81:74:ad:e5:0b:ae:69:ba:5e:54:75:28:07:
52:a1:20:ff:ad:75:30:c3:db:a4:a2:59:93:d7:66:
60:4f:4b:cc:0b:d1:23:7f:79:69:e5:f4:b2:90:a0:
d6:53:af:2e:ba:62:65:30:03:f7:d9:9f:2e:50:05:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D8:B9:04:06:7A:33:37:20:17:D0:B3:70:F7:08:B6:E7:93:ED:56
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/K9i5BAZ6MzcgF9CzcPcItueT7VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.166.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:78:d9:f5:63:4c:58:28:53:37:10:2a:97:0d:91:41:90:00:
e4:7e:a9:29:c0:7f:9b:06:59:32:09:af:e2:3f:d1:c5:ce:cc:
f5:c5:79:32:4c:9a:05:df:6e:02:12:08:70:be:9b:81:d0:82:
f2:f1:64:73:2c:73:a3:c2:23:06:9a:9c:44:18:79:d5:d2:0c:
27:47:c3:e5:f8:f4:99:0e:2b:9e:a4:eb:52:a9:e5:24:61:df:
f3:45:41:92:7f:aa:af:df:7a:49:f6:a5:96:d3:71:f9:bf:35:
6a:0c:d4:6f:17:0f:3e:ab:7a:a0:c5:be:1b:b8:3b:5b:07:1d:
32:21:24:22:4f:77:a4:a6:bb:1c:60:11:c3:9a:4e:38:37:6c:
0b:85:a9:87:23:7b:37:55:e7:07:1c:a5:07:31:97:3b:c5:d4:
dd:b4:3e:47:2f:da:4b:58:42:58:9b:0d:96:cd:bb:23:4f:7f:
68:f1:f6:8c:d4:31:78:96:20:01:be:12:da:99:0c:ab:56:f2:
60:01:da:98:cf:af:52:ac:b9:dd:3a:e1:ad:57:e4:24:d1:e9:
cc:59:96:86:88:d5:76:0a:6f:6a:6a:4f:44:ff:f4:ad:4f:6c:
bb:37:8b:87:35:17:52:bc:8b:6f:44:64:b2:8e:e6:c4:29:44:
ec:a7:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net