Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/K12F-uP3adhB5XYkvRWOwtyWFxQ.roa
File: K12F-uP3adhB5XYkvRWOwtyWFxQ.roa (raw, json)
Hash identifier: 4K99rP4m/GgxDIw4+Su5OB+ocoFQK/2aIqkgeWKmoU4=
Subject key identifier: 2B:5D:85:FA:E3:F7:69:D8:41:E5:76:24:BD:15:8E:C2:DC:96:17:14
Certificate issuer: /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial: 01953BE510884ADE593A1B75F3642A039C9D
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/K12F-uP3adhB5XYkvRWOwtyWFxQ.roa
Signing time: Tue 25 Feb 2025 06:57:02 +0000
ROA not before: Tue 25 Feb 2025 06:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399768
IP address blocks: 92.51.224.0/22 maxlen: 22
92.51.224.0/24 maxlen: 24
92.51.225.0/24 maxlen: 24
92.51.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3b:e5:10:88:4a:de:59:3a:1b:75:f3:64:2a:03:9c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Validity
Not Before: Feb 25 06:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b5d85fae3f769d841e57624bd158ec2dc961714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:43:cc:0e:ce:0e:69:a7:53:57:71:dc:95:
b1:d8:bd:7a:00:6d:22:d6:42:57:ed:24:27:18:c7:
cb:56:d7:e6:29:96:af:a2:91:1c:a9:63:53:b5:6c:
62:70:27:8c:42:68:41:69:bd:71:30:00:60:3b:de:
e0:7e:cf:1a:0e:f5:bf:ff:8f:af:19:09:c8:71:cc:
56:2f:38:b0:1c:aa:8b:a1:08:2e:50:1a:51:29:f4:
76:60:e5:eb:38:1a:cb:e1:7b:bd:98:1c:28:8a:2a:
a2:d5:76:b1:e6:20:c5:35:36:14:fd:f8:7c:b1:3f:
5d:9c:e9:7d:70:91:64:9b:ac:e6:5d:a9:f8:02:81:
ff:5f:88:78:70:65:f4:37:a9:b4:be:44:35:13:68:
3f:f9:3f:f4:a2:d6:3c:e2:45:80:1c:56:a9:1a:cf:
21:78:6a:08:ce:79:98:8c:c3:01:ca:68:2f:65:9b:
4d:e0:59:d3:b2:27:d2:2c:3b:50:bb:ce:5f:1b:8d:
f6:e5:fd:a9:f6:59:93:51:0f:14:83:c3:74:2f:68:
60:0b:bb:d0:e5:a1:dc:3a:18:8e:aa:43:05:c9:79:
88:28:c5:b2:54:27:77:fc:b4:97:2d:a6:0a:2d:e0:
a8:6d:3f:14:17:11:1c:be:fb:1c:3f:8b:20:c8:4a:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5D:85:FA:E3:F7:69:D8:41:E5:76:24:BD:15:8E:C2:DC:96:17:14
X509v3 Authority Key Identifier:
keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/K12F-uP3adhB5XYkvRWOwtyWFxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:a8:ee:34:3b:e1:33:da:c7:17:fb:3a:19:ab:34:43:f2:e0:
91:4d:14:a3:94:cc:cb:fa:ae:d5:f5:cf:b3:8d:4a:7b:3c:86:
d6:41:63:47:b6:d3:d4:ff:a8:a3:27:de:bf:9d:0c:c8:80:2d:
06:b7:70:e3:1d:d2:ef:91:cf:9f:f6:b0:a6:90:58:06:ec:9c:
92:5c:63:79:74:06:67:9b:73:cb:6b:96:c9:11:9c:a3:fd:9e:
c6:77:76:e7:e6:47:d8:66:2d:9a:f9:d0:48:a6:3c:66:f6:03:
53:04:cb:08:20:de:a7:36:51:3d:d9:ad:6c:b8:19:4e:0b:75:
61:7d:5f:ab:ff:eb:b8:47:26:46:2c:37:2a:cd:f0:c0:c5:04:
14:d0:f5:78:e9:43:fd:9e:bd:53:07:4e:65:27:81:be:64:0c:
26:ed:eb:83:08:16:5e:0c:7d:42:e2:e9:d2:d7:cf:0c:7d:35:
55:36:4a:b1:28:e0:86:67:83:08:55:07:3f:46:f1:54:6c:e2:
73:d5:a3:2d:4b:86:f7:f5:a3:b4:a4:49:77:af:d1:46:7d:d8:
8d:c8:1a:27:bb:33:4b:5b:82:31:bc:9c:ed:66:73:76:4f:25:
c3:ec:56:fa:55:ee:5a:71:72:92:2f:34:2d:3e:60:83:d2:d2:
e3:34:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net