Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/KglTELcsnhw481HWVhr3ihS-vM4.roa
File: KglTELcsnhw481HWVhr3ihS-vM4.roa (raw, json)
Hash identifier: tNFRW+KCi42ZrxRtrnPGuV9QxlGdR3rdpokxtqfBHoE=
Subject key identifier: 2A:09:53:10:B7:2C:9E:1C:38:F3:51:D6:56:1A:F7:8A:14:BE:BC:CE
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0193E4D5F44ACF11749B9FB0717F671E9F23
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/KglTELcsnhw481HWVhr3ihS-vM4.roa
Signing time: Fri 20 Dec 2024 16:10:47 +0000
ROA not before: Fri 20 Dec 2024 16:10:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 92.242.198.0/23 maxlen: 23
92.242.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:d5:f4:4a:cf:11:74:9b:9f:b0:71:7f:67:1e:9f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Dec 20 16:10:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a095310b72c9e1c38f351d6561af78a14bebcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:8a:bd:f1:29:4e:83:9b:c4:2d:3b:80:fe:
9e:6a:10:6d:ff:a1:e1:cc:6d:5e:7f:7b:d1:07:de:
fc:72:5f:41:18:d2:17:9b:20:2b:f1:e4:8b:ef:ee:
bb:56:fd:d7:49:45:b7:29:eb:dc:b4:2f:3b:50:1a:
22:ad:c2:1a:ba:06:c7:b1:83:59:c2:c3:27:09:53:
98:93:c6:7b:27:26:21:5c:5e:70:1d:c4:8c:71:7b:
af:86:a7:6e:e0:6b:42:05:40:5a:6e:a7:e9:8b:6a:
16:a2:85:2a:77:e5:d9:54:98:e3:3e:07:c8:ec:a6:
0e:e6:0e:f7:94:04:07:36:e6:d4:ae:c5:49:c0:9e:
84:48:97:27:bc:95:0c:f7:53:4d:4c:86:ea:84:21:
a8:7a:2d:84:50:7c:bb:0b:28:f0:e8:fb:96:5e:1c:
a6:23:a2:22:3a:18:a6:bb:0e:aa:a4:30:a3:2f:a8:
15:51:2d:7b:f4:4f:29:4d:61:46:05:aa:84:f9:3e:
fa:ae:9d:d0:86:9d:a4:6f:d1:ff:42:27:7d:f1:64:
7c:85:21:cb:de:34:ce:72:e7:63:95:2f:a5:21:1b:
a8:d4:4e:3a:0c:ac:2d:a9:bf:87:0c:13:20:43:18:
48:3a:6b:dd:5e:9e:6d:26:7b:c6:a5:84:10:32:85:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:09:53:10:B7:2C:9E:1C:38:F3:51:D6:56:1A:F7:8A:14:BE:BC:CE
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/KglTELcsnhw481HWVhr3ihS-vM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.198.0/23
92.242.220.0/23
Signature Algorithm: sha256WithRSAEncryption
83:32:8a:0f:d4:6b:52:24:30:51:a8:70:b9:9e:72:80:6d:aa:
1a:a7:df:c0:72:23:a6:ad:f1:4e:f7:5f:d3:b0:8c:3b:59:fd:
74:c6:07:e5:93:ab:5c:2b:3e:35:98:3c:31:f0:ec:a8:47:b0:
3d:d0:51:37:07:12:c0:1f:7a:de:97:c1:da:6f:16:ce:de:57:
10:b4:91:84:9c:a5:22:5b:5a:4a:3c:92:bc:ef:a2:b4:3f:d3:
58:9f:41:71:80:70:3c:52:d1:6f:76:76:8e:4a:01:06:f0:e9:
81:bf:77:da:df:2e:0d:70:e0:de:81:b9:fc:d7:69:ef:98:b2:
0b:02:e4:47:a4:c3:17:38:3b:90:6f:44:b1:ac:3f:a0:14:10:
fb:4d:9f:f0:de:46:19:7f:45:80:e7:b5:1d:77:90:cb:49:a1:
fd:54:7e:b2:62:20:ff:b6:e9:e9:a3:1a:19:64:93:1f:ce:19:
f2:52:b2:fa:98:89:84:4e:98:a4:26:4f:2f:4a:6d:fb:30:c3:
7c:ef:d5:84:55:6f:13:6e:aa:8a:54:66:b0:9d:20:17:94:35:
9e:d0:17:60:62:86:12:5c:c4:fa:c6:26:20:21:5b:84:1f:02:
14:7a:c9:c6:52:73:5e:f2:68:7d:2a:ea:5e:68:3a:bd:7e:6d:
92:44:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net