Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa
File: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (raw, json)
Hash identifier: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=
Subject key identifier: 28:20:5B:34:64:B5:61:55:B5:84:1C:69:5C:60:CA:E6:F1:66:6F:6B
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 0195D1F1A706A6F721F89E7598B0578B7F14
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa
Signing time: Wed 26 Mar 2025 10:13:49 +0000
ROA not before: Wed 26 Mar 2025 10:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2850
IP address blocks: 193.1.128.0/19 maxlen: 19
193.1.160.0/20 maxlen: 20
2001:770:98::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:f1:a7:06:a6:f7:21:f8:9e:75:98:b0:57:8b:7f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Mar 26 10:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28205b3464b56155b5841c695c60cae6f1666f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:dc:8d:76:26:c8:50:10:2c:a1:f7:c7:72:
51:db:2c:77:d3:fc:f1:a7:85:f8:30:65:4a:8e:ae:
ea:b1:02:be:f1:cc:11:00:6e:ea:8b:25:df:ef:f9:
68:4f:27:46:36:f9:2d:5a:ca:28:00:a5:f0:56:c0:
a9:5b:ed:ae:a4:ba:d2:e0:5a:c8:3c:02:32:41:18:
6f:ca:f5:98:3f:2e:15:6e:85:74:d5:14:3e:00:a1:
4f:56:c2:05:c9:30:94:c2:ec:8f:91:e8:79:06:ab:
12:ef:a2:f2:ed:01:75:ef:c9:ba:2d:48:f3:59:04:
af:87:62:4c:7c:b8:4d:45:d6:55:7f:c5:cf:75:71:
27:3a:c0:38:f0:f3:d7:3f:aa:3d:11:74:7c:22:5d:
73:bf:17:23:3c:42:94:06:5b:f4:0d:2e:75:84:da:
60:5a:23:96:7b:8e:dc:0b:39:77:ee:70:7c:40:fd:
b9:f2:12:39:bb:00:6d:a4:16:af:4e:7e:6f:91:39:
01:98:04:8b:e9:f7:36:82:54:85:44:8c:79:65:7c:
5e:94:10:d8:47:74:0d:24:b8:b1:67:8d:ac:a7:77:
f4:ed:9d:fa:57:02:c2:12:ec:cb:c7:c8:b4:47:62:
0d:97:ef:74:bf:92:e0:a5:2d:89:95:ca:a8:49:fc:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:5B:34:64:B5:61:55:B5:84:1C:69:5C:60:CA:E6:F1:66:6F:6B
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.1.128.0-193.1.175.255
IPv6:
2001:770:98::/48
Signature Algorithm: sha256WithRSAEncryption
2f:ca:d1:a5:f4:74:b2:c6:ec:52:66:33:17:98:f9:85:b3:db:
dc:b8:a0:4a:0e:47:c9:87:ae:1f:c4:a2:55:37:03:24:b1:5f:
30:f4:c2:8d:0c:35:c7:1f:39:24:cb:3e:94:76:8b:c1:92:fc:
45:5d:5a:b9:27:c4:ae:52:49:34:39:1c:a8:fe:69:ab:5f:7e:
4c:40:69:76:f0:bc:1c:28:65:ce:b1:66:8c:2f:3a:90:02:02:
1f:72:12:cd:80:61:f4:85:8f:19:c2:e9:55:dc:88:5e:08:bd:
20:1b:22:00:d5:3e:71:c1:93:6b:40:c0:59:0b:79:89:4d:cf:
3d:6d:ac:34:eb:d2:57:e9:bf:1f:d9:68:12:c6:2f:80:c6:82:
2b:04:e4:b2:41:08:a5:f5:3a:3c:e4:f4:d3:2e:a8:a4:dd:c4:
f4:1a:38:2d:16:fa:b8:68:14:a2:09:bf:77:a4:8e:37:9c:7b:
72:a1:bd:17:9e:c3:4c:81:3e:3b:eb:81:21:b2:9c:43:4f:16:
cc:1f:34:ab:89:00:2b:47:eb:c2:66:73:b4:32:c7:e7:49:b2:
cd:39:87:9d:35:8b:6e:24:7a:b6:d0:27:23:38:50:52:dd:d2:
5d:cb:86:2e:38:3f:7b:b3:f1:06:3a:7a:c5:5c:46:fd:88:99:
a6:ba:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net