Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/slKuYhirMr_9AdtUijDzLipBRL0.roa
File: slKuYhirMr_9AdtUijDzLipBRL0.roa (raw, json)
Hash identifier: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=
Subject key identifier: B2:52:AE:62:18:AB:32:BF:FD:01:DB:54:8A:30:F3:2E:2A:41:44:BD
Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial: 01942745D6EE98C6E1C496A44CB119742436
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/slKuYhirMr_9AdtUijDzLipBRL0.roa
Signing time: Thu 02 Jan 2025 13:47:55 +0000
ROA not before: Thu 02 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214071
IP address blocks: 64.190.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d6:ee:98:c6:e1:c4:96:a4:4c:b1:19:74:24:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Validity
Not Before: Jan 2 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b252ae6218ab32bffd01db548a30f32e2a4144bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:c4:49:85:52:8b:21:9b:40:96:5c:a6:9c:
4b:18:e7:63:be:5c:c9:75:e6:06:8f:87:8f:8b:41:
d6:3a:1c:07:39:db:79:8e:1d:f8:89:97:34:07:36:
45:b7:eb:0a:b2:16:15:c1:12:85:74:95:3d:f4:7b:
ad:b4:10:5b:21:77:c5:5e:0c:20:80:c4:4f:88:64:
9a:b3:36:35:ec:1b:f6:d3:9e:fb:b8:00:35:6e:48:
ab:34:ab:4e:8c:62:e9:84:e6:db:9c:dc:c1:6e:49:
9b:7e:75:5e:57:5c:66:5d:16:fe:ca:f1:37:7f:6a:
2a:1c:f2:d3:54:97:00:77:f4:ce:dc:5e:10:56:67:
09:e1:90:9b:15:79:71:c2:4f:8d:e7:8e:67:5a:aa:
43:7e:2f:97:41:29:09:4b:d1:94:db:5e:1b:07:49:
68:17:c4:1c:b1:a3:f3:39:6e:ba:69:2c:e6:76:52:
d8:6c:8d:db:34:6b:0a:27:22:42:f4:a2:f8:6a:46:
4f:6f:79:e9:2c:31:c9:8a:49:77:04:d9:d5:fb:b7:
11:55:e0:33:25:6d:90:cc:3a:38:97:a2:72:4b:90:
63:92:11:82:e6:6e:51:53:00:04:cd:5c:55:52:3d:
de:1a:c1:ea:bc:0e:ed:27:a5:f2:0c:42:dd:76:bd:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:AE:62:18:AB:32:BF:FD:01:DB:54:8A:30:F3:2E:2A:41:44:BD
X509v3 Authority Key Identifier:
keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/slKuYhirMr_9AdtUijDzLipBRL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d9:5e:ad:ab:1c:d2:7c:46:46:6b:8c:70:d5:18:83:4a:c1:
56:d5:ae:88:4d:13:4e:67:42:8d:55:30:75:04:77:1b:7d:63:
cb:ae:8f:07:c9:f7:a2:9f:4b:55:0d:48:10:5b:e6:81:aa:67:
70:df:35:ca:03:52:e1:3b:93:b9:59:63:6c:ae:22:a0:90:79:
0b:4f:93:ca:c1:42:e6:1b:ec:b4:e6:49:78:07:f6:86:ba:26:
64:8f:dc:9a:e7:67:17:58:5a:1c:f4:e2:08:50:6e:b8:7d:d3:
2e:c4:ff:da:25:a9:37:ed:58:e0:5f:24:05:ce:54:b3:1e:47:
3d:2e:58:d2:65:ce:45:16:29:3c:2d:c7:65:93:36:6d:9b:3f:
82:47:21:bc:88:f0:1a:d7:4f:bf:d4:a6:c4:86:4d:70:01:b0:
51:ad:63:a9:8b:66:3e:79:66:fc:69:b6:df:b8:4a:9c:9c:5c:
05:b0:69:90:bd:f0:4e:fb:db:78:d9:0a:7a:18:db:a6:24:39:
de:08:b8:d5:44:e2:11:f6:c5:15:a8:9e:57:15:9b:30:6e:96:
4d:ac:35:0a:70:47:80:45:bc:9d:25:7a:98:8a:c8:7c:fc:0d:
c3:fb:11:6f:d2:d3:24:78:81:84:c3:9d:40:9e:90:2b:01:59:
4d:dc:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net