Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/kg9t18MET9vHkp7c3ZCFI-WKvIA.roa
File: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (raw, json)
Hash identifier: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=
Subject key identifier: 92:0F:6D:D7:C3:04:4F:DB:C7:92:9E:DC:DD:90:85:23:E5:8A:BC:80
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01942826D571526AE3B5824AFFABC76ABA2C
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/kg9t18MET9vHkp7c3ZCFI-WKvIA.roa
Signing time: Thu 02 Jan 2025 17:53:41 +0000
ROA not before: Thu 02 Jan 2025 17:53:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51207
IP address blocks: 78.240.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d5:71:52:6a:e3:b5:82:4a:ff:ab:c7:6a:ba:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jan 2 17:53:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=920f6dd7c3044fdbc7929edcdd908523e58abc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:35:25:55:91:dc:d6:d2:ef:c9:e5:8a:42:
03:b9:6d:c0:51:82:21:5b:8b:7c:d0:22:8e:ac:bb:
7d:e3:ea:d0:c9:cd:21:04:81:7d:88:ae:d7:2a:97:
88:1b:65:2f:05:24:79:98:1f:0f:a3:5f:fc:e4:a9:
db:a4:f3:6f:2c:a3:a7:89:8f:00:c9:c7:b5:ac:fd:
32:45:3c:bd:71:d5:22:17:54:45:f0:4f:71:a3:3f:
f9:55:a3:38:ea:38:0f:24:b1:03:81:a3:d6:9d:d3:
de:bf:1a:e4:0d:e7:1d:a9:03:9a:44:08:02:cb:7e:
ee:f4:00:c4:b3:e9:4f:4e:83:d5:5b:49:5c:3e:1f:
6f:35:78:14:34:bc:b1:2f:10:78:10:b3:6c:c3:6b:
f2:0e:fa:ac:fc:0c:e0:7f:36:e9:f9:69:61:8d:52:
9b:63:af:a4:dc:27:85:24:ed:c6:ec:bf:ff:78:d0:
0c:27:03:fc:5f:d1:96:63:09:50:13:26:64:da:e6:
30:e6:2b:4d:86:58:7d:85:04:ac:05:2f:74:39:53:
e5:ca:70:ac:93:4e:bb:c4:5c:fa:77:12:2e:f0:da:
53:e0:85:bd:9e:58:ab:dc:5e:14:f9:bd:42:17:f5:
d7:98:43:b8:2e:63:c3:2c:67:53:24:38:ed:aa:a9:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:6D:D7:C3:04:4F:DB:C7:92:9E:DC:DD:90:85:23:E5:8A:BC:80
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/kg9t18MET9vHkp7c3ZCFI-WKvIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.240.0.0/13
Signature Algorithm: sha256WithRSAEncryption
7d:97:da:f7:2a:82:79:bb:fb:05:cb:3f:10:e6:24:a3:21:48:
45:12:46:33:0a:30:50:2e:ce:bb:2a:63:ec:81:f1:86:20:18:
8d:2a:ea:28:8b:0c:64:62:63:be:21:99:27:7f:53:ed:58:0b:
79:22:52:ef:5e:23:eb:82:73:d6:f0:5d:ae:b4:39:b2:c8:43:
a4:31:0d:28:5f:ae:57:de:fc:03:2e:55:f4:a1:1f:53:29:e8:
fd:ad:06:84:db:6b:b5:3d:eb:4d:e1:3a:24:68:9e:22:ea:8a:
7b:d5:d5:99:32:ee:00:81:58:d2:a1:76:86:5b:c7:ee:0f:46:
8a:4d:29:22:db:75:53:90:44:15:d4:6e:ed:d5:32:69:7f:b8:
48:bc:25:ce:02:bf:39:af:61:aa:19:68:7b:6e:d4:87:e5:2f:
04:7c:20:06:0c:fd:d4:d6:9e:a4:88:b6:20:1b:67:39:a0:a3:
af:ba:30:1e:30:29:79:a3:63:91:dc:89:da:61:91:b0:9f:7b:
d6:f3:f0:a8:68:d0:df:0c:68:8d:e5:22:0c:04:b7:72:fe:11:
a5:22:da:6c:e0:32:ad:cf:ce:e2:c5:d4:34:0c:1f:58:bb:ec:
0f:9f:c8:fc:e5:55:47:22:e0:93:43:3a:8c:e4:17:b9:ad:fe:
f5:23:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net