Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/kweAulzTrCvxJT9UZzTQmhyNMt0.roa
File: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (raw, json)
Hash identifier: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=
Subject key identifier: 93:07:80:BA:5C:D3:AC:2B:F1:25:3F:54:67:34:D0:9A:1C:8D:32:DD
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 019423D7EDAEA39C9230E06BBE8AC7626BBE
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/kweAulzTrCvxJT9UZzTQmhyNMt0.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50866
IP address blocks: 217.145.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ed:ae:a3:9c:92:30:e0:6b:be:8a:c7:62:6b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=930780ba5cd3ac2bf1253f546734d09a1c8d32dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:b7:14:b5:01:1e:65:52:06:95:04:d8:6b:
02:eb:e1:a3:4f:7c:aa:a0:10:d5:19:ab:8a:5a:cc:
16:4b:87:33:24:38:2f:e4:95:6d:bc:6f:60:ce:f7:
68:20:b5:48:77:4b:47:b1:3f:88:2d:82:d7:14:94:
ed:86:7c:10:7c:58:86:2f:18:25:92:03:d3:b1:ce:
c7:f2:40:0b:1b:fc:fe:29:20:7f:4d:f7:8c:6f:7c:
ae:b7:e7:5b:0e:9e:5e:db:3e:ad:b1:28:1c:6c:a0:
dd:88:15:09:6f:52:89:41:98:74:b9:3d:f5:48:16:
74:46:b9:4c:87:a6:0f:57:fc:66:0d:9f:a9:c6:a5:
59:37:4c:54:46:56:7d:4b:ea:3d:fe:6f:fc:7d:d6:
ce:0d:18:90:37:a0:e7:b6:b3:b0:8a:b5:2a:8e:18:
08:ab:47:1f:84:cf:26:3c:5c:65:0f:54:0c:7c:b4:
5d:64:f9:5a:3b:d2:93:97:bf:56:6a:d9:27:bb:b1:
21:6e:65:0d:e1:44:38:e9:81:17:a4:31:db:72:4d:
72:2b:58:20:7e:db:f3:55:2e:7c:77:a8:f5:50:1e:
f0:c9:f7:10:34:91:dd:7b:2d:e6:fc:32:cb:2f:db:
87:55:e7:2e:4e:c2:dc:8d:d7:ae:05:a4:60:fc:97:
be:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:80:BA:5C:D3:AC:2B:F1:25:3F:54:67:34:D0:9A:1C:8D:32:DD
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/kweAulzTrCvxJT9UZzTQmhyNMt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:91:bb:fc:31:b2:43:ca:68:94:1e:0a:26:26:37:ba:16:55:
f2:d4:db:fb:fa:3e:75:1d:ac:db:f6:53:8a:d5:e0:75:cb:41:
bc:92:56:24:95:39:39:43:d5:8d:45:9a:8b:e9:44:ab:b3:44:
bf:0e:05:a9:d8:5d:30:a8:c0:e7:a4:70:4b:48:1b:e2:9c:3e:
a9:35:9b:66:8b:9b:4a:82:5a:0b:0c:ea:52:e3:9d:50:0a:c2:
97:53:37:d0:7b:27:c6:5f:8a:31:57:11:ea:8e:7b:f6:65:65:
c0:e9:b8:05:9f:3f:63:99:c5:d7:21:6d:ae:57:03:7c:21:db:
a7:04:8b:37:5f:05:2f:04:0a:ff:58:a8:10:82:eb:5b:76:f7:
68:90:5e:77:a3:b1:14:6d:32:b2:0d:7f:1f:4b:0e:a9:d1:d2:
44:2f:c6:a6:f1:79:21:1a:86:81:53:f1:c4:d4:de:c3:4d:3f:
65:16:f7:d7:eb:36:e5:54:f1:f8:f2:cd:a1:29:c7:07:bb:94:
74:e2:2c:ef:fa:61:65:b5:50:b5:5a:d6:63:fd:f0:8d:8a:e2:
fc:7d:7b:d4:b3:9e:7d:79:52:f8:86:8d:a9:1c:b8:e7:2c:3e:
11:4d:95:1d:9a:48:be:51:ae:c9:a0:68:25:38:79:79:e3:89:
50:0c:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net