Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/kDuhU048DTixv805ND5N0u_g9CE.roa
File: kDuhU048DTixv805ND5N0u_g9CE.roa (raw, json)
Hash identifier: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=
Subject key identifier: 90:3B:A1:53:4E:3C:0D:38:B1:BF:CD:39:34:3E:4D:D2:EF:E0:F4:21
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019421B1F00A778C2DDC9C5D10EE08453FD7
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/kDuhU048DTixv805ND5N0u_g9CE.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44185
IP address blocks: 92.60.48.0/22 maxlen: 24
185.91.200.0/22 maxlen: 24
2a01:b200::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f0:0a:77:8c:2d:dc:9c:5d:10:ee:08:45:3f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=903ba1534e3c0d38b1bfcd39343e4dd2efe0f421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:51:83:a0:9c:16:1a:55:9b:77:02:f6:ef:
62:18:eb:a3:d1:9d:b4:f0:3b:75:48:ad:93:4d:50:
a3:af:e7:d3:db:c2:ed:63:e6:3d:f9:8d:19:7a:e0:
db:7c:4b:a9:fb:5b:7a:88:41:70:4d:0f:f4:75:11:
20:46:be:bd:48:d3:bb:56:57:4e:cd:ad:0a:95:d4:
ab:59:5c:14:96:46:57:38:b6:c1:ac:f4:f5:10:ae:
a8:a9:6e:63:7e:43:93:f5:19:cd:a9:39:e8:a9:47:
b8:49:9a:e9:e6:66:3a:9d:d5:62:f0:55:31:dc:d8:
ac:87:60:83:bb:f1:e3:e1:5b:71:e4:ea:9a:17:de:
7f:2d:df:ad:68:78:b6:e0:1b:78:82:6a:98:9f:f2:
b2:96:ce:a3:f3:63:57:61:63:74:65:77:31:31:44:
51:a3:52:36:63:43:6b:2d:ba:8d:ad:44:36:0c:b5:
03:8a:43:64:24:7b:64:3b:57:e5:62:8c:ef:9b:c9:
a9:47:8e:c2:dc:25:5a:94:49:fb:11:30:1d:df:97:
48:25:27:42:e7:9e:53:d5:ae:cc:fb:dd:d8:dd:7b:
ba:ea:5c:b2:f3:4b:f8:4e:98:6b:45:67:d6:d6:ef:
a6:88:3d:73:e4:78:00:15:05:8b:47:74:f2:67:26:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:A1:53:4E:3C:0D:38:B1:BF:CD:39:34:3E:4D:D2:EF:E0:F4:21
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/kDuhU048DTixv805ND5N0u_g9CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.48.0/22
185.91.200.0/22
IPv6:
2a01:b200::/32
Signature Algorithm: sha256WithRSAEncryption
5a:80:5e:d2:09:02:e0:fe:7e:99:0f:80:4d:47:43:cb:00:5a:
e4:2f:04:85:d2:02:a5:ca:37:5d:5d:38:3b:8e:56:8a:cd:fd:
57:72:8c:b1:33:a8:db:9e:1b:a9:ff:8c:4f:35:d4:04:c2:06:
50:74:2c:95:c0:30:3e:48:de:f6:fc:6d:99:8d:e2:be:b3:75:
7d:67:65:69:dc:40:a4:10:ed:fa:a8:5f:31:e8:bb:a2:aa:d9:
00:63:48:9d:68:0a:5c:d8:85:bb:ba:db:0c:ef:c2:e7:a9:db:
14:22:53:fb:5a:ee:6d:ea:ee:ef:5e:32:25:15:fa:82:da:67:
73:5b:71:40:e9:e1:7e:2b:66:9c:13:ab:0f:26:ae:4b:e1:e9:
a5:e1:5c:17:cb:3d:b9:69:1b:9f:ad:ce:9c:80:86:59:e8:35:
59:5b:0b:f7:94:0e:bc:63:a2:84:71:9f:7e:d5:99:bd:f4:6c:
64:c1:fb:09:33:75:3d:2b:b4:45:e9:09:d0:2e:fe:88:f0:a4:
38:0b:65:79:96:3f:df:0b:93:52:e3:4b:7b:95:5e:f3:93:12:
83:5f:c1:cd:51:27:a3:95:f9:b6:6e:6f:1e:17:55:f6:1d:2a:
26:4c:47:84:b2:94:1a:fd:c4:a1:38:d8:55:64:ec:87:74:b2:
ae:f2:28:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net