Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1KSTcjfpj__vPQBzVR0gREvKCgI.roa
File: 1KSTcjfpj__vPQBzVR0gREvKCgI.roa (raw, json)
Hash identifier: krwqztLoM8dprHPPwGWlxTOoAu6g8UN+QTRn1+Fw/ho=
Subject key identifier: D4:A4:93:72:37:E9:8F:FF:EF:3D:00:73:55:1D:20:44:4B:CA:0A:02
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0194CAC98088A38C1CDDFC29BA5E78E4A628
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1KSTcjfpj__vPQBzVR0gREvKCgI.roa
Signing time: Mon 03 Feb 2025 07:49:50 +0000
ROA not before: Mon 03 Feb 2025 07:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200436
IP address blocks: 45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
188.240.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:c9:80:88:a3:8c:1c:dd:fc:29:ba:5e:78:e4:a6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Feb 3 07:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4a4937237e98fffef3d0073551d20444bca0a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:b7:7d:3f:1e:c3:a9:d9:ac:f8:da:f1:c1:
09:92:ff:5a:f2:53:4f:3f:1b:49:f1:0c:8d:78:2f:
2c:c1:bf:87:b3:a5:13:5c:61:cd:d9:ec:c6:ba:32:
48:a8:30:76:1b:3b:34:9f:f7:07:41:44:a0:73:e8:
fa:67:15:cc:94:78:27:48:02:b6:b7:70:08:c6:e8:
ed:eb:0e:ee:38:ed:15:9c:3f:fb:75:ef:99:b3:f5:
6c:98:f9:2b:28:77:11:70:10:84:f1:31:91:b6:4d:
78:30:81:92:6f:ce:1c:f1:d5:3b:71:00:49:3f:49:
e5:32:2f:03:3a:f8:c0:af:a8:9b:81:7d:31:01:d9:
53:37:55:33:84:17:db:f3:73:00:86:67:9b:df:93:
4b:6c:66:9c:e4:76:9e:2d:2c:af:a2:00:08:8c:9a:
d3:d7:4a:76:dc:70:01:20:e1:63:3e:4a:e8:cb:66:
96:b1:d4:2a:d6:4c:7b:ed:f6:b3:cb:47:53:e1:c9:
f4:4b:9f:4b:8f:bb:1f:83:89:9e:e3:2b:82:6c:1b:
78:2e:0d:8b:e3:10:bf:cd:cf:bb:51:71:fd:eb:cb:
46:c3:7a:95:03:2b:11:70:81:62:e4:7f:77:0a:78:
a0:1d:2e:3e:1c:fe:c8:bf:e9:42:52:45:ce:15:39:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A4:93:72:37:E9:8F:FF:EF:3D:00:73:55:1D:20:44:4B:CA:0A:02
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1KSTcjfpj__vPQBzVR0gREvKCgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/23
185.3.200.0/24
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:83:31:46:4d:20:c9:d5:76:f1:6b:a6:4a:4f:99:98:89:99:
12:26:1c:df:20:4e:a8:ab:da:c4:70:35:e3:8f:8b:31:8a:9b:
98:60:40:03:8f:d1:ea:65:6c:94:28:eb:93:26:b8:25:af:02:
c2:34:b7:dd:9b:3c:c2:95:16:9c:19:db:65:65:5e:3e:ef:c4:
4a:ae:82:ad:ac:2c:0c:2d:4e:32:18:06:57:a9:5c:f9:d8:0e:
11:24:dc:05:42:06:1c:7b:90:2e:fa:ab:60:c3:3f:47:46:a8:
87:b8:e8:c9:a1:b5:cb:41:9c:12:aa:48:19:77:86:a6:c0:c2:
b2:1d:04:7b:b0:84:f0:85:3f:4b:bf:ef:85:f3:05:d8:eb:4a:
de:6a:a5:b5:5a:59:c6:34:83:90:66:de:b6:d8:45:99:20:40:
94:b1:df:fb:d5:f2:33:a4:bf:4c:0f:6b:be:32:18:29:24:9b:
9e:cd:be:88:42:d9:6b:4d:d3:da:86:d6:ee:f5:ec:dc:ae:a5:
b0:da:11:68:91:41:e8:5c:3b:1a:39:3c:bc:1c:fc:e4:40:d3:
aa:bd:c0:51:0d:00:fd:1a:e8:02:32:ee:46:7f:a8:11:61:46:
da:0f:99:0c:97:07:ba:fc:61:f2:22:c6:14:13:59:c7:6e:da:
ae:c6:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net