Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/kzFHKGWiAfhz1G2Wu6-2Qw9lGtI.roa
File: kzFHKGWiAfhz1G2Wu6-2Qw9lGtI.roa (raw, json)
Hash identifier: Xx+J1ok5AOVknwz7SzYf50yga5XdMNiOE5wH3AACUr8=
Subject key identifier: 93:31:47:28:65:A2:01:F8:73:D4:6D:96:BB:AF:B6:43:0F:65:1A:D2
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01941F8C87A6E78E0E47B37C8760E706B348
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/kzFHKGWiAfhz1G2Wu6-2Qw9lGtI.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 89.44.242.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.254.0/23 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:87:a6:e7:8e:0e:47:b3:7c:87:60:e7:06:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9331472865a201f873d46d96bbafb6430f651ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:e0:09:f8:8d:94:31:78:b5:e6:d4:bd:e9:
55:09:59:d3:97:88:8d:9c:ac:c7:75:1a:ab:ef:95:
05:b9:05:b0:19:19:b4:43:bc:1c:f0:d5:9c:df:99:
65:59:b1:62:a3:23:62:32:3f:1f:e8:20:5e:0c:fa:
b9:91:48:18:4c:4b:b6:8c:18:61:af:03:e5:6a:7b:
ed:01:e4:ba:99:95:0b:8a:bc:fb:32:75:0c:76:b8:
9d:11:3d:42:ef:21:61:fc:60:c0:9b:8c:39:ae:3d:
d7:e7:e6:92:da:a6:eb:08:31:42:e8:09:72:a4:e0:
a0:d3:7b:64:9a:4f:e4:8a:d7:f5:15:4f:db:4e:e6:
d8:5c:62:85:24:5e:b8:17:e4:d9:1f:6a:e0:6a:66:
40:49:91:5e:0b:0d:f2:5e:cc:cb:57:b8:f3:da:58:
2b:f7:5e:50:e5:89:8d:c8:3b:31:20:d5:c8:c1:f6:
12:56:bf:ec:c9:20:68:3e:5c:cc:d7:10:2b:93:f2:
21:fb:2d:e6:68:eb:f2:8f:8f:f0:68:f7:92:d6:1c:
3c:75:61:0d:29:44:63:21:7b:46:8d:7a:b6:94:6c:
52:de:e1:a0:d4:7a:42:94:07:12:21:c4:c9:55:d6:
56:fc:4e:12:59:b1:7b:42:21:d4:cc:8c:94:2a:06:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:47:28:65:A2:01:F8:73:D4:6D:96:BB:AF:B6:43:0F:65:1A:D2
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/kzFHKGWiAfhz1G2Wu6-2Qw9lGtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.242.0/24
89.46.217.0/24
109.122.249.0/24
109.122.254.0/23
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:22:f4:f8:98:7f:b7:27:ae:fd:0c:ba:32:6a:6f:bd:91:d2:
74:65:bb:6e:b8:47:a6:a3:2f:9b:6d:6d:9e:ac:6e:a4:d5:d5:
0f:53:16:60:92:90:f0:71:b9:48:e1:9e:37:31:88:66:34:9b:
8c:30:f1:f6:51:d5:90:b8:f8:79:b0:8a:5f:60:74:ac:dd:e2:
d6:14:02:4b:f2:3b:fa:cf:0b:1d:f1:92:a2:dc:1e:e2:bd:da:
e4:07:c0:17:05:b3:0f:bc:d4:cd:59:78:3e:49:5b:e8:3e:52:
00:a6:9d:2a:26:34:55:4f:14:59:6e:ac:d7:54:de:2d:82:a8:
f1:09:df:e7:fd:0c:57:05:a7:83:54:b8:0a:52:ae:bb:69:45:
60:84:62:81:7e:28:ca:88:d8:7e:93:ad:e9:b3:9f:89:d0:1c:
0e:36:a9:31:c1:77:bb:5d:12:4a:5d:50:bf:da:1b:32:4e:6e:
75:8c:5f:2a:18:ca:80:2b:e6:84:53:19:71:36:c6:60:34:73:
9d:f2:8d:67:5e:8e:27:78:f9:b6:b5:cc:52:4c:11:d9:34:c3:
d5:8d:a8:f9:97:8d:be:ad:92:60:14:f9:33:75:49:d5:ea:4e:
9f:28:c4:66:4c:9c:23:2a:22:8b:dd:27:83:d1:16:2f:5c:22:
4a:56:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:12 2025 by rpki-client on console.sobornost.net