Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/KkH_R6IQv1u30qAL1KWqZsXbAEI.roa
File: KkH_R6IQv1u30qAL1KWqZsXbAEI.roa (raw, json)
Hash identifier: 04O63RIXPPpD9GmqGsDm2l0jn4ZXl6cAUxlim79VpG4=
Subject key identifier: 2A:41:FF:47:A2:10:BF:5B:B7:D2:A0:0B:D4:A5:AA:66:C5:DB:00:42
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 019421441E9604D398AAE8974EF69C076D45
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/KkH_R6IQv1u30qAL1KWqZsXbAEI.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207719
IP address blocks: 185.65.79.0/24 maxlen: 24
185.116.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1e:96:04:d3:98:aa:e8:97:4e:f6:9c:07:6d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a41ff47a210bf5bb7d2a00bd4a5aa66c5db0042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:5d:ed:1e:59:8e:27:e4:10:0b:be:2b:97:
79:22:57:b1:81:39:46:05:da:93:74:ff:72:69:41:
9d:d3:0f:bc:ad:c1:87:fe:5a:d6:76:cb:b3:1d:2e:
31:95:17:bb:d6:1c:a8:df:98:70:36:04:10:ba:9f:
a1:85:27:ec:0f:20:51:1e:89:b3:da:92:61:16:1d:
a6:eb:e0:99:0f:31:fc:c1:6e:a0:5a:21:00:2d:75:
6d:e9:f7:0c:83:d1:ec:33:f2:e4:f8:26:09:f0:dc:
28:a5:5a:6e:5a:6b:b3:29:30:8c:21:82:c1:89:00:
c2:e6:1c:04:a6:47:67:d4:65:58:56:c7:56:08:d1:
dd:62:8c:0a:b1:23:03:8e:a8:b3:f0:76:45:ba:eb:
62:8a:f6:fc:f4:b8:d7:44:03:5d:69:d9:62:39:bf:
58:99:13:90:9c:27:64:ba:77:30:cb:07:0b:e3:90:
52:2e:f8:f1:59:0a:00:48:30:d7:9c:c1:8c:8c:6b:
31:be:cf:93:3c:d1:a9:52:7a:e3:27:a8:5f:35:87:
16:a8:78:f8:d7:bb:9a:e0:78:55:0b:f5:22:4c:d8:
44:03:22:38:a6:da:a9:1e:5f:09:d7:70:78:47:7a:
b6:88:6b:a1:ca:b9:4c:2f:1c:c7:35:e6:98:38:dc:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:FF:47:A2:10:BF:5B:B7:D2:A0:0B:D4:A5:AA:66:C5:DB:00:42
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/KkH_R6IQv1u30qAL1KWqZsXbAEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.79.0/24
185.116.63.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4c:08:80:1b:29:17:e1:08:1a:c7:ce:a7:8f:b9:86:b3:f8:
aa:62:c9:6d:28:86:b8:3a:ed:4a:e9:16:ae:f7:64:84:eb:c8:
64:2a:33:a3:87:f0:17:34:c5:40:a7:3b:66:19:1b:19:b2:73:
ff:a6:b9:0d:ac:1a:5c:dc:5b:3b:c3:a7:8f:b2:83:90:66:e9:
38:35:c6:92:f5:cb:ab:ef:55:f2:ce:bc:a4:e2:f7:0f:15:84:
96:6b:cc:fe:ba:95:f4:b5:8f:78:06:60:f9:60:41:8c:9b:f6:
79:74:cd:e6:70:0b:64:fb:34:af:67:8d:cf:a3:a1:60:60:8f:
c9:39:a9:49:b0:a5:dc:56:1e:e7:f3:03:da:ec:b8:27:56:fb:
15:49:15:68:d3:2a:ce:af:c0:92:8a:e7:6d:4c:b3:ac:20:b2:
0d:55:03:55:bd:30:95:cc:03:94:ac:f0:15:36:7f:0b:ad:6f:
c9:52:88:f4:29:a0:42:85:a6:3c:f1:af:bf:83:88:b9:3c:2f:
af:e9:c7:64:3a:df:2e:1a:3b:95:5f:d5:fe:1b:85:35:84:52:
a5:77:0a:68:87:9d:ad:52:87:ea:17:49:a8:5f:c0:9a:eb:f4:
cf:37:3a:e9:b1:bd:5c:06:31:e8:5e:7d:af:b1:d8:08:67:89:
db:dc:a7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net