Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/KpSwgvDUr83NQVFbZ23mrOVqik4.roa
File: KpSwgvDUr83NQVFbZ23mrOVqik4.roa (raw, json)
Hash identifier: qJHc1TA8ZJbTNH8XJ9JsekF9JTLYx4rHVmuX7l9BGp8=
Subject key identifier: 2A:94:B0:82:F0:D4:AF:CD:CD:41:51:5B:67:6D:E6:AC:E5:6A:8A:4E
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 019424B3D9D8C7A2295713E07DA26568F528
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/KpSwgvDUr83NQVFbZ23mrOVqik4.roa
Signing time: Thu 02 Jan 2025 01:49:13 +0000
ROA not before: Thu 02 Jan 2025 01:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 86.105.14.0/24 maxlen: 24
91.245.234.0/24 maxlen: 24
2a0c:79c0:2::/48 maxlen: 48
2a0c:79c0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d9:d8:c7:a2:29:57:13:e0:7d:a2:65:68:f5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a94b082f0d4afcdcd41515b676de6ace56a8a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:67:72:56:e4:b2:e5:bc:b3:b8:e5:3d:90:17:
1c:90:d6:16:fe:7b:dd:91:70:04:07:e8:28:31:c4:
a6:f2:50:1d:c3:03:27:05:09:f0:72:0b:f4:9a:d1:
2f:10:ce:f0:94:80:49:29:5b:b5:b6:62:43:e3:15:
b4:5b:0a:de:c8:be:f4:8d:8c:96:b8:85:cb:28:16:
55:3d:31:17:5c:85:59:9a:5e:fa:fa:eb:1b:c8:83:
96:43:03:7e:53:72:34:41:7b:63:ef:4b:a8:7d:a7:
22:3d:3f:22:74:b9:47:d4:d6:ab:fb:60:bf:f2:9c:
5a:4a:10:4b:0e:0d:b1:c9:df:21:29:6e:00:13:5e:
e0:1a:cb:18:5c:9e:c4:83:0b:fb:fa:e5:18:57:6e:
c6:6e:8d:1f:b1:de:a3:17:15:0a:bb:22:25:ef:67:
c1:a4:e6:8e:61:fa:dc:d1:04:b6:63:42:3d:ad:e4:
ed:ee:a6:97:0e:8a:1e:82:09:4f:b5:2d:20:ef:09:
6a:cc:ba:c8:67:2a:7e:84:a0:5f:88:a3:4b:aa:9e:
df:30:30:bf:25:c5:04:85:20:ae:2e:f9:a1:01:6a:
c6:79:b7:4e:bc:b0:ca:c7:37:80:d6:be:89:14:90:
47:db:4c:3d:a5:3f:67:49:38:6d:26:25:5f:0d:b7:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:B0:82:F0:D4:AF:CD:CD:41:51:5B:67:6D:E6:AC:E5:6A:8A:4E
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/KpSwgvDUr83NQVFbZ23mrOVqik4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.14.0/24
91.245.234.0/24
IPv6:
2a0c:79c0:2::/48
2a0c:79c0:4::/48
Signature Algorithm: sha256WithRSAEncryption
c7:b2:14:a4:78:14:e4:eb:fc:af:30:a3:1a:28:49:a7:7f:ad:
57:28:0d:c0:e7:cb:0b:18:98:8d:47:fd:f3:4a:d1:fd:db:02:
8c:e2:54:ec:37:68:b6:b8:9d:d2:e9:ac:c9:e2:4e:6c:c2:7c:
46:d5:a7:41:6a:93:24:6e:30:ee:0f:5f:bc:c9:2b:f2:45:fe:
75:f3:92:08:1b:08:cd:f8:41:58:73:e1:a6:e8:d5:32:4a:c2:
af:eb:37:bf:c5:c3:75:c2:e8:b3:30:9c:70:45:f8:7d:bb:99:
13:fa:e3:0b:f4:8d:37:98:c4:48:1b:11:41:ea:43:6d:4f:21:
fd:2a:4f:7f:c0:ec:ae:82:a8:91:20:bc:4e:a0:6b:c5:79:57:
f9:d0:44:11:4f:48:89:0c:45:d8:89:19:be:5b:50:4e:e0:81:
34:55:f1:65:2b:0c:fa:58:24:1f:1c:a4:1c:c1:78:06:01:88:
6d:2e:13:11:da:5b:e1:98:13:bb:77:aa:06:df:7a:86:ed:af:
be:e3:fa:72:a2:de:ac:86:bc:29:d2:cc:7d:58:39:2f:b6:f4:
6b:29:80:48:b6:10:69:65:5f:0d:c4:3e:64:4c:aa:d0:32:a9:
fa:60:52:94:62:d7:99:e3:85:7d:37:9e:52:f2:bb:37:bc:bd:
1f:fc:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:23 2025 by rpki-client on console.sobornost.net