Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/KBKNSo54C-UjedwUMFB9xB41sio.roa
File: KBKNSo54C-UjedwUMFB9xB41sio.roa (raw, json)
Hash identifier: EOnhGNtgG2NlhPSt6QkJfBoHbT869foRrNlEhdeoqqA=
Subject key identifier: 28:12:8D:4A:8E:78:0B:E5:23:79:DC:14:30:50:7D:C4:1E:35:B2:2A
Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Certificate serial: 01941FFA1602DA6D76FC00D5B58CCE9440F6
Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/KBKNSo54C-UjedwUMFB9xB41sio.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206853
IP address blocks: 176.110.105.0/24 maxlen: 24
188.127.252.0/24 maxlen: 24
192.33.163.0/24 maxlen: 24
192.35.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:02:da:6d:76:fc:00:d5:b5:8c:ce:94:40:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28128d4a8e780be52379dc1430507dc41e35b22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:a4:d5:42:c6:7a:a6:1f:c2:63:99:b1:26:
3e:f7:2b:fc:ee:b6:4b:44:6f:24:83:73:8e:a8:4f:
b8:f1:22:31:73:5a:f8:0d:cb:7e:12:eb:9f:50:ec:
d3:da:0e:3d:b3:32:ea:83:21:3c:b0:55:bf:db:0f:
0c:3a:90:8a:ba:49:e9:e7:b1:f5:51:01:da:ad:e4:
28:99:0f:ba:24:9c:73:70:1c:ac:55:54:52:95:b1:
ac:15:2b:49:33:65:87:f5:f0:6b:35:ce:b3:94:b1:
f9:a2:d5:28:bd:2a:b9:53:24:6a:c4:e1:8f:4b:4f:
5d:9d:57:a2:28:c3:3c:03:b4:2a:22:c0:11:a2:cc:
0d:df:c7:df:7f:8e:30:c6:ef:35:de:74:0d:aa:fe:
39:c1:7d:b3:0a:63:31:fe:94:fa:4d:46:b1:d9:37:
79:52:81:05:e5:1b:71:f6:b4:0f:e3:7b:98:81:65:
79:92:a8:78:21:ae:ab:ae:63:b1:5d:b1:18:8e:75:
1b:ea:72:0f:76:5a:5f:f1:ff:41:19:85:62:24:1d:
39:19:2f:ab:d2:04:2f:2b:e1:91:5f:f4:39:c3:94:
e3:fd:0d:a8:87:65:fa:25:d6:27:37:3c:0f:a9:bf:
67:d9:a9:d9:46:54:05:2d:a4:2b:5c:8d:af:fa:1f:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:12:8D:4A:8E:78:0B:E5:23:79:DC:14:30:50:7D:C4:1E:35:B2:2A
X509v3 Authority Key Identifier:
keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/KBKNSo54C-UjedwUMFB9xB41sio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.105.0/24
188.127.252.0/24
192.33.163.0/24
192.35.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1d:77:eb:61:cf:b0:10:77:38:91:e6:a2:22:ac:8f:a4:cd:
a6:25:23:23:59:8a:e3:46:81:4f:77:2b:13:a6:7f:eb:76:3b:
69:c1:74:31:7b:47:60:11:98:b8:ad:6d:22:83:8b:39:25:b6:
6c:34:a9:4b:be:13:45:bf:42:52:89:2f:39:95:35:d0:1a:05:
e8:69:90:57:6f:e5:86:08:6c:15:45:33:24:95:3c:45:8e:53:
1c:40:38:85:48:f2:29:21:87:61:d5:63:e3:ba:da:c1:a7:66:
f9:02:93:2c:ef:f1:88:30:71:e2:ed:3c:8e:ff:04:9e:ef:31:
9c:4a:fc:23:a0:cf:ab:23:c2:ed:4f:df:79:1e:bc:66:eb:57:
68:23:a3:a7:30:38:c3:e4:20:e5:81:4d:88:9f:34:3d:22:4a:
6b:fc:3c:28:ff:a5:af:fd:5e:84:5f:f3:0b:ce:f9:a0:38:eb:
62:99:75:33:f0:e6:97:97:36:f8:57:fd:01:86:57:ea:29:e9:
d4:a0:94:c9:f3:9c:55:f1:2b:6f:7e:50:53:4c:0f:ce:87:74:
a0:c4:e5:67:54:66:f0:b4:fc:a2:a6:64:3e:b8:0a:93:0f:ac:
0c:a8:25:be:45:1b:05:f6:d1:50:c5:33:49:14:48:71:72:4f:
b5:52:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net