Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/KI_OzKHWNWDApgfZA8fhKRHWYNw.roa
File: KI_OzKHWNWDApgfZA8fhKRHWYNw.roa (raw, json)
Hash identifier: KgInzOYraW/0zKTqbj1OirpA4x6saReBh+LdfK4ZXdI=
Subject key identifier: 28:8F:CE:CC:A1:D6:35:60:C0:A6:07:D9:03:C7:E1:29:11:D6:60:DC
Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial: 0194206819D00E43F68E50A235EA155E6279
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/KI_OzKHWNWDApgfZA8fhKRHWYNw.roa
Signing time: Wed 01 Jan 2025 05:48:00 +0000
ROA not before: Wed 01 Jan 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31510
IP address blocks: 193.228.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:19:d0:0e:43:f6:8e:50:a2:35:ea:15:5e:62:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=288fcecca1d63560c0a607d903c7e12911d660dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:7f:86:bd:50:b5:30:09:0e:57:6c:8a:fc:
08:e9:d2:68:d4:2a:e2:1e:5a:8a:cb:f1:f5:cc:c3:
da:1f:88:6b:1b:d1:63:3f:e7:e7:4f:21:3b:4f:d2:
74:c1:fc:ad:15:82:49:3b:b2:e6:cb:9a:73:24:3f:
37:8f:96:04:4d:a2:25:4f:c3:7e:54:74:3d:67:ac:
ea:00:d5:d1:2e:00:af:7a:13:a5:36:38:53:b7:a7:
65:9d:26:57:23:63:80:63:a7:17:74:21:92:9e:33:
b8:45:1a:2f:95:51:78:00:f7:4e:6d:93:d1:a6:d9:
7d:6a:18:ba:c6:f6:c8:15:78:7f:0d:d7:de:9e:1c:
7c:20:b3:f5:de:33:e5:a9:10:bf:36:18:41:98:1c:
9f:46:07:53:ec:81:01:30:aa:92:76:b0:2b:db:9f:
ae:3a:92:ab:92:34:ee:ed:13:fe:13:f4:7c:51:e0:
a7:3a:66:ec:5f:c3:c1:08:b3:0b:eb:f8:c3:f0:9e:
74:3c:84:50:89:e1:9d:c8:75:73:b0:ee:a7:9d:41:
16:eb:27:a6:e2:be:2c:70:e8:a7:9a:ef:3b:9f:d6:
3c:05:48:41:6a:1f:75:ca:83:ee:0b:ee:2e:7e:62:
59:e0:0a:3d:c8:db:b8:f0:45:39:42:75:c5:02:2a:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8F:CE:CC:A1:D6:35:60:C0:A6:07:D9:03:C7:E1:29:11:D6:60:DC
X509v3 Authority Key Identifier:
keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/KI_OzKHWNWDApgfZA8fhKRHWYNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:37:e3:2b:e8:0a:6b:3f:f1:f5:28:06:2f:bc:d4:df:84:5d:
d5:35:ea:ef:8b:04:f0:21:03:3f:60:81:0b:d5:e8:81:66:c7:
56:4c:f5:13:81:02:ab:16:fe:b4:1e:78:ce:a5:e9:36:b4:d5:
c9:2c:b0:34:36:57:4a:55:4d:8e:f6:62:43:2f:08:bd:ab:19:
ed:f9:8c:05:77:04:49:72:b3:30:b4:92:eb:61:8d:bd:09:9d:
aa:bd:ea:44:3f:f1:72:77:0d:b4:a1:b5:49:1d:59:5e:7c:92:
21:da:2b:29:db:40:c9:e8:ee:71:e3:d1:7a:e9:31:68:a4:81:
a8:0d:16:31:1a:2b:b9:bb:96:ef:38:ef:9a:57:67:70:9d:b7:
5c:98:51:72:18:85:0b:a9:89:4f:4c:65:f8:6e:25:bc:b0:45:
e4:42:a0:19:a5:72:e2:c1:2e:4b:a9:bd:a3:20:3c:de:c2:47:
7d:a8:1d:77:1a:b6:ae:1b:58:5e:8c:40:17:b4:f2:61:f2:98:
53:da:6d:63:f2:c2:23:b3:6d:95:bd:ab:e9:b3:4a:6e:8e:d1:
d5:9c:db:4e:7d:75:df:f2:55:e8:ae:75:a7:64:24:57:60:0d:
bd:dc:56:b1:3b:3e:3b:b5:e9:6d:b2:c2:da:47:de:28:13:7e:
79:0c:04:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaBnQDkP2jlCiNeoVXmJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NWNmNDkzOWJlZWVhZWFmNDQwOWMyODQwZWIzNDRjYWIw
ODUwZTAwHhcNMjUwMTAxMDU0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODhmY2VjY2ExZDYzNTYwYzBhNjA3ZDkwM2M3ZTEyOTExZDY2MGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJR/hr1QtTAJDldsivwI6dJo1Cri
HlqKy/H1zMPaH4hrG9FjP+fnTyE7T9J0wfytFYJJO7Lmy5pzJD83j5YETaIlT8N+
VHQ9Z6zqANXRLgCvehOlNjhTt6dlnSZXI2OAY6cXdCGSnjO4RRovlVF4APdObZPR
ptl9ahi6xvbIFXh/Ddfenhx8ILP13jPlqRC/NhhBmByfRgdT7IEBMKqSdrAr25+u
OpKrkjTu7RP+E/R8UeCnOmbsX8PBCLML6/jD8J50PIRQieGdyHVzsO6nnUEW6yem
4r4scOinmu87n9Y8BUhBah91yoPuC+4ufmJZ4Ao9yNu48EU5QnXFAipZBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCiPzsyh1jVgwKYH2QPH4SkR1mDcMB8GA1UdIwQY
MBaAFDhc9JOb7urq9ECcKEDrNEyrCFDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zNWI2YmQtMTRiNi00M2RjLTgzODQt
N2I3NjE1ZmYwZTk2LzEvS0lfT3pLSFdOV0RBcGdmWkE4ZmhLUkhXWU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8zNWI2YmQtMTRiNi00M2RjLTgzODQtN2I3NjE1ZmYwZTk2
LzEvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweRdMA0G
CSqGSIb3DQEBCwUAA4IBAQBsN+Mr6AprP/H1KAYvvNTfhF3VNerviwTwIQM/YIEL
1eiBZsdWTPUTgQKrFv60HnjOpek2tNXJLLA0NldKVU2O9mJDLwi9qxnt+YwFdwRJ
crMwtJLrYY29CZ2qvepEP/Fydw20obVJHVlefJIh2isp20DJ6O5x49F66TFopIGo
DRYxGiu5u5bvOO+aV2dwnbdcmFFyGIULqYlPTGX4biW8sEXkQqAZpXLiwS5Lqb2j
IDzewkd9qB13GrauG1hejEAXtPJh8phT2m1j8sIjs22Vvavps0pujtHVnNtOfXXf
8lXornWnZCRXYA293FaxOz47teltssLaR94oE355DATS
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net