Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/kNpqx0tZlqJV-cV06kVoinEAEvE.roa
File: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (raw, json)
Hash identifier: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=
Subject key identifier: 90:DA:6A:C7:4B:59:96:A2:55:F9:C5:74:EA:45:68:8A:71:00:12:F1
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 01942144675A4A2C9B20DA9A7B9246089624
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/kNpqx0tZlqJV-cV06kVoinEAEvE.roa
Signing time: Wed 01 Jan 2025 09:48:38 +0000
ROA not before: Wed 01 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44305
IP address blocks: 217.61.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:67:5a:4a:2c:9b:20:da:9a:7b:92:46:08:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90da6ac74b5996a255f9c574ea45688a710012f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:b3:e2:c7:cf:f0:a2:8e:64:ab:8e:d2:fe:
30:3a:bf:37:65:fc:e3:03:1d:c9:77:37:10:b6:5c:
75:d2:05:04:83:e0:ce:ef:86:8c:ff:84:27:ae:25:
ff:c4:35:e7:27:20:8f:49:24:f6:3a:00:45:f7:48:
e1:a1:bf:47:4c:c8:02:96:86:db:5a:aa:29:d0:22:
e1:6d:23:c5:03:27:c7:48:ef:c1:8c:5e:bc:9a:e2:
ee:4f:e2:da:4e:14:d8:da:f4:af:e4:11:46:25:28:
ad:df:73:03:39:bf:33:6a:1a:5e:93:29:06:08:16:
c6:bf:53:3d:5b:50:0a:ca:5c:35:3b:1c:08:60:07:
91:6a:3d:ad:0f:c6:43:db:b9:1c:80:50:d4:3f:2b:
34:6d:04:ad:7c:89:3b:00:1d:b5:c2:4a:05:c9:d4:
b8:c2:a0:07:96:30:09:2b:2d:8d:07:3d:31:41:1a:
a5:06:93:a6:94:5a:cb:8e:fd:3c:96:15:55:b5:a0:
6c:74:9f:1f:e6:92:36:11:0a:f2:d4:a2:64:4f:7a:
ef:5c:8a:32:15:f2:8e:b6:6e:61:23:22:b4:bf:d1:
6c:90:8a:d9:0e:18:43:a1:59:4f:c8:02:f0:2a:5d:
f9:25:f7:a2:90:0d:6e:09:7e:ad:ec:4f:bf:00:3f:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DA:6A:C7:4B:59:96:A2:55:F9:C5:74:EA:45:68:8A:71:00:12:F1
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/kNpqx0tZlqJV-cV06kVoinEAEvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.61.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6a:b9:af:fb:32:7a:07:d8:03:c0:72:3e:7e:53:53:b9:f5:
92:7d:d0:e6:c6:29:6f:b8:fc:d1:cd:d7:a3:a1:46:87:42:9f:
0f:e8:62:d2:24:87:85:92:38:42:95:69:bf:37:44:a9:eb:dc:
6d:4a:ee:3b:df:a7:1d:ff:f7:ba:d5:eb:8d:34:77:4f:32:7c:
89:6b:b2:75:e6:7b:0a:e0:3d:b9:4f:20:b3:81:91:08:4a:b3:
28:6d:a0:45:c2:35:4f:17:6c:6f:84:86:82:45:9b:43:93:7c:
79:d4:52:1d:68:e6:7e:a1:b4:07:2e:90:1f:18:fc:dc:ff:1a:
4f:98:d8:7e:fa:ad:a1:6e:4a:86:ec:e9:41:3a:5a:f2:e6:bb:
b5:c5:d0:fa:5d:a9:7d:ee:3e:69:ab:24:a7:ad:2b:5e:e0:c9:
81:f2:1c:0f:aa:0e:8d:27:69:9b:21:06:3f:54:6b:5e:98:25:
1c:f0:ce:50:dd:7e:8b:7d:c0:2a:3c:f9:19:cb:c4:4b:05:0f:
c2:4b:fe:68:c6:bb:c7:8a:b7:29:0c:91:ef:70:b5:46:ae:dd:
a1:4a:1a:84:af:e9:08:49:e3:fa:43:98:34:76:ed:32:d4:5e:
f9:52:c5:e9:3b:bf:ba:52:f5:93:6b:03:0d:81:54:e2:bc:cf:
79:a5:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net