Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/kssUn5LDMNLdLnMHwMeuqwISdUc.roa
File: kssUn5LDMNLdLnMHwMeuqwISdUc.roa (raw, json)
Hash identifier: tqgd/oe42/YVnmz67jJJQ0Rp7LlEGHSthXovstwtwVw=
Subject key identifier: 92:CB:14:9F:92:C3:30:D2:DD:2E:73:07:C0:C7:AE:AB:02:12:75:47
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194236A1A289696609762CD6A2F3644804B
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/kssUn5LDMNLdLnMHwMeuqwISdUc.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 82.206.12.0/23 maxlen: 23
82.206.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1a:28:96:96:60:97:62:cd:6a:2f:36:44:80:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92cb149f92c330d2dd2e7307c0c7aeab02127547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:7c:d2:7b:be:7e:10:08:32:f4:db:39:5d:
d1:44:5d:9c:b0:16:df:29:bb:09:27:25:82:f2:ea:
e7:a5:e7:4f:b4:cf:e2:e2:df:4d:4c:f9:25:ad:5e:
d5:2f:2c:8d:83:08:1b:f1:74:d8:f1:7f:c9:aa:de:
b9:dd:e5:3c:2c:de:3d:10:39:3f:45:75:b6:f3:ba:
60:a2:d9:43:35:16:42:76:6a:f0:6d:53:56:1c:0a:
ad:09:98:8f:44:84:c5:d3:1d:dd:e7:50:2b:88:de:
0b:86:73:51:fd:50:3d:dc:0c:2d:15:82:5b:77:15:
d7:68:d4:9b:24:47:12:13:ce:9c:d8:a4:86:7f:34:
8d:2b:12:d8:82:42:92:44:01:36:9a:44:ad:e4:4c:
8c:83:a9:01:30:a7:d2:5a:ee:f7:30:3e:9c:50:93:
bb:36:4d:a2:1c:e0:ef:97:b9:f2:fa:2c:fb:5b:cc:
34:19:29:6f:61:3b:50:25:5b:2f:b1:48:6e:d8:80:
a6:fb:41:f3:3c:70:8d:1e:2b:ad:c4:8e:fa:c5:a0:
4a:ba:30:f7:83:75:8d:23:07:c4:9c:15:8a:5d:78:
63:43:c0:6d:f6:ca:18:00:78:ff:56:32:61:7d:47:
fe:4d:17:c3:64:4f:4b:32:b9:f7:4a:09:98:67:e8:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:14:9F:92:C3:30:D2:DD:2E:73:07:C0:C7:AE:AB:02:12:75:47
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/kssUn5LDMNLdLnMHwMeuqwISdUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.12.0/22
Signature Algorithm: sha256WithRSAEncryption
35:36:6c:c5:c3:1f:e2:33:c0:d0:d7:b7:89:35:2a:40:33:86:
0d:98:a8:46:e6:32:37:05:7e:f4:62:0e:6c:aa:29:93:5e:f4:
7e:ea:52:84:95:0e:78:5a:c2:da:99:ff:41:5b:37:e8:5f:34:
e2:74:cc:51:af:a3:c0:f7:12:86:c7:45:7a:3a:e3:98:94:92:
4a:cc:f5:cb:e1:ea:6e:05:a2:00:74:24:46:04:8e:db:77:21:
01:ed:e9:73:67:67:f2:e9:4a:29:39:c1:1a:6d:a3:30:14:1f:
13:22:40:b3:2b:9f:d4:b6:f7:24:d5:ba:7c:e9:62:64:dd:86:
48:4a:2e:ff:24:8c:98:a9:30:78:02:72:88:d0:c7:a4:51:d2:
e8:f9:32:7e:f5:e7:41:e9:2f:8c:bb:df:65:5e:9b:d6:65:0a:
bb:23:d0:ed:f2:ae:dd:2c:e2:5c:d2:9d:a1:00:0b:5f:e9:78:
44:c9:ad:eb:f4:fc:3a:89:8f:74:34:8f:2b:01:9a:5d:c9:7d:
5a:d8:ae:d9:ef:d4:ae:86:44:ad:03:eb:8b:13:3d:01:76:7a:
96:4e:22:aa:92:8c:bc:0c:8e:4b:cd:af:c0:1b:dc:d0:13:cd:
23:72:d6:63:9a:f0:1c:78:9f:3a:85:63:6d:6e:60:32:de:f8:
fc:66:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net