Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa
File: KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa (raw, json)
Hash identifier: tcyrTqGXX3Fxa4DyHBaUSmoiu94Dxk4AKYQpUR2BnQc=
Subject key identifier: 28:3A:B5:F9:1A:F8:3D:AD:7D:26:6A:45:40:EF:33:A7:95:A0:07:95
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01941FFA64EC7EC2331F41C5748A96C64913
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25082
IP address blocks: 45.91.216.0/22 maxlen: 23
195.64.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:ec:7e:c2:33:1f:41:c5:74:8a:96:c6:49:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=283ab5f91af83dad7d266a4540ef33a795a00795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:b5:d1:ec:63:a6:9e:b7:08:06:9e:d4:3d:
ee:52:c4:0d:a6:f4:0e:01:c6:f6:2b:af:29:cb:78:
a0:ac:77:11:0e:92:c4:7c:fb:1f:72:4c:a7:8c:f6:
4e:48:71:5d:62:b6:cf:7b:c4:ee:9f:d0:10:e4:5e:
09:21:84:7a:18:d5:fd:6d:59:80:4d:1f:b0:5f:25:
45:72:b0:be:f2:28:39:22:59:8b:4d:b5:d5:bf:c5:
fe:6d:07:f8:d7:63:ed:5b:bc:ec:e1:36:64:dc:01:
90:a6:6d:7d:1e:e1:fb:b0:f7:39:62:39:4a:50:2d:
cf:5a:01:7f:ee:81:82:df:e7:f4:db:0f:46:82:ea:
c9:aa:1a:c7:12:31:48:44:40:43:59:75:db:a1:25:
53:18:11:b7:3a:76:be:0c:4d:70:fe:a0:fc:93:d6:
c4:8c:d8:b8:2a:93:28:b4:a6:69:a7:1e:79:1c:10:
89:c2:5e:f1:27:96:5b:6e:60:ec:f7:1c:89:c9:28:
c5:e9:76:0c:ef:27:de:ae:8c:09:b0:07:65:41:54:
eb:e0:4f:22:53:9d:f7:c0:63:66:f1:db:7c:42:9d:
d9:62:d0:f9:6e:b4:89:3c:5e:7a:9a:3c:d3:89:85:
98:f8:a7:6c:19:ed:18:9c:7a:9d:e5:bc:d8:32:e0:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3A:B5:F9:1A:F8:3D:AD:7D:26:6A:45:40:EF:33:A7:95:A0:07:95
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/KDq1-Rr4Pa19JmpFQO8zp5WgB5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.216.0/22
195.64.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:f4:8e:56:b0:19:26:58:0f:e1:1e:f3:c7:27:4b:9c:76:e4:
97:2b:36:92:32:ff:44:51:28:fc:9f:5e:60:80:e1:c6:ec:49:
e7:0b:0f:6e:20:86:14:87:8d:39:1c:a4:b0:4c:65:ad:f4:05:
b3:f7:27:eb:91:58:42:a2:7c:3e:fa:d4:66:a0:5c:5a:9d:ca:
97:b0:3f:ba:ab:3a:b0:ce:06:d4:b6:ed:cb:4a:5f:e1:6f:db:
36:e7:7f:dd:12:ba:bf:89:e1:19:23:ff:8a:e8:a0:45:ab:9a:
db:2d:ae:ba:99:a3:97:62:03:62:58:f1:95:4a:b6:c9:f5:f7:
8b:df:b4:c0:1e:26:55:cc:64:60:36:b9:0a:01:20:e9:00:96:
b9:3e:18:e1:d7:2e:ba:2a:5b:5c:54:b6:e5:92:ab:e9:e9:68:
7b:5a:d5:e9:91:84:3c:05:45:12:10:d4:04:b8:a7:da:1f:35:
9e:c7:6e:58:55:1a:bf:a8:e2:9b:11:ea:c4:58:40:ab:ac:56:
a3:16:ad:e2:9c:c8:42:66:74:07:ed:e5:d4:85:c6:8c:33:a3:
dc:dc:99:1c:65:a3:90:e3:53:72:6f:37:d8:ef:99:f3:c1:40:
c3:d3:b3:a1:01:a6:21:88:79:21:ac:81:f8:b5:a5:d7:5c:1e:
33:28:95:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net