Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/2lpFexxe3_Ac4dcdM3bYGAow3NU.roa
File: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (raw, json)
Hash identifier: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=
Subject key identifier: DA:5A:45:7B:1C:5E:DF:F0:1C:E1:D7:1D:33:76:D8:18:0A:30:DC:D5
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 01951807402012E8E9A42A808A9C205C5F04
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/2lpFexxe3_Ac4dcdM3bYGAow3NU.roa
Signing time: Tue 18 Feb 2025 07:48:03 +0000
ROA not before: Tue 18 Feb 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206865
IP address blocks: 85.119.169.0/24 maxlen: 24
85.119.170.0/24 maxlen: 24
85.119.171.0/24 maxlen: 24
85.119.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:07:40:20:12:e8:e9:a4:2a:80:8a:9c:20:5c:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Feb 18 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da5a457b1c5edff01ce1d71d3376d8180a30dcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:f4:d1:37:02:56:1f:3b:26:2c:90:64:0e:
d1:f4:06:e8:94:9f:d8:7e:d7:ed:be:d4:93:4a:82:
db:d6:10:1c:d0:d9:a7:aa:64:ad:eb:f3:6c:2d:9b:
3b:50:9c:0a:09:4f:5a:2d:70:7b:1e:39:33:66:29:
8d:5c:3f:60:9f:39:27:4c:c1:e1:0a:0b:34:6d:43:
dd:76:db:86:fb:71:fc:7e:b6:54:f6:16:ce:1d:41:
3d:05:17:bf:78:d9:f3:24:46:f5:cb:bc:c6:e5:8e:
e4:de:c9:d8:00:55:15:34:b5:6c:6c:7f:3e:0d:04:
ea:03:37:38:56:53:81:21:17:35:d5:7f:fe:ea:ed:
85:22:9e:93:8a:f9:61:c6:2e:bc:ce:60:f8:87:e1:
e0:80:40:e4:d4:3f:3f:33:80:c0:af:93:8a:e1:b0:
a4:c6:b9:06:96:ab:92:5d:96:08:49:0c:da:1d:59:
ed:32:09:3d:1c:f3:8e:5f:b5:85:1f:57:da:17:a3:
b0:8b:00:8b:05:84:30:b4:8c:4b:15:c7:07:4d:f4:
45:bb:fc:52:8f:08:7c:d5:9c:0c:22:84:82:42:a3:
5c:55:46:20:aa:0d:59:f8:83:27:96:70:cb:f7:5b:
f9:85:6a:1f:d2:bb:1a:67:79:37:be:30:2b:af:0b:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5A:45:7B:1C:5E:DF:F0:1C:E1:D7:1D:33:76:D8:18:0A:30:DC:D5
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/2lpFexxe3_Ac4dcdM3bYGAow3NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.169.0-85.119.175.255
Signature Algorithm: sha256WithRSAEncryption
01:50:cc:8d:4d:a6:8b:4e:7e:9a:a4:5c:7b:b5:e8:4c:ab:36:
57:4e:8c:6a:a2:c3:b9:55:e4:3f:36:e7:2b:7e:08:06:51:d1:
b0:1a:ae:db:3a:f6:7f:1c:eb:e5:31:11:10:bb:9f:2d:66:07:
5d:c5:38:5c:d9:7b:53:d8:fd:71:93:41:28:ad:88:5d:2b:37:
e9:59:04:18:17:ae:b3:24:04:e3:5c:83:8a:2b:98:33:df:fa:
1b:d8:55:46:01:c0:21:78:5a:4f:17:19:59:74:5a:87:a7:f5:
7e:93:d4:f8:b0:67:e2:92:a5:13:47:90:6d:16:b0:e4:98:c1:
c4:ba:f1:fb:8e:7a:8d:09:23:21:2c:5d:9b:e3:de:03:79:d3:
47:ff:5f:3f:6c:3d:c1:07:e4:a1:87:4d:91:26:a9:4e:04:cd:
a1:fb:73:01:50:10:16:e1:f9:b6:a2:7f:60:29:c5:b9:4f:2a:
30:33:df:42:75:1f:8b:dc:7f:38:9a:c8:02:ff:9d:a2:9d:f3:
91:f8:9f:35:6c:f8:a3:1d:59:68:99:99:36:42:4d:80:50:06:
a7:02:f0:1f:1c:4d:c9:ca:ab:77:2f:3c:ed:00:69:da:b7:cc:
03:d2:d4:e3:c1:b7:69:45:b7:93:90:54:c3:61:29:6c:e1:a4:
d4:db:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net