Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa
File: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (raw, json)
Hash identifier: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=
Subject key identifier: BE:F4:77:89:98:71:92:C6:5A:7F:96:6D:95:41:46:F2:C1:E0:4F:00
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019518073FC6AD1AEB7F7CDD837650D8CFA3
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa
Signing time: Tue 18 Feb 2025 07:48:02 +0000
ROA not before: Tue 18 Feb 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12645
IP address blocks: 194.116.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:07:3f:c6:ad:1a:eb:7f:7c:dd:83:76:50:d8:cf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Feb 18 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bef47789987192c65a7f966d954146f2c1e04f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:92:45:c6:15:ab:df:2c:5b:a8:68:17:af:
c3:36:92:27:b4:99:4a:09:2a:42:f5:a6:6a:83:ae:
73:21:ef:72:44:7c:1e:6f:47:70:6c:c5:ff:f7:5c:
e3:cb:d1:31:b8:3b:3c:9c:11:08:71:4b:dc:c2:c8:
fc:08:d4:c0:ed:eb:47:7c:6b:5f:a6:d4:4a:4d:8b:
ad:9e:01:e9:95:d3:d8:f3:f8:32:69:ef:ce:92:51:
cb:ba:91:e5:b3:7c:07:59:aa:9f:72:7b:5e:5a:71:
66:fc:bb:8b:07:30:27:16:8e:71:08:75:a4:3b:01:
ef:e5:14:79:9c:0f:5c:da:b0:1e:2e:07:cd:80:a6:
76:ac:2a:3a:5a:8a:2a:12:5c:c1:a1:94:84:ee:23:
06:29:15:d7:36:f1:2e:3f:9f:19:c7:ee:d0:b4:cd:
49:12:23:3e:51:12:73:67:89:0b:3a:ca:63:7b:1f:
fe:da:16:f6:2e:42:2b:80:1a:63:22:b4:04:ac:8e:
96:c9:a4:f2:9e:61:18:b6:3c:37:cd:dc:db:50:3a:
14:89:7f:b1:2f:72:07:e5:d5:63:80:a0:1b:e2:26:
f5:0d:56:cf:4d:3f:0b:a9:19:02:33:15:65:73:49:
2c:36:83:0c:22:b4:6e:0c:ce:60:7d:3d:a8:81:60:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:77:89:98:71:92:C6:5A:7F:96:6D:95:41:46:F2:C1:E0:4F:00
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.176.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:f5:6b:5e:41:d8:78:90:21:e3:01:f2:83:71:d6:1f:d8:55:
ec:8b:29:20:20:38:ff:1e:43:de:f0:79:fe:be:31:4a:e1:99:
47:00:e1:0b:5f:d8:34:0a:24:28:23:89:dd:cb:c2:5f:fe:f2:
6d:52:08:d1:65:ab:4c:98:88:22:6a:d2:9e:10:6d:13:64:29:
d0:2d:f8:f0:b1:ad:c3:5c:51:5a:41:e7:3f:17:e4:5f:96:9a:
8a:80:7e:d8:2d:05:87:02:b6:07:06:9c:c3:e6:41:28:b4:f7:
71:94:af:34:a9:35:31:a3:9c:6b:95:8b:fb:a6:04:72:51:bb:
30:ef:6f:eb:cc:35:57:b3:4d:ef:b5:55:6f:e0:8a:dc:10:60:
82:51:fc:79:42:61:5d:52:da:25:24:02:c0:80:18:3b:2b:29:
c4:48:45:fd:73:fb:8c:51:36:87:38:74:8d:4e:37:1f:c1:6d:
c9:88:9e:12:1e:3b:47:8b:0d:ad:90:8f:89:fe:a5:50:04:b8:
76:fa:4a:3e:6a:98:17:ac:84:89:ac:4f:87:e7:ac:1c:df:10:
ba:a7:a3:91:bd:75:71:43:c3:7f:46:95:c4:57:38:83:34:52:
88:87:29:24:b4:82:78:a9:90:e3:67:cb:08:ab:06:a6:52:09:
95:c4:0c:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUYBz/GrRrrf3zdg3ZQ2M+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E3ZjNhYTYxYjIyNDExODIzNWUzMjAxMWVkZWNiZTNm
NmE2NDkwHhcNMjUwMjE4MDc0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWY0Nzc4OTk4NzE5MmM2NWE3Zjk2NmQ5NTQxNDZmMmMxZTA0ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTCSRcYVq98sW6hoF6/DNpIntJlK
CSpC9aZqg65zIe9yRHweb0dwbMX/91zjy9ExuDs8nBEIcUvcwsj8CNTA7etHfGtf
ptRKTYutngHpldPY8/gyae/OklHLupHls3wHWaqfcnteWnFm/LuLBzAnFo5xCHWk
OwHv5RR5nA9c2rAeLgfNgKZ2rCo6WooqElzBoZSE7iMGKRXXNvEuP58Zx+7QtM1J
EiM+URJzZ4kLOspjex/+2hb2LkIrgBpjIrQErI6WyaTynmEYtjw3zdzbUDoUiX+x
L3IH5dVjgKAb4ib1DVbPTT8LqRkCMxVlc0ksNoMMIrRuDM5gfT2ogWCd3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL70d4mYcZLGWn+WbZVBRvLB4E8AMB8GA1UdIwQY
MBaAFJJ6fzqmGyJBGCNeMgEe3svj9qZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMt
NTAxYzcxYzQzYjA5LzEvdnZSM2laaHhrc1phZjVadGxVRkc4c0hnVHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMtNTAxYzcxYzQzYjA5
LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnSwMA0G
CSqGSIb3DQEBCwUAA4IBAQBK9WteQdh4kCHjAfKDcdYf2FXsiykgIDj/HkPe8Hn+
vjFK4ZlHAOELX9g0CiQoI4ndy8Jf/vJtUgjRZatMmIgiatKeEG0TZCnQLfjwsa3D
XFFaQec/F+RflpqKgH7YLQWHArYHBpzD5kEotPdxlK80qTUxo5xrlYv7pgRyUbsw
72/rzDVXs03vtVVv4IrcEGCCUfx5QmFdUtolJALAgBg7KynESEX9c/uMUTaHOHSN
TjcfwW3JiJ4SHjtHiw2tkI+J/qVQBLh2+ko+apgXrISJrE+H56wc3xC6p6ORvXVx
Q8N/RpXEVziDNFKIhykktIJ4qZDjZ8sIqwamUgmVxAwQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net