Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KZGod_BqVRdmwfNvBiSAHniE4gQ.roa
File: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (raw, json)
Hash identifier: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=
Subject key identifier: 29:91:A8:77:F0:6A:55:17:66:C1:F3:6F:06:24:80:1E:78:84:E2:04
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 0195063C7E69122FFD736CCC2627C921689D
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KZGod_BqVRdmwfNvBiSAHniE4gQ.roa
Signing time: Fri 14 Feb 2025 20:53:02 +0000
ROA not before: Fri 14 Feb 2025 20:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21473
IP address blocks: 193.16.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:06:3c:7e:69:12:2f:fd:73:6c:cc:26:27:c9:21:68:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Feb 14 20:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2991a877f06a551766c1f36f0624801e7884e204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:62:91:16:6b:e5:da:3c:10:ac:cb:d7:c8:
ab:a9:2c:4c:93:cf:35:06:fe:9b:4d:8c:5e:c7:58:
81:3c:08:40:ce:f0:0b:08:8b:44:90:51:3f:18:ae:
49:4c:34:05:b5:e6:f8:54:68:cd:42:89:c7:21:b4:
6a:f6:60:97:4f:db:7a:35:e8:9d:cb:a6:cc:71:27:
d6:65:66:ed:d6:4b:9c:81:20:78:08:fe:0e:43:b5:
81:a0:25:c1:e0:f3:56:a8:f8:f6:dd:ea:37:04:44:
90:20:57:5c:09:41:99:2c:1f:f9:8e:9f:27:9e:b0:
44:ba:8f:0d:b0:ae:d9:41:28:92:d6:89:78:7e:be:
9e:fd:00:ec:25:b6:55:8d:42:8f:a7:07:24:67:89:
b6:b9:2f:f6:d3:4f:f4:92:4f:a2:7f:96:d7:2b:0a:
5b:f7:6d:bb:d4:3f:24:6a:45:41:55:e2:97:eb:05:
5d:d0:29:d0:a5:9b:c4:31:14:1b:f8:7d:28:ee:da:
91:0b:0c:6d:31:e1:0e:64:f6:b8:05:4b:76:d4:cf:
41:7c:95:25:19:e2:6a:cf:2b:9c:14:0e:e1:04:81:
fe:84:89:22:af:c9:f4:54:59:f4:ed:b6:4e:ab:e3:
c0:bd:4e:33:33:72:37:35:ca:37:88:16:9a:c4:84:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:A8:77:F0:6A:55:17:66:C1:F3:6F:06:24:80:1E:78:84:E2:04
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KZGod_BqVRdmwfNvBiSAHniE4gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.245.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:33:b5:aa:92:77:f1:e7:28:49:79:2b:4d:27:ed:a1:43:ea:
13:59:71:88:fd:8b:5f:1c:1d:e0:f3:53:82:43:ae:3f:43:2c:
bb:65:6c:1e:a0:68:65:ac:12:de:f1:2c:fc:f7:50:c4:af:b3:
44:53:fb:db:fb:4e:b6:76:5a:2b:1e:a6:3a:32:e9:3e:5e:ef:
0b:73:6f:9e:a3:83:97:49:15:50:9d:86:5f:dc:89:ff:71:58:
cf:dc:f4:fb:61:89:4a:e9:b7:95:3d:38:33:f6:2e:7d:13:01:
b2:a7:b1:c8:3f:e4:98:a1:ba:d9:a7:5b:ff:e6:08:74:c9:8f:
de:3b:59:e8:83:57:88:87:96:25:a8:ba:1a:97:8b:bd:04:0c:
08:51:6f:6e:bf:e0:c8:dc:db:6c:70:3d:b4:f9:de:76:0e:f8:
4c:e5:6b:a6:38:31:ba:6f:c6:b1:db:9f:c7:25:91:d9:04:75:
3a:b6:cf:30:6d:bc:65:e1:f2:76:e4:ac:50:6c:9e:62:24:08:
0a:de:32:a3:ea:c5:18:26:a3:af:87:3a:05:72:d1:bd:8b:3f:
aa:b9:aa:35:e1:a8:82:24:ae:45:92:87:17:1b:c6:d3:4a:e6:
a3:54:51:b2:2a:56:b8:ea:f2:ed:26:b5:7e:1b:7e:a4:bd:cb:
67:83:6c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net