Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/khfB2_nqFIcVOPUUmyE13ONmaoA.roa
File: khfB2_nqFIcVOPUUmyE13ONmaoA.roa (raw, json)
Hash identifier: HgKSV0TpgZiJ05u2t7JsNY3wS8esh0nKhimQ3TlmtmA=
Subject key identifier: 92:17:C1:DB:F9:EA:14:87:15:38:F5:14:9B:21:35:DC:E3:66:6A:80
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195E5618ABD1B6CE20A77599F68B387DFB9
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/khfB2_nqFIcVOPUUmyE13ONmaoA.roa
Signing time: Sun 30 Mar 2025 04:48:49 +0000
ROA not before: Sun 30 Mar 2025 04:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211409
IP address blocks: 89.42.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e5:61:8a:bd:1b:6c:e2:0a:77:59:9f:68:b3:87:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 30 04:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9217c1dbf9ea14871538f5149b2135dce3666a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:9c:fe:3b:3c:97:cc:54:0c:5f:7f:b0:d1:
1d:8c:b1:8b:47:8a:6f:b6:4d:37:6b:b3:54:d8:f9:
6d:db:42:9c:5a:08:83:24:6e:ee:e5:73:49:97:d5:
e1:26:80:8a:be:6b:9d:1b:0c:20:3a:76:c8:a9:f1:
eb:51:2b:80:1f:86:8a:22:de:d0:3a:9d:a6:48:bb:
42:fe:3f:e5:3c:d5:78:5b:36:d0:07:1f:fd:61:61:
25:d0:4b:1b:62:76:35:ec:15:27:aa:6b:20:21:23:
db:2e:33:3f:dd:17:17:4d:d8:18:ae:ec:0b:e3:a3:
64:c4:1f:53:7d:3d:3b:44:ea:dd:66:c9:14:16:57:
a5:db:75:6b:14:74:72:59:06:d5:64:be:af:ef:a0:
39:b0:b3:b2:e9:ed:a9:f7:6e:82:5d:69:ef:e0:1f:
92:d0:72:23:54:0e:30:0f:fa:a5:b7:26:ef:6e:dc:
58:df:78:70:bf:bf:4c:05:e2:48:00:4f:3f:fb:7c:
e3:30:36:41:25:91:c8:8b:c4:26:61:bf:13:29:ad:
88:af:66:7b:a5:23:e9:c6:9d:6d:91:79:5c:79:11:
ba:a3:cd:aa:4d:f2:c8:94:b5:c0:b7:37:84:fa:2f:
7f:fb:ef:32:8a:3c:74:3d:21:42:84:ee:82:06:f0:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:C1:DB:F9:EA:14:87:15:38:F5:14:9B:21:35:DC:E3:66:6A:80
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/khfB2_nqFIcVOPUUmyE13ONmaoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
22:fe:e5:12:71:a1:ae:5b:e4:b9:8e:83:64:97:83:1d:4b:4c:
3c:30:6b:04:d8:c0:44:b6:b7:9c:17:6b:be:a9:09:8e:ae:41:
29:f0:dd:7c:49:1a:87:06:fc:b3:8e:22:79:c2:d5:4b:c8:a3:
82:54:fa:3c:a2:1c:3f:5a:03:94:96:22:d6:e1:a3:48:7d:e6:
3c:a4:5d:01:6b:d4:16:8f:59:7a:db:67:65:fd:70:cf:1b:c5:
91:d1:94:b1:1e:73:c3:6a:2c:25:bf:17:b4:62:90:0d:aa:a4:
19:52:ae:50:b7:b9:44:5b:9c:dc:27:f9:66:8e:b8:d0:14:06:
b3:f8:bd:0a:86:4d:01:65:b5:ab:18:76:75:0d:4a:f2:d7:44:
a3:e8:69:2a:d9:f0:a6:5a:8c:10:85:05:6b:6c:57:2c:e1:8f:
1d:d1:ac:9c:3f:93:c0:31:33:3f:16:a5:8a:ae:1e:4a:81:56:
68:97:74:37:ed:c8:a5:f5:07:2e:8f:d0:d6:1d:79:4b:d4:d1:
e9:47:63:75:90:c7:79:06:d6:c4:ab:7e:a8:31:69:bc:6d:8a:
1d:b0:aa:c1:60:a1:ac:e0:ee:fd:9f:fc:65:cb:d4:03:a1:1d:
9e:c5:13:35:86:e4:b1:d8:25:3b:ae:26:e3:11:a4:08:5a:e0:
9d:8d:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net