Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa
File: KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa (raw, json)
Hash identifier: nJQFit94GD/cIbI8GNPP+c6lmHYIPdofJMVeQt5hkQ4=
Subject key identifier: 28:7F:E3:FB:4B:59:3F:B9:19:19:AF:D1:18:0A:9B:F0:A8:DE:38:A1
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 0194258FBBD671243A1B0A9A661BAD28CA97
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57646
IP address blocks: 193.142.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bb:d6:71:24:3a:1b:0a:9a:66:1b:ad:28:ca:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=287fe3fb4b593fb91919afd1180a9bf0a8de38a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:6d:a1:52:c3:86:35:9e:d3:15:b8:53:a4:
25:15:a1:b8:0d:a0:27:1c:b0:dd:d6:91:67:bc:e3:
f6:e8:80:4c:db:58:d6:35:09:06:6f:5f:1e:16:df:
b8:43:c2:6f:a1:fc:d3:cc:45:f8:d0:81:99:85:a5:
d3:81:19:0c:b3:03:96:13:ef:5f:9f:49:04:8c:d8:
56:77:e1:74:fe:e8:0b:ce:71:de:23:f0:ac:8a:a4:
ec:df:46:80:be:8d:f3:48:b9:cd:80:70:e9:c0:03:
aa:4f:20:46:b1:8a:7a:a4:3d:4b:00:bc:df:29:73:
a2:29:96:0d:92:3c:e5:2c:9a:60:00:50:4f:6a:1b:
18:b6:9d:83:bc:a5:59:5f:a9:c9:a1:4d:16:8c:7f:
6a:9c:b9:19:23:5d:71:be:51:42:a9:45:5a:1f:85:
fe:94:8a:1c:fe:8c:bc:94:c9:bd:a9:ff:95:ba:98:
e3:df:11:d9:ae:79:0b:ba:75:14:56:91:88:d0:61:
a0:34:19:d5:91:86:9d:82:68:85:08:44:38:88:71:
bf:7e:2f:28:78:0f:ec:3e:e6:80:d2:d4:38:c0:8d:
cc:2e:2b:8d:44:66:78:36:6f:c0:c8:0a:d9:c6:a0:
35:08:02:36:5c:c8:c6:ba:f5:27:33:ad:73:12:e9:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:E3:FB:4B:59:3F:B9:19:19:AF:D1:18:0A:9B:F0:A8:DE:38:A1
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bf:b3:cc:e7:76:b4:73:c7:8e:98:34:df:9d:1b:ca:24:96:
02:d6:2d:f5:5a:7a:aa:f6:a0:69:0d:95:92:a5:f3:37:ec:d3:
99:a0:a5:70:d4:bf:ef:4f:c4:e2:f3:9e:a9:65:ae:0f:ba:bf:
31:a3:7f:89:43:6f:c1:7b:68:8c:33:91:ba:ba:93:b8:f1:4e:
c3:76:1c:dd:58:dd:c3:c7:d4:62:c1:81:58:8b:a4:cc:58:6a:
91:8a:27:94:12:45:b7:6c:7a:5d:3c:eb:fc:99:a4:c4:91:11:
7b:f4:e3:0b:f9:72:df:0b:e3:a2:3a:8d:4e:5f:7e:96:9c:dd:
04:b2:26:81:d6:8d:89:6f:32:17:56:4a:d5:0a:31:70:a9:c6:
0e:b4:f9:74:b7:69:7b:79:eb:70:c4:a6:f2:a4:4a:7e:e6:c1:
ca:3d:0e:95:32:f9:4d:39:86:05:19:35:f9:06:a4:e5:91:7c:
e9:e1:de:b9:79:20:5b:3d:e0:a6:81:45:ac:0d:d1:b4:1a:b4:
1a:d7:2a:98:78:03:c5:df:bd:c9:6e:d8:77:1b:d9:bf:71:5a:
66:47:21:e1:0d:00:66:0f:b7:6c:58:df:c9:9a:a7:02:24:d4:
09:06:ff:f8:ed:6d:e5:d6:a3:00:ff:fe:10:c2:b2:aa:74:75:
ac:e5:89:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net