Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/X-KNJVz9F02-eLDfaKPH63PtzRc.roa
File: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (raw, json)
Hash identifier: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=
Subject key identifier: 5F:E2:8D:25:5C:FD:17:4D:BE:78:B0:DF:68:A3:C7:EB:73:ED:CD:17
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019421445D96C5AE7F936DE356EDCE7AC292
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/X-KNJVz9F02-eLDfaKPH63PtzRc.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48455
IP address blocks: 195.162.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5d:96:c5:ae:7f:93:6d:e3:56:ed:ce:7a:c2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fe28d255cfd174dbe78b0df68a3c7eb73edcd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:68:82:11:22:de:9e:8d:78:38:85:8d:34:
ae:c9:ce:41:bf:4f:d2:4b:5e:3f:3e:54:75:dc:f4:
c7:30:9d:07:e4:39:6d:2f:bb:24:31:79:2d:26:8c:
d2:71:c0:25:3d:97:27:6d:71:d9:c6:50:1b:b9:2e:
8d:c9:e0:07:01:03:e7:54:1c:7d:6d:2c:78:a3:dc:
bc:3b:60:af:0b:32:6b:ed:89:b8:03:b4:c0:fd:58:
a6:9e:ad:d2:6b:bf:2c:20:20:7f:bd:99:fa:17:c6:
84:b7:f5:9f:0e:77:d5:95:0c:08:17:d4:58:28:08:
7c:0f:51:e5:22:16:96:80:46:2d:b4:ab:c5:32:73:
f9:45:98:cb:9f:74:51:de:ab:32:e2:7b:f2:1d:f3:
2f:56:d6:23:02:43:cf:59:2c:f7:11:67:86:45:05:
92:3f:ca:0f:be:f9:13:ec:e1:f9:2e:50:3a:c9:09:
ef:48:87:e7:d7:fe:b4:e4:5f:6c:92:ff:65:c3:b2:
2c:ee:52:2a:ed:7e:23:11:29:04:86:65:90:e1:a4:
04:e5:73:82:76:5b:2b:cd:7f:a1:75:e0:ef:b7:04:
d7:08:17:10:a9:92:d7:f8:1f:fb:5f:01:6e:a6:9f:
b5:c4:bb:81:8a:e2:84:5e:77:b9:01:08:fc:bb:2f:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E2:8D:25:5C:FD:17:4D:BE:78:B0:DF:68:A3:C7:EB:73:ED:CD:17
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/X-KNJVz9F02-eLDfaKPH63PtzRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.2.0/23
Signature Algorithm: sha256WithRSAEncryption
22:cb:ab:39:74:1d:ee:9e:4a:df:5b:e9:ef:20:8a:0e:ae:48:
22:99:dc:79:71:15:a3:1b:0b:92:77:15:56:8f:bb:32:60:7a:
d7:4e:48:83:f2:72:a4:04:63:63:59:95:38:36:fe:e4:dd:15:
b3:a1:2d:ed:66:ff:95:0e:1c:65:01:ac:fe:33:be:29:b8:5e:
d8:0a:07:97:94:81:df:97:df:68:38:8f:46:59:40:85:ed:d7:
9d:87:fe:d8:8e:ef:0c:29:ff:e2:1d:5b:27:67:9f:b3:ad:04:
bc:c4:a2:c3:a5:29:08:67:5c:07:7c:3f:0b:7e:c0:fa:13:2b:
00:8c:a9:9a:b6:cf:fb:23:d7:cc:c2:df:9e:6b:34:3e:4d:4c:
a5:3d:5c:a1:2e:5a:a5:a6:b0:86:38:6a:61:77:e9:a3:a5:32:
fd:f7:3b:c1:b8:ee:c4:f9:85:8d:d5:79:59:7f:e0:88:0f:8c:
c5:0a:9e:cc:80:e8:3f:25:db:cb:c9:58:b3:b4:a6:7e:58:56:
40:59:a4:82:d6:d2:ca:fd:d2:bb:f4:dd:85:f5:c3:e9:77:be:
1f:8d:28:62:aa:b9:e4:91:95:a7:84:c4:b5:8c:4a:af:2c:08:
2d:1f:b0:c8:de:a4:66:e0:89:b8:83:1a:91:5b:62:bb:5e:ec:
57:de:4d:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRF2Wxa5/k23jVu3OesKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx
MDc4NTQwHhcNMjUwMTAxMDk0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmUyOGQyNTVjZmQxNzRkYmU3OGIwZGY2OGEzYzdlYjczZWRjZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxFoghEi3p6NeDiFjTSuyc5Bv0/S
S14/PlR13PTHMJ0H5DltL7skMXktJozSccAlPZcnbXHZxlAbuS6NyeAHAQPnVBx9
bSx4o9y8O2CvCzJr7Ym4A7TA/Vimnq3Sa78sICB/vZn6F8aEt/WfDnfVlQwIF9RY
KAh8D1HlIhaWgEYttKvFMnP5RZjLn3RR3qsy4nvyHfMvVtYjAkPPWSz3EWeGRQWS
P8oPvvkT7OH5LlA6yQnvSIfn1/605F9skv9lw7Is7lIq7X4jESkEhmWQ4aQE5XOC
dlsrzX+hdeDvtwTXCBcQqZLX+B/7XwFupp+1xLuBiuKEXne5AQj8uy+1yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/ijSVc/RdNvniw32ijx+tz7c0XMB8GA1UdIwQY
MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt
Y2YwMTI0Y2VkNGQ2LzEvWC1LTkpWejlGMDItZUxEZmFLUEg2M1B0elJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2
LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw6ICMA0G
CSqGSIb3DQEBCwUAA4IBAQAiy6s5dB3unkrfW+nvIIoOrkgimdx5cRWjGwuSdxVW
j7syYHrXTkiD8nKkBGNjWZU4Nv7k3RWzoS3tZv+VDhxlAaz+M74puF7YCgeXlIHf
l99oOI9GWUCF7dedh/7Yju8MKf/iHVsnZ5+zrQS8xKLDpSkIZ1wHfD8LfsD6EysA
jKmats/7I9fMwt+eazQ+TUylPVyhLlqlprCGOGphd+mjpTL99zvBuO7E+YWN1XlZ
f+CID4zFCp7MgOg/JdvLyViztKZ+WFZAWaSC1tLK/dK79N2F9cPpd74fjShiqrnk
kZWnhMS1jEqvLAgtH7DI3qRm4Im4gxqRW2K7XuxX3k30
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net