Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/KRWvRmArzM8ygS7jbvOnoIMFEwU.roa
File: KRWvRmArzM8ygS7jbvOnoIMFEwU.roa (raw, json)
Hash identifier: CATHNYcWnKA8It/Q6OEob9CUl1NP1/fGMd0RkP0QF7k=
Subject key identifier: 29:15:AF:46:60:2B:CC:CF:32:81:2E:E3:6E:F3:A7:A0:83:05:13:05
Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial: 01939BF0B0B3D68CCAEC51A5C56913342A48
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/KRWvRmArzM8ygS7jbvOnoIMFEwU.roa
Signing time: Fri 06 Dec 2024 12:27:42 +0000
ROA not before: Fri 06 Dec 2024 12:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 194.15.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:f0:b0:b3:d6:8c:ca:ec:51:a5:c5:69:13:34:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
Validity
Not Before: Dec 6 12:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2915af46602bcccf32812ee36ef3a7a083051305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:46:b7:27:cc:f7:3f:ce:43:df:27:4b:30:
13:76:a1:b5:b0:d7:ca:60:35:9b:22:c4:e4:b9:d5:
4e:d4:c1:bf:a5:67:ad:dc:06:ed:93:68:c3:c0:5f:
13:72:65:88:1a:fb:cc:f7:ef:b9:c6:d4:67:69:6d:
a0:0b:0f:a1:46:3b:93:dc:5c:93:dc:6f:60:e2:40:
6c:f0:aa:55:02:3f:2c:b8:bb:51:67:a2:24:62:29:
aa:d4:78:74:31:fb:ae:e1:ab:32:82:02:35:cd:2e:
32:a8:c0:39:06:33:0a:d7:06:68:b2:62:d7:01:31:
f9:1c:c4:56:ea:90:64:13:b3:2a:f4:0a:1a:12:51:
81:8c:20:15:e3:73:83:4c:ee:7d:95:41:4a:a7:20:
fb:df:86:9b:06:cf:5e:ab:96:77:f0:10:3a:f8:e1:
00:31:eb:16:54:27:d3:e6:cc:4c:3c:a9:2b:8d:4c:
25:fb:a8:58:8b:93:10:d8:6e:4d:d4:12:6d:7c:ea:
22:45:03:ad:3e:f2:70:ca:3f:90:60:3d:fe:ab:44:
5f:a1:35:a7:75:d2:a3:93:63:3b:cb:4b:c4:50:51:
de:bf:f8:03:ee:0e:aa:f9:67:20:d1:f6:e9:b7:92:
06:99:29:67:75:10:2e:42:61:26:3f:fd:c2:6e:c2:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:15:AF:46:60:2B:CC:CF:32:81:2E:E3:6E:F3:A7:A0:83:05:13:05
X509v3 Authority Key Identifier:
keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/KRWvRmArzM8ygS7jbvOnoIMFEwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.209.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c6:21:92:01:39:21:12:f7:4d:f4:74:a6:cf:ec:13:4c:41:
72:cb:67:4b:c4:d5:d8:6e:94:2c:b3:40:82:8b:44:8c:56:5b:
1f:8f:ed:e5:b9:42:d9:1c:a7:18:66:bd:3a:a4:6e:b4:3f:f8:
f5:e6:5b:69:91:21:d2:5c:16:67:33:aa:a9:0d:36:20:6a:83:
ba:e9:05:77:fa:d1:e9:ef:b4:19:63:e9:d6:15:e8:6d:fc:62:
fb:70:38:57:6b:21:40:a2:43:1f:f6:b2:9c:1b:d9:8a:b1:50:
b1:19:a0:0e:86:c4:9f:b6:b0:b5:2c:97:91:08:d9:a9:e4:ba:
63:0b:e8:63:67:6d:30:eb:3f:3e:aa:69:64:01:cc:82:b6:6d:
4d:c3:9c:f3:40:43:1a:34:84:3d:72:29:98:dd:0c:4f:84:ba:
f0:5f:6a:0e:0b:18:65:d1:74:25:0e:77:a5:21:2b:e8:73:52:
c9:27:76:c8:63:f4:3d:8b:c4:30:97:c4:c0:08:5e:9f:46:6f:
47:e0:b7:0d:2f:d9:2d:2c:cd:ac:dc:78:67:92:b3:d5:8f:10:
02:a3:e6:47:02:59:52:57:68:a5:bd:4e:03:11:51:5e:04:30:
db:bc:87:04:dc:49:ae:1b:fd:cf:43:17:11:7c:3e:52:5f:f2:
12:3b:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net