Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/KkLSlMbTCxhRaCqTxjZyEztKIBc.roa
File: KkLSlMbTCxhRaCqTxjZyEztKIBc.roa (raw, json)
Hash identifier: +8/cjxRrnmszXZv1sZXfBDUlsfFmWhf3RF0SRiONysY=
Subject key identifier: 2A:42:D2:94:C6:D3:0B:18:51:68:2A:93:C6:36:72:13:3B:4A:20:17
Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial: 01939BF0AFBD9ED81C46FECC37FC591F4333
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/KkLSlMbTCxhRaCqTxjZyEztKIBc.roa
Signing time: Fri 06 Dec 2024 12:27:42 +0000
ROA not before: Fri 06 Dec 2024 12:27:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.15.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:f0:af:bd:9e:d8:1c:46:fe:cc:37:fc:59:1f:43:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
Validity
Not Before: Dec 6 12:27:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a42d294c6d30b1851682a93c63672133b4a2017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bd:02:11:0f:44:70:62:60:9e:73:29:aa:44:
bd:bd:80:17:0e:53:4a:ca:f3:d6:55:50:0d:85:ed:
11:93:28:34:a9:b9:c8:b0:50:eb:45:c1:9f:ff:08:
18:31:d9:13:97:7b:d1:45:4c:17:b1:87:7d:6e:c4:
96:7b:23:43:e4:9e:91:f7:2a:de:df:9e:3d:d5:78:
31:84:0c:60:cc:4a:d2:07:f1:cf:4f:ab:06:be:3e:
4a:af:bf:c4:41:05:0d:0a:f7:bc:89:2b:5f:20:7d:
be:b9:e3:cf:59:87:39:2b:58:48:7e:ae:9d:e8:b0:
10:0c:f5:04:36:d2:1d:d5:dd:d0:d3:ce:c1:03:a1:
d5:7c:b3:cf:aa:44:d5:1f:1c:44:53:db:cf:5b:06:
a8:58:3f:d5:0b:ff:ab:aa:a7:9e:92:3d:1b:26:e2:
c7:b4:c2:2c:28:4a:56:99:15:27:ec:72:95:10:3d:
be:8a:1d:78:f6:e1:a5:de:19:96:76:94:b3:7f:c6:
d7:68:96:56:55:8e:cb:5b:1b:d3:d1:fa:92:9e:52:
41:05:fe:b7:18:54:39:7d:b1:17:be:01:a5:1a:07:
10:85:7a:ee:8d:51:99:87:b4:57:6c:71:dd:0b:bc:
02:69:94:b1:76:69:84:a3:67:af:c5:66:40:0e:3c:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:42:D2:94:C6:D3:0B:18:51:68:2A:93:C6:36:72:13:3B:4A:20:17
X509v3 Authority Key Identifier:
keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/KkLSlMbTCxhRaCqTxjZyEztKIBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.209.0/24
Signature Algorithm: sha256WithRSAEncryption
73:17:87:b1:28:ed:4d:bc:71:fe:f9:f0:d1:f1:f0:1d:b4:ba:
f5:20:fb:54:8d:54:74:c2:2d:3a:52:ff:61:f0:d5:89:48:df:
5d:a2:b9:96:96:ec:0c:3c:50:b2:10:cf:f5:4b:76:e9:c0:09:
3f:52:74:e3:f7:a9:0c:1a:13:2e:c7:a9:42:7a:89:49:26:e1:
69:f7:83:55:e0:3e:71:6d:d5:55:25:fd:6c:80:30:73:dd:ea:
0a:c1:76:8a:94:24:cc:39:da:68:c2:3b:9b:cf:64:2c:ab:41:
22:66:63:14:9a:f4:0e:06:4c:ad:da:1e:c8:7f:0a:f5:e3:da:
0d:bf:d2:f3:84:02:d9:66:64:aa:0f:b7:48:67:30:eb:fe:14:
a1:dc:fc:ce:43:64:7b:c1:d7:3a:dc:38:d4:fe:04:04:24:cc:
28:78:f2:fe:32:a3:65:c8:3d:0d:0e:59:b2:1d:ac:22:a1:f9:
5e:5d:83:e9:36:2d:42:50:50:89:2d:ed:8b:56:f7:e2:59:23:
83:f4:6a:6a:54:2c:ae:96:fd:0b:b2:79:e3:a6:d0:d2:95:7b:
97:7b:f2:01:58:a2:1f:71:98:c2:74:5e:c8:6b:75:5b:5e:59:
99:d8:75:52:49:2a:18:21:90:a7:2a:e8:36:0c:00:18:49:5d:
e7:97:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:43 2024 by rpki-client on console.sobornost.net