Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa
File: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (raw, json)
Hash identifier: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=
Subject key identifier: 92:BF:82:40:40:C2:99:26:30:B8:E4:89:39:ED:08:19:A7:3E:3E:1E
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 01942825F30CE7405FFE34374C6FE7B2C13D
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa
Signing time: Thu 02 Jan 2025 17:52:43 +0000
ROA not before: Thu 02 Jan 2025 17:52:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198704
IP address blocks: 91.238.145.0/24 maxlen: 24
91.238.145.0/25 maxlen: 25
91.238.145.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:f3:0c:e7:40:5f:fe:34:37:4c:6f:e7:b2:c1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Jan 2 17:52:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92bf824040c2992630b8e48939ed0819a73e3e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:f6:15:5e:0c:46:c9:ea:63:d6:bd:12:d9:
51:85:70:bf:32:76:85:c4:44:64:0e:12:43:c1:49:
6d:03:99:3b:45:5e:5b:80:e7:04:f7:77:21:fd:26:
e2:44:d8:bb:26:08:f4:2e:8b:64:11:05:28:cd:6f:
9b:a5:45:e7:22:98:e1:1a:15:5f:36:41:84:03:9c:
4c:df:62:26:41:bd:6f:71:46:f7:76:51:6d:f9:cc:
29:be:22:6c:00:22:be:aa:6f:1a:b0:d2:59:b6:a8:
26:89:e5:f3:31:03:57:81:55:69:f5:3d:c3:2d:e8:
60:f8:c7:04:78:a6:4e:f1:1b:34:9f:fd:3e:84:31:
a7:03:30:44:37:a7:eb:99:ba:27:44:40:bc:81:b8:
0a:fc:b5:b3:a4:da:03:d5:04:50:cd:ed:b4:6b:10:
f3:83:6a:0c:e0:99:8e:2c:ec:1e:4b:dc:86:ea:bb:
9f:53:c8:90:23:61:51:62:6e:ba:82:ad:f2:45:bf:
c3:c3:9f:cc:81:80:89:c9:60:e1:21:30:0c:55:8a:
75:ba:55:23:00:eb:64:43:69:b1:9c:6d:ca:8e:df:
96:8f:57:84:56:93:04:13:f1:bb:1e:36:73:79:6e:
94:49:55:af:52:23:40:3c:b7:1c:b7:9a:68:2c:90:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:82:40:40:C2:99:26:30:B8:E4:89:39:ED:08:19:A7:3E:3E:1E
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.145.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e5:85:13:69:b2:ed:cf:7b:e3:84:3f:5a:2e:42:ca:a7:bc:
a0:cb:18:37:2f:5f:8a:52:f1:1a:06:e4:3c:6c:34:77:f6:98:
46:b9:d5:15:1f:f6:d7:8d:a7:3b:31:f7:f3:bb:f7:62:35:2b:
a0:7f:e3:34:49:f5:78:0b:9b:5b:c2:fd:f6:b7:8b:70:f3:d0:
27:ac:27:96:16:98:08:99:09:06:0b:53:93:00:e9:ae:b2:b5:
e1:4e:9a:c0:5f:34:73:c5:4b:14:b2:23:1e:e3:4c:14:49:b9:
94:b3:92:e6:1f:ef:9b:2d:8f:2e:e6:0f:73:47:d2:83:f5:35:
4f:51:bc:5a:fc:bd:61:59:04:02:56:81:bb:48:10:85:30:9e:
37:a9:cc:5f:62:d0:c6:22:cc:4c:e4:28:8e:bd:86:67:b5:a6:
79:95:d9:90:1f:3b:31:80:05:45:f6:b7:74:57:f8:f4:fd:78:
84:ea:14:a4:45:63:b7:ea:dc:38:fc:cf:3d:0b:60:aa:dc:86:
5f:53:73:ff:9e:17:6e:7f:04:4c:63:62:a3:54:ea:6f:ba:66:
89:c1:e9:4d:d5:40:5e:7c:46:a1:31:8d:71:42:f5:13:3d:7e:
54:5c:8a:60:51:06:e2:dd:06:7e:61:11:3a:ca:ea:5a:63:4f:
1e:ca:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net