Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/KrIvvgvNcbldjoVbc0aYd49MKLk.roa
File: KrIvvgvNcbldjoVbc0aYd49MKLk.roa (raw, json)
Hash identifier: Efb7XeSs1Qr2rRr6o/FWnq95UEV78aFPxWcZg4DCWHc=
Subject key identifier: 2A:B2:2F:BE:0B:CD:71:B9:5D:8E:85:5B:73:46:98:77:8F:4C:28:B9
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 0194206850FD147484361F8D5DE042CC6B22
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/KrIvvgvNcbldjoVbc0aYd49MKLk.roa
Signing time: Wed 01 Jan 2025 05:48:14 +0000
ROA not before: Wed 01 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 138.102.0.0/16 maxlen: 16
147.99.0.0/16 maxlen: 16
147.100.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:50:fd:14:74:84:36:1f:8d:5d:e0:42:cc:6b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Jan 1 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab22fbe0bcd71b95d8e855b734698778f4c28b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:a1:ac:26:76:ba:33:da:bc:a8:8f:1b:0f:
10:75:5f:cd:f6:38:35:ca:64:65:a1:5f:4e:13:39:
9f:fb:1c:d3:b2:96:1d:e6:05:76:23:55:0d:58:c9:
6c:94:d6:2b:bc:9d:e8:12:c2:be:7a:ed:49:ac:e5:
3f:e9:45:53:d3:06:fc:6d:5e:d2:8b:8b:98:b7:c8:
5d:35:66:d6:0d:59:5f:6c:55:14:e3:13:dc:51:ac:
a7:ac:64:4b:f9:cc:fd:45:47:10:90:97:df:d4:c7:
a0:ca:40:45:2c:10:65:56:94:37:26:7c:4f:9c:ea:
9e:90:52:b8:ec:49:ba:3a:c1:41:65:55:37:a2:8a:
75:22:09:f8:63:d7:6c:c0:8f:09:6d:f3:1b:41:9e:
a0:44:b1:92:64:b5:53:3e:63:94:fd:34:47:42:a3:
ec:cd:be:f2:0f:e0:6d:bb:1b:3d:ca:d3:37:6a:4e:
51:53:ad:62:d2:15:41:f4:b4:c5:a5:4b:1f:17:c3:
6a:80:4a:2e:36:28:d6:d7:9a:9c:68:c4:57:b1:9f:
5f:87:58:b8:00:9e:95:47:e7:0e:05:c5:3e:c6:7d:
e5:c6:1a:4e:2c:60:c0:a3:58:90:7d:8f:63:aa:65:
26:15:07:68:77:53:cb:e3:58:c0:9f:fd:a5:bd:74:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B2:2F:BE:0B:CD:71:B9:5D:8E:85:5B:73:46:98:77:8F:4C:28:B9
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/KrIvvgvNcbldjoVbc0aYd49MKLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.102.0.0/16
147.99.0.0-147.100.255.255
Signature Algorithm: sha256WithRSAEncryption
0a:76:77:b1:51:4f:5e:46:b2:9e:4f:49:0c:c1:e3:e2:b7:70:
21:8f:e2:81:cc:80:05:13:b6:2a:b3:00:52:f9:64:19:35:5a:
34:73:22:99:04:d6:0a:f4:6f:a3:36:82:6c:66:c9:ce:1b:5f:
18:5e:cf:2a:c4:e9:d3:d1:12:44:f9:7b:c6:e2:43:ea:06:51:
64:24:6f:41:1c:f7:b6:a8:64:a1:6c:55:49:4f:d8:f0:4a:dd:
05:8e:0f:cb:71:41:ad:6d:74:21:fc:8c:bb:7b:d8:75:4c:a2:
a6:80:84:4c:e2:22:1d:66:b0:55:29:22:10:9c:0b:d0:79:55:
1c:b7:7a:95:85:90:11:65:f7:57:5c:ba:35:4c:29:f7:30:e2:
31:dc:34:c5:52:9b:8b:1a:4a:c6:5c:52:0a:70:42:80:99:1f:
a5:7d:75:0a:a7:de:44:76:54:d6:63:8e:0e:6f:96:d3:78:22:
a0:6b:e2:46:be:67:dd:1d:6a:44:69:36:25:01:a5:23:71:91:
be:26:21:1d:df:f4:f8:3f:0a:01:c2:27:e6:94:86:3a:11:c1:
b0:4a:39:26:f1:41:f6:c6:0c:09:c8:96:cc:52:4d:6b:0a:46:
58:48:99:24:6e:7a:9f:f0:03:6c:a8:10:96:90:84:10:b6:76:
7d:a0:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net