Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Km28LjDw4_yEnULyl_FO91aPJrE.roa
File: Km28LjDw4_yEnULyl_FO91aPJrE.roa (raw, json)
Hash identifier: PbFS8dxrUnJJR5JeMfUDWJkZdogSiNCLdhKdf69mqFY=
Subject key identifier: 2A:6D:BC:2E:30:F0:E3:FC:84:9D:42:F2:97:F1:4E:F7:56:8F:26:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246454923973316305AF3CB4A7A110
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Km28LjDw4_yEnULyl_FO91aPJrE.roa
Signing time: Thu 02 Jan 2025 17:51:01 +0000
ROA not before: Thu 02 Jan 2025 17:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 81.161.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:64:54:92:39:73:31:63:05:af:3c:b4:a7:a1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a6dbc2e30f0e3fc849d42f297f14ef7568f26b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:56:0a:93:b3:83:05:4b:5a:22:fb:6a:07:
b6:19:ae:a9:20:07:ce:ea:52:9b:9c:ba:1f:f1:16:
16:bd:b8:a6:14:21:33:53:e9:c7:ec:48:bd:c8:35:
25:77:f8:30:ef:0b:15:45:0a:73:b2:3c:af:e1:95:
ef:0d:4b:b9:4c:bd:59:cd:f5:64:82:8f:db:f8:3d:
00:6f:11:3c:3d:8a:98:67:39:57:19:0c:a9:55:6a:
88:ee:ef:01:32:dd:97:b2:23:73:23:24:82:7d:f0:
7e:bf:f9:14:52:6a:0f:c4:3d:d1:78:25:88:49:a9:
17:66:4a:d1:30:2c:22:b1:f4:ae:f4:df:41:28:fa:
cd:2f:9a:54:9f:b9:92:1a:40:a3:94:19:9a:21:aa:
6b:67:3d:36:8a:93:44:7a:d0:91:af:01:02:81:58:
69:5f:e6:e0:81:a0:bd:49:78:f9:a6:89:3c:58:68:
48:10:3f:93:c4:d8:ba:9a:06:be:71:d0:ae:00:a2:
e2:e1:26:6e:ef:23:f9:5c:c7:eb:51:ac:17:48:0d:
ca:53:0b:8d:cb:89:35:1e:46:0d:ee:c7:ed:e9:22:
a7:54:15:7a:4a:86:d7:a5:66:b0:3a:c1:ff:3a:a9:
00:c5:a1:c8:db:01:50:96:7b:3d:ec:fb:c0:2c:8c:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:BC:2E:30:F0:E3:FC:84:9D:42:F2:97:F1:4E:F7:56:8F:26:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Km28LjDw4_yEnULyl_FO91aPJrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.229.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cf:65:e0:44:fb:6e:5e:39:f0:89:f5:96:5c:12:ba:cb:63:
85:b4:0f:8b:64:25:01:b4:93:cf:b4:d5:59:55:76:0c:44:12:
2a:e6:65:fb:c2:e4:f9:0e:6c:aa:73:ea:2c:33:8c:6a:02:60:
87:32:92:b2:e8:68:4a:9c:c8:f6:7b:18:3f:0a:83:20:97:19:
54:6d:ca:fa:42:7c:46:9e:76:a0:1d:79:33:78:70:f9:d3:74:
bd:22:20:da:ed:fe:9d:a1:90:3f:ad:3c:e4:41:60:8d:8c:c8:
1b:df:67:c9:68:d2:15:23:ff:13:04:43:8b:97:aa:3f:f5:b5:
c9:96:da:ce:f2:d5:56:cb:6f:fa:34:d9:54:d1:21:ad:32:97:
74:97:dd:0c:0c:7f:62:bd:dd:dc:16:34:04:7b:89:93:64:b5:
9b:77:0e:1c:ac:60:a4:bd:12:a4:6e:03:d3:65:d8:f0:80:09:
49:7b:4a:4e:bb:0f:15:40:14:b8:35:22:bd:b5:f7:9b:af:b9:
50:fb:54:6d:84:d9:40:5b:88:dd:b3:a7:78:8b:ca:31:2a:eb:
92:c7:8c:d7:7e:d2:e3:48:a4:6f:af:d9:28:23:c6:7e:96:24:
30:cd:8d:69:98:6f:4a:7b:59:0c:1b:df:79:68:13:a0:c5:f0:
1b:36:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:01 2025 by rpki-client