Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/KnV_AE6DL_MtDZzm6l4elKcwuUw.roa
File: KnV_AE6DL_MtDZzm6l4elKcwuUw.roa (raw, json)
Hash identifier: InYGiJwrfkjvY/pXwDaUVgY/ColAVe7zTHarxreD12o=
Subject key identifier: 2A:75:7F:00:4E:83:2F:F3:2D:0D:9C:E6:EA:5E:1E:94:A7:30:B9:4C
Certificate issuer: /CN=a580fe47b417c8730f857b6536f0df1a635ea852
Certificate serial: 0184A8AC52D2EEC01A54BA22A4788AAA36FE
Authority key identifier: A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/KnV_AE6DL_MtDZzm6l4elKcwuUw.roa
Signing time: Thu 24 Nov 2022 08:06:16 +0000
ROA not before: Thu 24 Nov 2022 08:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50131
IP address blocks: 178.22.30.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:ac:52:d2:ee:c0:1a:54:ba:22:a4:78:8a:aa:36:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a580fe47b417c8730f857b6536f0df1a635ea852
Validity
Not Before: Nov 24 08:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a757f004e832ff32d0d9ce6ea5e1e94a730b94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:7b:a3:8f:8e:0a:95:79:de:ab:39:6c:58:
54:a4:6e:c1:98:78:37:cc:cc:8f:82:6d:29:1b:ff:
a3:15:f8:1a:78:b2:f2:f5:91:c5:e9:a8:33:f3:46:
32:57:49:3b:20:f2:e8:e2:6c:3b:d3:20:b8:e2:52:
2d:16:ed:2b:0b:eb:fe:05:70:d9:dc:0f:0b:91:ef:
00:5c:1a:a2:ef:18:1f:51:7f:ef:e5:03:5c:78:b7:
71:79:de:50:ea:ec:07:52:6e:c6:0e:6c:b3:e0:33:
a1:97:70:1f:c1:3c:01:bc:30:8c:3a:52:d3:c9:6e:
c6:5f:28:70:f3:72:88:6e:23:35:a1:f3:9e:39:01:
5f:62:2e:0c:88:d2:ee:ad:de:e6:5c:46:e5:83:3a:
15:27:a1:7f:0d:1a:34:99:b2:19:70:21:ac:e4:7c:
4e:06:4e:97:48:ea:6a:77:0d:a2:2d:89:ca:22:9f:
c2:7d:20:60:52:41:30:47:6f:21:05:46:31:76:04:
c5:fd:08:e3:96:db:1b:09:ea:80:bc:3d:8f:0d:e9:
f0:bb:53:76:e8:71:5e:75:a7:e1:d6:23:ac:ed:51:
56:c3:08:b3:56:35:9b:18:73:de:fe:95:78:47:48:
74:f2:2b:97:a8:dc:d4:dc:ea:e2:8c:30:11:85:c2:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:75:7F:00:4E:83:2F:F3:2D:0D:9C:E6:EA:5E:1E:94:A7:30:B9:4C
X509v3 Authority Key Identifier:
keyid:A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/KnV_AE6DL_MtDZzm6l4elKcwuUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2a:a8:b3:c1:c1:3a:0c:fc:a3:6b:e0:9f:ba:05:8c:b6:c6:
3a:8f:26:78:91:32:e3:55:ef:69:4e:6a:b3:3e:75:00:da:10:
02:02:9c:1c:1f:17:7e:4d:b4:ab:c3:38:f6:35:7d:8c:65:b0:
09:bd:e8:8c:44:08:c1:58:6c:5f:17:a1:e4:51:5a:5e:d3:04:
99:ed:96:28:26:d5:0a:ae:3a:e1:a4:f8:49:8e:db:b3:13:5a:
dd:bc:fb:86:d4:53:3a:ee:77:3c:e6:ac:85:27:6d:7d:73:71:
b5:e7:cc:95:db:38:34:fc:fb:d9:8a:15:f8:dc:34:1f:cb:0b:
90:b6:d0:72:63:11:80:27:c3:82:a5:b3:be:14:2f:cb:fc:bb:
88:d1:09:f0:69:8a:e4:75:c7:3e:5d:bb:a1:97:41:7a:0e:8f:
9b:c8:5a:98:2a:0f:d8:66:0f:c4:05:8b:56:a3:6b:d4:19:e0:
66:c8:67:cf:28:de:a6:c5:a6:4d:3e:7c:28:2c:77:08:54:af:
e3:ad:ed:c1:5e:32:48:b9:e9:e5:0b:d3:c1:0f:f5:ae:ef:00:
4d:10:4a:52:7e:53:4a:b5:8f:14:2d:b9:03:05:ea:14:c6:ca:
3c:0d:09:5f:cd:ad:a2:e8:3d:54:75:7f:4d:83:fe:bc:59:08:
d1:3d:3c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:10:08 2025 by rpki-client