Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K2ACtRNCGmRQye07bIMPkpZgE2s.roa
File: K2ACtRNCGmRQye07bIMPkpZgE2s.roa (raw, json)
Hash identifier: 78zwHUxHw0F7uUk5+QU9T/2Rqpr245qyZIOi/YTRYak=
Subject key identifier: 2B:60:02:B5:13:42:1A:64:50:C9:ED:3B:6C:83:0F:92:96:60:13:6B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019479C73763C6910F1FCE8CCCBE7D94D6B4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K2ACtRNCGmRQye07bIMPkpZgE2s.roa
Signing time: Sat 18 Jan 2025 14:18:06 +0000
ROA not before: Sat 18 Jan 2025 14:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51396
IP address blocks: 195.211.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:c7:37:63:c6:91:0f:1f:ce:8c:cc:be:7d:94:d6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 18 14:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b6002b513421a6450c9ed3b6c830f929660136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:69:02:e4:35:d3:99:f9:91:7a:8b:7b:57:
01:50:e9:dd:35:1c:a3:38:f9:2b:65:90:0b:3f:01:
92:a0:92:3a:a1:8b:3e:41:a1:e0:70:24:08:0b:3d:
31:5c:18:b6:fd:40:a2:b7:0c:15:30:ac:3d:d6:38:
2a:55:d2:7a:89:8a:f3:2e:71:7d:d6:a4:44:17:b7:
e2:33:36:f4:82:87:a7:e1:fb:c8:72:4c:d2:3e:c0:
1b:4d:0d:73:dd:54:8b:3d:ba:dd:d1:a1:95:e2:e8:
96:97:78:bf:f2:18:2d:76:e1:d6:7e:b6:78:8f:fd:
05:54:13:c5:2e:01:b8:5c:b2:ec:8f:d9:76:e7:ce:
a5:86:be:1f:56:f1:15:60:b9:24:a9:e3:5c:45:2b:
79:89:e6:11:6f:79:e8:ba:4a:a3:44:e2:49:1c:80:
d0:47:ba:b4:16:19:a7:27:e2:c7:da:4a:61:a2:d9:
b5:33:86:68:02:f2:00:8a:37:97:65:54:1a:92:29:
2b:82:35:f0:4f:20:36:65:d6:65:0c:88:a4:c1:cc:
37:9e:04:9d:f4:19:90:61:89:43:a5:2b:68:13:6a:
5c:b0:8c:9f:5a:eb:4c:a6:f0:02:d5:da:43:09:ba:
4a:e4:c5:9c:29:da:6c:a2:ab:c9:f0:68:c2:98:1a:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:60:02:B5:13:42:1A:64:50:C9:ED:3B:6C:83:0F:92:96:60:13:6B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/K2ACtRNCGmRQye07bIMPkpZgE2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:97:9e:41:8c:a7:0c:e9:7b:fa:a5:0e:48:79:03:b1:bd:
a4:e0:4b:0f:71:cf:58:b4:36:1f:5d:0d:1e:b4:de:93:a7:df:
f6:d1:38:5a:3d:03:07:0f:c4:b4:de:a2:2d:7d:2e:53:87:98:
5d:ae:80:64:bc:d9:09:50:da:fc:af:91:3c:23:70:d5:27:85:
4d:9b:9d:05:83:66:bb:2a:8c:dc:c2:31:82:96:b7:a5:f8:96:
93:23:ea:31:9a:76:13:0d:23:b9:df:f2:4c:a1:d9:a4:6a:9f:
0c:b2:06:49:50:78:44:0f:0d:e0:e9:ad:e4:68:98:8b:e3:2d:
b0:05:dd:c2:25:03:7d:ea:b9:47:2c:62:44:c8:6e:bc:8f:81:
ee:76:de:aa:bd:80:8d:d6:2f:5f:c7:3f:24:2d:5c:6e:a9:c0:
70:d2:54:a5:77:09:62:29:dd:fa:ae:14:69:86:7e:14:85:92:
14:69:82:20:94:c2:83:72:fe:ea:22:26:2d:5d:12:4a:6b:f8:
bb:4a:45:3d:92:b4:d4:42:5b:57:b7:12:1e:50:52:64:09:af:
7b:b5:30:6b:9c:bc:62:f9:bc:c3:25:8c:65:d9:14:67:86:95:
4b:f1:0c:f5:65:1e:07:e0:22:da:de:f4:46:11:46:5d:10:95:
14:4f:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:06:12 2025 by rpki-client