Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/koBi-CJAIxWhIMFMpfebFwVo3gU.roa
File: koBi-CJAIxWhIMFMpfebFwVo3gU.roa (raw, json)
Hash identifier: PjWwCrZ6ZlH9khjFVR+zAZKP9G4VwxL4lwgDTo2/pJY=
Subject key identifier: 92:80:62:F8:22:40:23:15:A1:20:C1:4C:A5:F7:9B:17:05:68:DE:05
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCAB4CAE5793EFDF8E99E285C1CADB
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/koBi-CJAIxWhIMFMpfebFwVo3gU.roa
Signing time: Thu 02 Jan 2025 07:48:23 +0000
ROA not before: Thu 02 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39330
IP address blocks: 212.91.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ab:4c:ae:57:93:ef:df:8e:99:e2:85:c1:ca:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=928062f822402315a120c14ca5f79b170568de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:c7:47:14:ad:88:ba:7d:70:d0:b3:9b:ce:
a7:be:58:08:3a:74:e5:ed:29:89:c4:63:39:92:1f:
e7:ff:57:22:d7:1a:4c:d6:b2:60:47:a4:c2:af:34:
a0:18:97:0d:3e:41:ea:f3:ad:47:35:04:d0:0b:85:
c7:11:07:a9:f9:96:38:f4:b6:6e:1d:17:82:c6:6b:
1b:1e:dd:90:31:7b:98:06:ed:2f:67:4d:33:92:f2:
1a:70:af:50:2b:7a:10:77:97:ef:9a:fc:15:1a:ad:
e2:fc:ce:63:77:5c:f1:8a:88:e6:42:2c:14:fd:72:
33:f2:c7:1e:38:47:70:0a:ec:89:ab:bf:3a:c1:d8:
20:36:45:d5:68:53:da:87:dd:f1:e1:93:3b:43:9b:
53:74:51:97:13:62:f7:a7:79:85:f7:de:f1:48:32:
a1:7f:5f:82:d4:4f:f7:34:42:cb:1d:2b:e2:84:53:
85:57:ae:5b:7c:ed:b4:6b:3c:66:bf:41:91:0e:eb:
6f:a7:dd:3c:38:0c:9d:7b:cc:f3:c3:62:0c:0d:08:
5f:45:21:76:4e:73:3e:35:33:b0:a4:3d:5e:cb:23:
88:32:1b:d7:74:e6:38:fa:1d:37:8b:cd:5f:a8:35:
30:27:4e:ee:20:8a:b4:b2:af:aa:6d:cd:b3:ff:a3:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:62:F8:22:40:23:15:A1:20:C1:4C:A5:F7:9B:17:05:68:DE:05
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/koBi-CJAIxWhIMFMpfebFwVo3gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.22.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b6:8f:a1:a8:60:24:23:67:74:37:0d:ef:8e:d3:9f:b4:df:
34:17:7f:60:9d:a7:0e:de:ab:67:f7:65:de:12:1e:a3:b1:04:
cd:c4:e5:d1:3f:8f:81:28:ef:16:8d:d6:6d:37:c5:40:28:df:
81:92:ce:b4:cd:26:98:31:d3:4a:cc:66:ca:10:24:79:43:98:
dd:32:76:b4:bb:9f:bb:ed:fe:41:bd:0e:ff:4b:8e:e6:bb:b1:
69:33:42:db:1d:f4:ce:33:25:86:ef:f9:cb:0d:85:eb:38:63:
79:dd:05:5c:ed:ac:a0:4a:9e:ef:2e:46:93:44:2d:f4:2f:9a:
50:15:41:83:71:7e:73:82:b2:a2:82:8c:4e:2f:4a:94:74:3c:
11:08:2f:fc:b5:a0:fd:96:c5:18:9f:2c:79:4d:73:f1:db:1c:
88:fa:f1:89:0d:54:46:75:48:d9:d6:7e:78:8a:b1:d7:23:db:
30:16:b7:3f:3c:eb:e4:66:a4:fc:b1:0a:38:7e:73:72:6c:79:
f8:95:c9:59:4f:62:53:67:31:49:53:da:ea:12:1a:bd:cb:c8:
f0:54:75:7f:b7:72:b5:ef:ca:13:ca:be:87:ff:d8:0e:61:d6:
6d:98:ad:ef:da:80:88:31:ac:0e:8a:2a:90:44:7b:0f:29:a5:
29:28:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:23 2025 by rpki-client