Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KfMn5kmWbziAa6_kkJKFEBgOg8A.roa
File: KfMn5kmWbziAa6_kkJKFEBgOg8A.roa (raw, json)
Hash identifier: ZMzWMV6k2cyYmsC73g4QXHe8xrqYNLiM6cum1BiNbHk=
Subject key identifier: 29:F3:27:E6:49:96:6F:38:80:6B:AF:E4:90:92:85:10:18:0E:83:C0
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B1368FACC1ED54821B976D64FDF64
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KfMn5kmWbziAa6_kkJKFEBgOg8A.roa
Signing time: Sun 01 Jan 2023 13:35:09 +0000
ROA not before: Sun 01 Jan 2023 13:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205218
IP address blocks: 193.246.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:13:68:fa:cc:1e:d5:48:21:b9:76:d6:4f:df:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29f327e649966f38806bafe490928510180e83c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:f7:71:d3:d1:63:55:2a:e8:13:ec:c8:8c:
58:33:9d:5d:c7:e2:ab:e1:11:6c:71:ff:e7:0f:00:
db:33:b4:9b:a7:37:01:f7:a5:bc:03:be:80:5b:4f:
77:da:75:b1:7c:c3:01:d2:92:b3:22:1a:10:d5:d4:
e3:87:d4:c6:42:c2:85:53:6f:69:df:55:59:9b:fd:
78:41:b6:79:97:74:0a:c3:c9:04:cc:de:2f:5b:5a:
c7:cc:64:6d:7f:23:dd:89:e5:02:28:d8:ae:3b:2f:
c7:54:1b:12:37:91:6e:a1:51:19:27:42:0b:0d:1e:
d7:7b:2f:ae:dd:da:87:df:80:b2:ff:57:da:34:5a:
b7:b5:4b:e3:8e:a6:0d:16:f0:64:3d:75:c0:63:d6:
2b:0d:80:14:c2:b9:eb:f3:9f:03:71:cd:52:41:5c:
90:51:ed:c9:9c:38:2d:60:7a:53:eb:e2:78:c7:d5:
0b:7c:11:3f:56:a1:9f:14:a4:e8:6d:93:ac:73:e7:
3a:a4:f3:5b:e5:83:ee:c1:a6:d7:8a:1a:5a:43:c1:
33:9f:18:f7:77:6f:46:cb:c8:c0:d6:a2:cf:5d:13:
eb:4e:fa:10:6a:96:fc:21:b8:8e:8f:69:97:b4:4c:
fb:51:19:cc:22:b2:cc:38:38:97:63:cf:19:8b:75:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F3:27:E6:49:96:6F:38:80:6B:AF:E4:90:92:85:10:18:0E:83:C0
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KfMn5kmWbziAa6_kkJKFEBgOg8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:95:b7:1e:ca:d1:de:e0:95:3d:c7:f0:a9:c9:d1:c6:a7:3d:
97:52:ba:34:6c:b2:3c:4b:52:1b:c7:83:a8:63:86:80:1d:2f:
ee:a4:d3:86:83:ce:a5:28:1a:b2:4a:91:4f:c3:4f:6f:3d:f3:
7e:03:8d:a6:82:cc:32:06:46:5c:bd:f3:0e:61:93:0b:4f:69:
4f:ff:e5:08:4b:53:01:2a:52:f7:de:06:84:7c:f9:13:ca:15:
57:48:7c:9a:59:60:85:f3:f6:7c:2b:64:8e:bf:86:08:fd:81:
fd:68:e2:36:5f:4f:b9:3a:63:84:b8:76:5c:14:6c:bb:98:b4:
76:84:a9:07:f2:9b:f3:9c:da:0e:64:51:61:21:7d:09:2a:ad:
5f:2c:c4:da:1b:a6:10:05:6a:dd:ee:7d:c8:53:ba:95:ab:a7:
ca:5a:74:35:29:32:cc:4a:32:c6:80:ef:e0:c9:c4:b9:be:77:
3c:ea:24:2e:89:10:23:17:c1:0a:0d:6d:5f:a7:21:07:8d:c3:
45:a8:b0:eb:2d:29:b3:67:bb:b0:08:f4:9a:fd:47:73:38:ac:
15:a0:a8:b2:27:e7:4d:fc:f2:cd:c7:8a:55:21:ca:3e:37:e8:
35:c4:54:19:ab:3e:24:0e:55:b5:96:42:90:cf:c8:ce:b2:7b:
d5:1c:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:28 2025 by rpki-client