Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/KKeBId-AGt0dGaX9ruf_S2jV_IY.roa
File: KKeBId-AGt0dGaX9ruf_S2jV_IY.roa (raw, json)
Hash identifier: wXHmxreqtltKcZFdr7mYjuaTvY/MefiemkkN4ZygqMA=
Subject key identifier: 28:A7:81:21:DF:80:1A:DD:1D:19:A5:FD:AE:E7:FF:4B:68:D5:FC:86
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 014B46
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/KKeBId-AGt0dGaX9ruf_S2jV_IY.roa
Signing time: Thu 10 Mar 2022 11:05:16 +0000
ROA not before: Thu 10 Mar 2022 11:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210558
IP address blocks: 194.26.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84806 (0x14b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Mar 10 11:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28a78121df801add1d19a5fdaee7ff4b68d5fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:a7:b5:7d:2f:44:ca:34:93:89:95:3c:5e:
ed:6a:b3:ae:cd:71:fe:8a:83:a8:d1:29:d2:62:76:
9a:cc:25:53:77:62:0d:c2:06:ee:e7:dd:cc:ca:e5:
03:1d:fa:e6:8c:a9:76:f4:5d:77:c4:58:83:cd:51:
66:ba:fa:a9:64:e4:1d:1b:64:39:e9:37:b4:44:12:
a2:26:f2:31:8e:b1:ae:ec:53:7b:d9:0c:6c:6d:9f:
68:05:d4:6d:a2:c9:34:35:24:ff:74:c4:38:df:8b:
da:25:a7:a6:de:f1:85:9d:14:bf:cb:cc:f4:d6:49:
d4:8b:14:c5:07:e9:ec:5f:47:8c:92:bd:e5:a6:ff:
11:8c:5d:c9:09:1b:d6:58:ee:0c:af:ff:b8:d0:4a:
a7:c3:7b:1f:e5:ce:da:46:03:e6:37:f0:50:d6:5d:
27:92:f6:53:0b:b7:88:ef:28:19:ce:8e:a0:04:d7:
2b:d9:30:a2:52:d6:7a:26:8e:15:03:5f:72:87:17:
08:c6:76:c0:b2:2b:ad:e7:ff:69:27:13:d7:3b:89:
13:9a:d2:9c:8f:c4:91:6c:72:b5:11:13:44:62:39:
af:3b:a3:66:77:03:1d:a5:29:7e:7a:1d:6d:8f:43:
bd:1a:13:15:47:e1:7a:35:e4:d2:5b:33:2c:51:a6:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A7:81:21:DF:80:1A:DD:1D:19:A5:FD:AE:E7:FF:4B:68:D5:FC:86
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/KKeBId-AGt0dGaX9ruf_S2jV_IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.192.0/24
Signature Algorithm: sha256WithRSAEncryption
be:fc:99:99:31:be:1e:f4:a1:0a:c7:4c:94:bd:88:29:f2:eb:
c6:41:3b:11:21:2c:f3:c7:68:59:55:e3:25:68:ae:a4:b3:66:
e7:d6:a5:f4:29:aa:3d:35:9b:3d:2e:4b:35:6e:ac:69:19:ae:
ca:f0:ac:bd:84:84:99:8a:7a:11:f6:dc:7b:77:38:16:b0:a3:
21:58:dc:44:5a:41:c7:e5:be:c3:c3:29:61:e4:3f:87:4c:b7:
0f:33:d6:cf:34:6e:84:25:4f:77:e6:4a:fe:a2:26:34:5b:22:
e8:40:1e:b6:16:28:99:aa:d1:8c:0e:0b:c4:04:b9:89:27:08:
b7:87:97:be:6e:1d:8a:75:71:22:5b:1e:dc:6b:c8:ea:67:6f:
09:f5:a1:65:61:6a:c1:16:c2:73:52:64:a1:b6:97:a2:49:2c:
b3:79:d6:34:cc:89:4d:a7:55:56:c7:71:e0:4f:46:f8:91:6a:
13:53:7f:ad:af:2b:ff:a2:0d:ca:51:9d:67:62:57:59:b5:61:
06:90:c5:ac:9b:de:69:d8:0d:8b:41:cf:ef:67:0a:02:e1:17:
74:2f:51:82:a8:21:83:36:1c:9b:8e:e6:3e:a1:61:24:0c:b4:
9a:04:c6:4d:8b:32:01:31:68:fe:48:c5:f5:a4:b9:90:96:e6:
e5:83:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:48:55 2025 by rpki-client