Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/KJfelLlC30aamoeIIJShycqiRr4.roa
File: KJfelLlC30aamoeIIJShycqiRr4.roa (raw, json)
Hash identifier: KAitVwR37QS6OjBHb+SaP9sey83dRk2QEWJDucBfrNg=
Subject key identifier: 28:97:DE:94:B9:42:DF:46:9A:9A:87:88:20:94:A1:C9:CA:A2:46:BE
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 0191A84DE4CD80A950F6D000873F00A62321
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/KJfelLlC30aamoeIIJShycqiRr4.roa
Signing time: Sat 31 Aug 2024 11:59:22 +0000
ROA not before: Sat 31 Aug 2024 11:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209279
IP address blocks: 195.182.38.0/24 maxlen: 24
195.182.38.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a8:4d:e4:cd:80:a9:50:f6:d0:00:87:3f:00:a6:23:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Aug 31 11:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2897de94b942df469a9a87882094a1c9caa246be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:37:4a:b1:fd:d5:64:c8:8d:65:3a:89:94:
6d:17:f0:27:fc:48:72:52:6a:30:e6:32:a0:52:e8:
27:ec:8c:b6:80:6a:e4:0c:94:4d:02:34:8f:75:e8:
a7:f2:f9:fb:20:5f:2f:9e:f0:6e:db:b5:ff:81:04:
35:c0:c5:15:bd:6c:b9:76:0f:0d:ae:5e:1b:92:43:
7f:02:b8:20:02:16:04:7e:62:d7:7e:65:ca:9d:80:
c9:1d:c9:e3:38:88:3c:f0:ea:ce:ca:ed:3e:4a:14:
ac:38:12:bd:ff:f3:53:34:3c:5c:25:34:aa:35:a1:
a7:b6:b9:23:ac:b2:bb:b5:54:e0:df:50:a4:72:20:
90:e5:5f:86:91:10:33:18:06:d5:ce:b5:50:b7:3b:
7a:47:71:22:3f:a2:0e:fd:6f:1a:28:16:31:13:07:
16:2d:8d:bb:90:9f:7e:44:ba:fb:a1:3f:cc:f9:4d:
ab:65:03:e6:57:2e:37:20:e4:0c:d7:3e:16:b8:cb:
9c:df:e6:5d:79:08:97:29:24:88:22:d3:de:5c:32:
6d:5a:18:4a:f8:7e:e3:49:49:c0:a0:1f:0e:aa:38:
32:c8:95:24:a2:57:a7:ae:bc:f2:75:0c:00:a1:68:
99:ef:53:11:7e:55:d2:de:50:49:97:a0:1d:47:51:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:DE:94:B9:42:DF:46:9A:9A:87:88:20:94:A1:C9:CA:A2:46:BE
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/KJfelLlC30aamoeIIJShycqiRr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.38.0/24
Signature Algorithm: sha256WithRSAEncryption
02:27:1c:79:dc:10:44:bd:2d:b2:2a:67:80:9b:15:39:57:87:
88:11:c4:8d:11:8e:6e:62:8f:09:9d:2b:46:e9:6e:0d:f3:c6:
5a:67:f7:81:52:74:28:59:b6:9f:a1:92:b9:8e:3d:54:36:95:
ab:d9:da:8c:1d:0c:74:9d:bc:c2:6d:e3:3e:49:cb:e1:9e:4d:
b9:80:e7:8f:54:45:70:8c:09:ee:ac:e6:69:2a:97:48:7d:13:
a2:60:be:62:3a:5f:4a:09:61:d9:bc:12:19:36:8a:1a:60:e9:
cc:66:a1:18:8d:4a:19:cb:c8:ce:04:01:1e:95:d3:25:f3:d4:
37:fb:af:3a:4e:48:59:38:47:31:dd:e1:6b:d5:56:a9:5c:d3:
5b:17:7b:ab:90:69:3e:3d:23:70:66:90:5a:36:12:7b:0d:32:
a0:42:09:58:4e:9c:6e:5c:7c:59:a7:be:3b:b2:14:1e:9d:47:
6c:8e:53:1d:9a:77:39:b2:8b:af:51:3e:da:26:94:78:c3:64:
6c:79:28:f1:6e:de:ea:26:46:9e:32:cb:e1:a0:bd:a6:5f:4a:
03:16:c9:55:a8:8a:b1:78:fe:3e:14:6f:63:4c:45:b0:f6:64:
bf:72:0a:62:fb:ab:e7:02:bb:d3:f2:2b:37:e8:ce:10:81:f6:
8c:c5:e2:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGoTeTNgKlQ9tAAhz8ApiMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ2NzQxMTM5MjYzMzg4ZDk4NGRiMWU5N2UwMzE2Njlj
NjQ4NmUwHhcNMjQwODMxMTE1OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk3ZGU5NGI5NDJkZjQ2OWE5YTg3ODgyMDk0YTFjOWNhYTI0NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lI3SrH91WTIjWU6iZRtF/An/Ehy
Umow5jKgUugn7Iy2gGrkDJRNAjSPdein8vn7IF8vnvBu27X/gQQ1wMUVvWy5dg8N
rl4bkkN/ArggAhYEfmLXfmXKnYDJHcnjOIg88OrOyu0+ShSsOBK9//NTNDxcJTSq
NaGntrkjrLK7tVTg31CkciCQ5V+GkRAzGAbVzrVQtzt6R3EiP6IO/W8aKBYxEwcW
LY27kJ9+RLr7oT/M+U2rZQPmVy43IOQM1z4WuMuc3+ZdeQiXKSSIItPeXDJtWhhK
+H7jSUnAoB8OqjgyyJUkolenrrzydQwAoWiZ71MRflXS3lBJl6AdR1EPiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCiX3pS5Qt9GmpqHiCCUocnKoka+MB8GA1UdIwQY
MBaAFJSEZ0ETkmM4jZhNsel+AxZpxkhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTct
Y2IxMTI1MDA3ZGZiLzEvS0pmZWxMbEMzMGFhbW9lSUlKU2h5Y3FpUnI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTctY2IxMTI1MDA3ZGZi
LzEvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YmMA0G
CSqGSIb3DQEBCwUAA4IBAQACJxx53BBEvS2yKmeAmxU5V4eIEcSNEY5uYo8JnStG
6W4N88ZaZ/eBUnQoWbafoZK5jj1UNpWr2dqMHQx0nbzCbeM+Scvhnk25gOePVEVw
jAnurOZpKpdIfROiYL5iOl9KCWHZvBIZNooaYOnMZqEYjUoZy8jOBAEeldMl89Q3
+686TkhZOEcx3eFr1VapXNNbF3urkGk+PSNwZpBaNhJ7DTKgQglYTpxuXHxZp747
shQenUdsjlMdmnc5souvUT7aJpR4w2RseSjxbt7qJkaeMsvhoL2mX0oDFslVqIqx
eP4+FG9jTEWw9mS/cgpi+6vnArvT8is36M4QgfaMxeJn
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:19 2025 by rpki-client