Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/kRbGxF-jZl0CK-2FtmwYjxPNWz0.roa
File: kRbGxF-jZl0CK-2FtmwYjxPNWz0.roa (raw, json)
Hash identifier: UIsWkQzq5wd/u0qPd296yJiliejAvgBt4vCajjQtL2s=
Subject key identifier: 91:16:C6:C4:5F:A3:66:5D:02:2B:ED:85:B6:6C:18:8F:13:CD:5B:3D
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0183A246B3E319B03B02FC6937FF125CC879
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/kRbGxF-jZl0CK-2FtmwYjxPNWz0.roa
Signing time: Tue 04 Oct 2022 09:14:45 +0000
ROA not before: Tue 04 Oct 2022 09:14:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 83.137.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:46:b3:e3:19:b0:3b:02:fc:69:37:ff:12:5c:c8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Oct 4 09:14:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9116c6c45fa3665d022bed85b66c188f13cd5b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:28:c1:8f:6e:9e:d0:5d:52:54:9a:59:65:
a8:a4:12:ff:ae:27:d1:7d:14:5a:c3:89:a6:cb:f3:
5a:48:09:1c:b5:62:55:75:40:20:e8:3f:2c:bf:6a:
1a:d6:d1:22:b1:3e:82:b3:15:25:9b:ba:15:22:af:
28:4d:c0:9c:ba:0d:5c:60:fc:8f:8d:ed:5f:f8:f7:
cb:c1:cf:50:42:d4:85:3b:78:f9:79:86:00:b3:ae:
5e:68:9a:5a:04:58:90:b4:7c:02:9c:9d:c6:08:77:
a9:11:94:9b:69:bf:4f:90:a3:77:02:66:5e:fc:a2:
c2:68:2c:4a:ef:28:93:9f:86:7c:db:b8:e5:8d:17:
fc:6e:b2:b6:de:59:14:3f:6b:81:57:aa:ce:08:43:
e6:40:ae:b2:35:85:fd:d5:6c:1f:5f:3c:3d:42:31:
bc:be:7d:a6:9e:5c:d5:31:ed:e5:8b:cd:c8:a1:85:
a9:aa:ef:be:93:57:0e:27:ef:49:23:ad:d3:6b:6a:
e8:65:bf:34:85:45:40:8f:36:f3:db:b1:8c:f0:b2:
39:39:9b:7b:82:6d:c6:91:fa:1b:bc:fc:18:89:44:
cb:48:37:7c:91:44:63:3a:20:c4:35:8d:bf:a8:5f:
02:84:c4:fa:38:34:d7:58:d1:4b:ad:7e:92:53:c3:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:C6:C4:5F:A3:66:5D:02:2B:ED:85:B6:6C:18:8F:13:CD:5B:3D
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/kRbGxF-jZl0CK-2FtmwYjxPNWz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.245.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:20:9e:ab:44:12:00:0c:8b:5a:81:35:bf:46:53:3d:f1:bd:
1c:f3:2c:8c:ea:f5:6b:06:12:d6:44:64:5b:d6:f8:86:40:da:
c9:10:d0:f6:94:5a:14:ab:73:c6:5b:21:db:01:64:f1:e3:62:
07:9d:49:7b:96:a0:a9:b2:6e:4a:d0:49:1c:b1:08:86:26:92:
ce:a4:af:d1:ca:aa:ef:8a:c7:b0:cc:d9:44:8f:9a:1f:26:db:
a8:e8:8a:34:ef:d5:16:fe:59:c4:85:8e:79:1e:7a:89:b4:09:
5b:23:7b:95:5f:db:01:6a:2e:5c:eb:70:5b:82:9a:ef:82:88:
8f:77:53:3d:91:92:e3:b5:2b:5a:0e:77:ff:18:53:c7:ba:40:
82:78:6c:63:d1:fc:a2:ec:03:ef:bf:fd:3e:7e:6c:2a:6c:5b:
d4:c6:d6:fa:d7:75:db:85:37:0d:e9:d7:90:43:76:e5:88:91:
0e:cc:2f:a2:60:69:3c:f6:f8:13:d6:ce:ab:80:b4:5a:09:5f:
7a:12:78:ad:b6:40:9c:55:14:9e:27:d4:ba:44:b4:fe:40:ce:
7d:a5:fb:2a:c5:85:0c:7c:02:03:69:af:0c:6e:b2:c3:73:d7:
a6:35:f0:9d:b9:97:af:63:a9:27:09:49:79:1b:98:d9:20:70:
9e:18:01:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:49:27 2025 by rpki-client