Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/KwomHtAHnCM0D-yGdW_0Sf3mopc.roa
File: KwomHtAHnCM0D-yGdW_0Sf3mopc.roa (raw, json)
Hash identifier: nJuUP0j6H239g1R7GMJyKq0zviXnK+AhK7Q4U43dyg4=
Subject key identifier: 2B:0A:26:1E:D0:07:9C:23:34:0F:EC:86:75:6F:F4:49:FD:E6:A2:97
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 01942522326DD5E3B6412EE49CCDEB0BC5B0
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/KwomHtAHnCM0D-yGdW_0Sf3mopc.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.92.116.0/22 maxlen: 22
194.28.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:6d:d5:e3:b6:41:2e:e4:9c:cd:eb:0b:c5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b0a261ed0079c23340fec86756ff449fde6a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:27:5e:47:d6:c6:52:9d:ce:ac:62:c6:24:
a8:9b:be:aa:27:d9:6c:0b:c8:68:bb:70:80:30:15:
4b:21:b2:25:45:71:b0:3e:d9:b9:86:45:e5:15:93:
90:58:7b:2b:a2:6c:39:ac:9a:f2:35:3b:d1:f4:65:
2c:c1:13:49:16:5c:fc:71:e4:a5:7a:9f:c9:36:c4:
37:f9:31:b9:41:d4:30:8a:93:f6:ca:11:fe:b1:23:
d0:35:ff:f9:eb:33:7b:15:d4:63:34:fc:40:13:49:
91:8e:14:2e:0d:4e:96:ff:61:38:eb:c0:1f:7d:63:
2f:03:43:7e:9f:64:f3:06:df:58:4d:ce:d7:ba:8b:
d3:c4:e7:52:cc:7a:b3:0e:67:4b:34:2d:60:9d:21:
85:82:35:11:83:7a:5f:a2:0b:43:cd:c6:22:a0:ab:
0c:4c:f7:27:84:1b:95:14:d8:3a:e7:06:28:7e:67:
9a:f6:1f:b1:78:9c:63:d0:c6:bf:b0:42:fe:d7:7a:
4d:c7:5d:40:c3:b4:b4:89:a4:c2:a3:d7:12:fc:11:
63:da:11:59:9c:21:19:ad:f9:b2:1d:bc:65:26:07:
97:75:fd:3a:36:fa:4d:7d:b6:4b:c0:72:d1:0c:20:
e2:2a:a4:d9:2a:9d:80:85:85:b0:10:2a:fb:28:f1:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0A:26:1E:D0:07:9C:23:34:0F:EC:86:75:6F:F4:49:FD:E6:A2:97
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/KwomHtAHnCM0D-yGdW_0Sf3mopc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.116.0/22
194.28.46.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:ac:7c:49:08:b7:30:e2:45:e4:1a:b0:a1:3e:d4:2c:09:be:
5f:bc:d1:ce:e1:1a:ab:ea:57:78:da:8a:21:87:56:6a:57:31:
b8:b3:8e:a3:4e:75:d3:79:a6:25:16:8d:f6:c5:94:d1:61:a7:
7f:df:0f:12:4b:e4:43:8c:8a:c1:56:3e:cc:b1:20:4a:d3:51:
92:59:b7:86:b8:9e:5d:d2:00:43:a0:aa:bc:e3:8a:88:ad:2e:
74:d6:a3:b1:41:46:f8:9e:9b:19:cd:13:6a:ec:65:fd:e5:b4:
98:e4:01:8a:96:3b:c5:86:6d:6d:fa:30:2c:bc:c3:01:33:65:
8c:19:92:eb:76:68:ab:ed:8d:04:96:cd:71:27:f4:00:df:1c:
a8:75:6a:64:f6:09:10:07:0c:1c:e6:54:68:d2:cb:6c:f7:28:
e2:57:61:aa:27:33:65:a7:bf:cc:31:13:74:03:bb:af:06:d7:
73:53:57:a6:8d:64:bf:88:c4:35:0f:d1:2f:b5:68:00:8d:6b:
21:1f:7d:60:e3:b1:3e:04:25:00:ab:26:a9:c4:9d:4d:94:4d:
f4:90:d0:44:2c:d2:be:73:d0:c0:85:ec:58:65:81:b7:3b:ae:
5c:1c:bb:8e:4a:77:70:5b:30:bf:0d:fa:c8:21:6e:a1:bc:64:
03:a0:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:16 2025 by rpki-client