Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/KJabg-goYfqIShBpOYNsGhfln78.roa
File: KJabg-goYfqIShBpOYNsGhfln78.roa (raw, json)
Hash identifier: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=
Subject key identifier: 28:96:9B:83:E8:28:61:FA:88:4A:10:69:39:83:6C:1A:17:E5:9F:BF
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019424B3C61DCA046D254168FC762BC63A19
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/KJabg-goYfqIShBpOYNsGhfln78.roa
Signing time: Thu 02 Jan 2025 01:49:08 +0000
ROA not before: Thu 02 Jan 2025 01:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 185.26.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c6:1d:ca:04:6d:25:41:68:fc:76:2b:c6:3a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28969b83e82861fa884a106939836c1a17e59fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:57:fc:e5:5a:99:2e:cc:09:6e:70:88:0e:
78:06:8c:cc:ff:d3:0e:9f:ca:54:02:3f:20:de:9d:
78:05:54:27:ea:89:42:b1:36:77:8c:51:79:9c:98:
cc:3c:f0:14:70:6f:6f:1f:15:90:bc:5c:3a:61:3e:
0c:76:c8:d0:fe:6d:7d:fc:f7:31:82:f3:c7:27:19:
d0:ea:7a:40:22:38:91:1e:ca:65:99:39:34:79:dc:
0d:4f:21:bf:31:7b:1c:0f:d4:ab:48:02:8b:77:be:
ad:14:0c:19:d6:0f:1c:3e:3e:4d:ee:80:ba:46:b3:
6a:e0:6d:c3:b1:6a:ae:1d:e8:08:e7:6a:e8:6d:4d:
24:4e:54:68:35:63:ec:1d:18:d2:84:f6:d8:1f:d9:
4a:a8:7c:e2:76:06:f4:2e:7c:07:bb:bb:00:5e:88:
54:e6:16:7e:90:c5:ea:73:75:b3:14:26:7c:f9:8f:
ce:9f:7d:b6:13:b3:35:a6:7f:1d:d1:df:92:56:80:
c9:ea:9d:4c:30:b6:14:0f:43:57:1b:2c:c6:22:ad:
40:f1:d6:80:c1:9f:bc:8a:9b:ec:4a:ed:8a:96:15:
16:ec:74:d9:e4:1c:86:1e:9b:6d:5d:72:90:df:9f:
c7:3d:34:eb:65:39:d8:b5:09:52:ef:23:c2:ab:24:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:9B:83:E8:28:61:FA:88:4A:10:69:39:83:6C:1A:17:E5:9F:BF
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/KJabg-goYfqIShBpOYNsGhfln78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.191.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3e:ee:1d:7d:13:c9:67:dc:28:e7:19:1e:79:5b:90:bd:26:
d7:4f:98:67:89:75:9c:de:04:4c:ec:ba:dc:18:27:2a:13:0d:
c6:24:ed:60:2d:d2:90:ac:6a:17:53:7e:0b:ea:5c:91:a2:07:
1a:54:78:a4:54:b4:a9:26:ad:b7:c5:96:89:2b:6d:8a:cd:21:
74:e2:fc:1a:84:93:4d:99:79:70:15:4e:c8:c5:47:8d:be:2c:
c5:82:8b:05:0e:03:6f:fe:ed:ee:2d:11:d2:4b:f2:09:89:6b:
f7:90:eb:cf:4a:43:bc:12:86:48:6e:7a:c1:9e:49:cd:cc:38:
3d:1a:f5:78:2b:29:97:25:16:42:d9:00:53:45:10:33:05:3d:
4f:a3:74:1c:b4:67:a8:85:29:0c:75:eb:a5:d7:32:11:7b:bc:
3c:82:00:11:5c:45:77:c2:f3:0c:2d:89:18:5b:0b:3f:8c:5b:
10:bf:fe:48:04:90:37:a2:6a:0d:93:2e:9d:32:a9:5c:3d:d0:
48:a2:09:7f:b0:d9:c3:20:f7:6b:84:2c:b3:03:33:47:65:4e:
8f:66:24:b5:aa:7a:16:86:73:4c:4a:c5:fe:9f:a4:c9:78:60:
99:bd:4b:8d:86:d6:05:38:a9:5c:26:f9:4f:7f:2e:9b:80:ec:
01:15:a0:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks8YdygRtJUFo/HYrxjoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm
N2QyZjgwHhcNMjUwMTAyMDE0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk2OWI4M2U4Mjg2MWZhODg0YTEwNjkzOTgzNmMxYTE3ZTU5ZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXtX/OVamS7MCW5wiA54BozM/9MO
n8pUAj8g3p14BVQn6olCsTZ3jFF5nJjMPPAUcG9vHxWQvFw6YT4MdsjQ/m19/Pcx
gvPHJxnQ6npAIjiRHsplmTk0edwNTyG/MXscD9SrSAKLd76tFAwZ1g8cPj5N7oC6
RrNq4G3DsWquHegI52robU0kTlRoNWPsHRjShPbYH9lKqHzidgb0LnwHu7sAXohU
5hZ+kMXqc3WzFCZ8+Y/On322E7M1pn8d0d+SVoDJ6p1MMLYUD0NXGyzGIq1A8daA
wZ+8ipvsSu2KlhUW7HTZ5ByGHpttXXKQ35/HPTTrZTnYtQlS7yPCqyTMLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCiWm4PoKGH6iEoQaTmDbBoX5Z+/MB8GA1UdIwQY
MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt
MTI3MDFhYjUxYWNmLzEvS0phYmctZ29ZZnFJU2hCcE9ZTnNHaGZsbjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm
LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRq/MA0G
CSqGSIb3DQEBCwUAA4IBAQABPu4dfRPJZ9wo5xkeeVuQvSbXT5hniXWc3gRM7Lrc
GCcqEw3GJO1gLdKQrGoXU34L6lyRogcaVHikVLSpJq23xZaJK22KzSF04vwahJNN
mXlwFU7IxUeNvizFgosFDgNv/u3uLRHSS/IJiWv3kOvPSkO8EoZIbnrBnknNzDg9
GvV4KymXJRZC2QBTRRAzBT1Po3QctGeohSkMdeul1zIRe7w8ggARXEV3wvMMLYkY
Wws/jFsQv/5IBJA3omoNky6dMqlcPdBIogl/sNnDIPdrhCyzAzNHZU6PZiS1qnoW
hnNMSsX+n6TJeGCZvUuNhtYFOKlcJvlPfy6bgOwBFaAa
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:07 2025 by rpki-client