Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/ka4zet-SkUrSnEvI5_4fHR-JIQI.roa
File: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (raw, json)
Hash identifier: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=
Subject key identifier: 91:AE:33:7A:DF:92:91:4A:D2:9C:4B:C8:E7:FE:1F:1D:1F:89:21:02
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019426D970654D7CD6641A15222282B5865B
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/ka4zet-SkUrSnEvI5_4fHR-JIQI.roa
Signing time: Thu 02 Jan 2025 11:49:31 +0000
ROA not before: Thu 02 Jan 2025 11:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48173
IP address blocks: 91.229.178.0/23 maxlen: 24
91.241.72.0/22 maxlen: 24
193.169.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:70:65:4d:7c:d6:64:1a:15:22:22:82:b5:86:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91ae337adf92914ad29c4bc8e7fe1f1d1f892102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:24:e1:de:bb:a2:84:18:fd:bb:4e:88:01:
6b:e5:cc:29:2c:a9:e6:51:33:7a:69:6e:c9:75:22:
09:78:41:ee:5e:00:a3:87:62:a0:74:8a:5b:75:5a:
97:a1:1a:3b:0e:37:6a:a6:af:38:f2:8b:39:73:8c:
74:0e:89:38:6c:82:d5:2b:4f:8b:20:d0:3d:90:6c:
e6:2b:20:02:4a:09:9f:4a:a7:af:ad:b5:c4:6f:1b:
c8:b5:0a:10:b3:8f:4a:9f:d8:15:fb:cc:62:6d:60:
a3:2c:d4:20:cb:3c:c8:39:11:a5:dd:03:54:e5:24:
06:77:fb:16:fa:6e:49:43:53:00:71:b9:db:cf:c0:
86:bc:76:52:73:a9:7f:86:45:dc:25:39:45:e7:c0:
f8:00:1b:d5:c6:13:8c:cc:e6:26:58:b4:9f:38:7a:
b5:f2:a7:04:c8:db:c4:11:ae:95:49:ce:e3:24:4c:
8e:3d:d8:80:d9:2f:a5:f8:f6:f1:66:bb:5e:e1:e3:
7a:89:78:5b:5a:7b:2f:6c:55:08:b9:05:f0:2d:68:
d6:b3:a7:85:0c:b0:55:b9:ff:96:6a:c9:14:d1:d2:
f4:a2:48:fa:68:82:a4:73:84:04:bd:74:3c:93:3b:
22:33:2a:f9:d0:96:b5:3b:cf:d1:60:dd:34:53:9e:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:33:7A:DF:92:91:4A:D2:9C:4B:C8:E7:FE:1F:1D:1F:89:21:02
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/ka4zet-SkUrSnEvI5_4fHR-JIQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.178.0/23
91.241.72.0/22
193.169.180.0/23
Signature Algorithm: sha256WithRSAEncryption
90:75:51:27:c9:2d:7f:7e:56:61:72:c9:2d:5c:0f:fd:52:a6:
ba:fd:b4:34:ce:4b:40:1d:aa:67:08:d3:40:6d:9e:8b:54:4e:
79:68:2f:9f:40:c2:bc:e2:60:f3:e4:8c:19:d8:49:0c:95:62:
f8:35:ca:1c:44:3f:d3:45:5e:10:ed:2b:9a:e7:a2:ef:43:95:
a2:01:04:50:10:bf:11:02:ee:76:df:f6:d2:a4:e5:b0:b9:14:
da:13:ef:8b:96:23:13:8a:ea:aa:9a:c7:2b:a8:8e:87:cf:39:
c4:d7:b2:25:b5:5e:99:03:98:3a:98:38:cb:64:7e:ef:61:94:
92:59:dc:af:77:2f:5b:41:b9:d5:54:3c:13:b5:7b:8e:c2:d9:
a3:6c:9b:5d:5a:f0:8f:f2:cf:75:26:5c:5e:e2:46:71:0e:21:
ae:d5:42:8a:df:ea:5a:11:db:31:87:34:8f:99:d1:70:5d:e8:
27:f5:64:84:22:77:2d:97:1f:1b:99:b8:72:73:66:a8:5f:69:
ba:16:da:8e:09:70:9b:fd:86:a3:b0:b9:6f:ba:15:32:3d:0c:
79:e7:eb:8c:46:a0:f5:7c:02:70:f7:de:c2:b6:51:00:9e:4c:
70:8e:6a:3d:1e:11:6d:76:df:c8:80:a3:80:39:d9:f4:b4:d0:
9f:62:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:26 2025 by rpki-client