Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KLOaERyJknSr55yrfMKynzpCpB0.roa
File: KLOaERyJknSr55yrfMKynzpCpB0.roa (raw, json)
Hash identifier: inSpWtcIOJUDWX3RjD9uaLyWAPPKIS6LVZpq3OsOB1Y=
Subject key identifier: 28:B3:9A:11:1C:89:92:74:AB:E7:9C:AB:7C:C2:B2:9F:3A:42:A4:1D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A347CED19C7C86A7FB04A3DB31A8
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KLOaERyJknSr55yrfMKynzpCpB0.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56684
IP address blocks: 92.114.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a3:47:ce:d1:9c:7c:86:a7:fb:04:a3:db:31:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28b39a111c899274abe79cab7cc2b29f3a42a41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:75:5e:6f:27:bf:0e:8e:f2:58:66:73:9b:
4e:d3:0b:e8:12:46:8d:10:cd:b3:f4:24:c8:ed:7e:
bb:14:9e:67:71:c7:74:83:f1:46:d8:99:f8:88:7c:
b1:50:7e:b4:44:76:b3:93:23:3f:c6:08:7b:94:f4:
ae:ab:df:49:eb:25:ce:47:2c:80:f2:9b:f0:5b:a8:
8b:7a:17:4f:e0:46:ee:ac:f1:d9:95:b8:77:b5:da:
ef:c9:3a:e3:74:33:11:a9:30:ac:c8:7f:32:eb:30:
2b:72:91:01:f6:40:31:b7:d7:df:c3:9a:38:e5:43:
bd:13:92:14:2b:58:60:21:52:91:c6:7d:0c:44:64:
ed:3c:61:5c:08:11:c6:27:91:b6:cd:55:2b:62:80:
1c:18:0a:ad:2a:d3:69:ec:cc:fe:54:1a:45:e3:44:
09:c9:8c:6d:3a:49:15:2a:ec:49:4b:bf:a0:e6:cc:
c7:e0:ce:c3:ea:30:92:2f:03:8e:17:60:10:a2:e1:
b4:cd:c0:9d:b9:29:5f:69:e5:aa:77:d4:fd:12:9d:
a7:e1:2c:c3:df:0a:1e:8d:94:b2:30:05:0d:4a:58:
24:1b:03:bc:48:54:bb:55:00:7f:3c:26:2d:df:4d:
6d:23:54:14:d4:fd:ff:15:0f:11:ff:d7:31:de:e6:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:9A:11:1C:89:92:74:AB:E7:9C:AB:7C:C2:B2:9F:3A:42:A4:1D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KLOaERyJknSr55yrfMKynzpCpB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.106.0/24
Signature Algorithm: sha256WithRSAEncryption
06:32:16:f3:9f:00:55:d3:1a:f9:78:20:3a:62:b2:62:8e:26:
ba:96:b8:6c:79:a8:09:25:12:99:48:1e:3a:72:e3:87:32:fe:
99:dd:05:fc:32:a7:ba:28:c6:12:0b:b7:9c:5c:fa:67:d5:8e:
53:51:91:11:20:c5:29:ad:89:8f:8b:c3:38:cd:a8:03:fe:e8:
35:92:37:10:90:77:31:2e:b9:19:9d:1f:20:bc:f6:24:7f:a5:
01:9e:19:cb:3e:38:f6:ff:7d:02:db:b9:33:57:91:f0:e3:29:
57:32:d0:96:de:e5:69:d8:a7:6c:7b:b8:14:14:78:79:b8:5b:
4f:81:9a:b4:5d:3a:9d:c6:56:44:96:12:11:cc:e3:b8:64:09:
83:65:61:dd:e3:52:56:be:c3:b6:81:87:f1:cb:dd:9b:a0:79:
df:98:e0:2d:95:29:f5:d8:88:5a:0a:b1:ab:eb:d4:e4:00:9c:
9d:21:f5:bd:04:02:9a:c1:5a:e4:e0:07:4e:35:e2:3a:5a:ad:
56:c0:7f:4c:ad:f4:2d:8d:d2:49:00:23:ee:50:17:f0:4c:66:
ec:d6:1e:67:1b:94:de:d7:f5:4a:f5:3c:f6:9d:64:88:b3:28:
f3:6d:5f:2c:6d:12:41:bd:ba:9d:33:4f:33:64:c9:64:d1:76:
75:d7:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:51 2025 by rpki-client