Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kkER23WZlV1jVmibrMpv13kyJa0.roa
File: kkER23WZlV1jVmibrMpv13kyJa0.roa (raw, json)
Hash identifier: D+69SCT1WGLWMB+uT5DCrtOiP0h8b0B04FRpmi2gvFo=
Subject key identifier: 92:41:11:DB:75:99:95:5D:63:56:68:9B:AC:CA:6F:D7:79:32:25:AD
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 016B3C89
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kkER23WZlV1jVmibrMpv13kyJa0.roa
Signing time: Sat 01 Jan 2022 04:57:59 +0000
ROA not before: Sat 01 Jan 2022 04:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197520
IP address blocks: 193.151.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23805065 (0x16b3c89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Jan 1 04:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=924111db7599955d6356689bacca6fd7793225ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:c0:19:57:e7:c3:91:88:a2:7b:cd:35:48:
9f:a7:c5:b9:9d:24:8d:0a:bd:98:d7:72:11:78:ea:
9f:80:b1:3c:33:67:93:ac:15:ad:a1:32:e5:3e:a7:
19:74:4d:ec:ba:10:68:82:47:c9:05:88:06:c8:26:
03:1c:1d:ac:e0:33:99:48:71:97:4d:22:a5:20:36:
7d:59:83:f2:41:b2:80:4d:c6:41:99:e1:9c:2f:83:
18:57:9a:2d:54:05:2f:f1:19:c3:2a:23:60:ba:5f:
1c:c0:b1:9c:37:87:8f:10:d9:f3:d9:9f:45:55:df:
b9:31:b1:d1:c3:bc:07:77:cc:85:75:dc:58:c7:8f:
28:55:6f:59:6d:cb:9f:47:d1:88:13:8f:1a:e7:0b:
2b:6d:80:10:fd:aa:f1:fe:e8:13:ef:23:19:fd:b1:
42:d2:e7:52:71:28:ec:5e:97:c8:12:bf:45:08:55:
29:d5:c9:29:1b:6e:ca:b9:96:9c:b5:ad:82:99:8f:
57:c7:a5:d3:de:09:b4:43:f3:5a:b4:d3:c0:1c:cb:
59:81:15:9a:5e:eb:35:b2:7f:aa:fa:f9:24:52:74:
28:d1:d9:d8:67:d4:a7:cd:f8:b3:bd:40:19:b9:11:
85:58:d2:4c:3a:3b:14:27:be:1d:a8:08:bd:ef:30:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:11:DB:75:99:95:5D:63:56:68:9B:AC:CA:6F:D7:79:32:25:AD
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kkER23WZlV1jVmibrMpv13kyJa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:bc:48:b8:d4:2a:4c:78:7f:e1:a0:cb:34:94:3b:ed:fa:7d:
65:60:b7:6c:2f:d0:5d:27:b6:4c:d1:cc:eb:ad:11:f6:1c:b3:
2f:78:ac:db:aa:88:82:94:58:a5:13:40:2a:f4:c7:b2:79:3c:
fa:d9:72:74:a4:82:f4:84:0c:fd:08:72:e9:9f:fb:b7:66:6e:
fd:d9:f3:17:a5:cc:54:0b:bf:19:ce:27:7f:44:4d:15:3c:13:
70:e9:14:6f:ab:8d:42:49:9e:15:2f:af:56:6f:67:2d:47:7b:
3c:85:b3:e7:3e:f8:3d:34:0a:43:57:da:7d:7e:2f:ed:f2:c3:
97:6f:6b:1a:08:39:02:c4:c5:3f:80:4e:66:a1:01:ba:b5:a9:
7e:cb:0d:90:85:fb:cb:52:2a:1b:14:39:ae:49:ef:00:cb:25:
17:35:b6:cc:89:2e:0a:7d:27:4e:33:f4:c9:fa:83:9e:91:e9:
ed:a4:07:c4:13:b0:4f:d0:7e:a4:c5:7c:a1:ab:5c:48:47:4a:
eb:eb:9c:7e:20:c7:b8:54:da:43:da:f2:c8:50:48:bb:95:a5:
85:be:81:84:e4:b3:95:f7:60:6d:e2:6f:d4:3c:57:9f:86:57:
3f:ed:4b:30:cc:23:0b:c0:4d:61:e9:02:90:2f:ad:a7:14:b1:
5a:8d:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:40:38 2025 by rpki-client