Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/KNtMsICdVBu8m43H_8vddx4yN1g.roa
File: KNtMsICdVBu8m43H_8vddx4yN1g.roa (raw, json)
Hash identifier: 1KJ7mAkDECNEPE2/sPysn/gCZJSUWnTYx19n3T5c35g=
Subject key identifier: 28:DB:4C:B0:80:9D:54:1B:BC:9B:8D:C7:FF:CB:DD:77:1E:32:37:58
Certificate issuer: /CN=212f87d4439ae2f87f0595dcd3698592cc1c3afb
Certificate serial: 6C6E19
Authority key identifier: 21:2F:87:D4:43:9A:E2:F8:7F:05:95:DC:D3:69:85:92:CC:1C:3A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS-H1EOa4vh_BZXc02mFkswcOvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/KNtMsICdVBu8m43H_8vddx4yN1g.roa
Signing time: Sat 01 Jan 2022 01:01:27 +0000
ROA not before: Sat 01 Jan 2022 01:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213005
IP address blocks: 193.162.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7106073 (0x6c6e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212f87d4439ae2f87f0595dcd3698592cc1c3afb
Validity
Not Before: Jan 1 01:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28db4cb0809d541bbc9b8dc7ffcbdd771e323758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:b8:e1:63:99:07:c9:25:0a:1a:f6:57:75:
94:42:7c:65:3a:63:93:c0:9a:06:15:0c:87:fc:8d:
92:ab:13:a2:f5:3c:31:60:84:c7:ec:c4:4d:52:19:
cb:35:58:9e:52:19:94:f1:d9:83:09:83:9e:5f:a6:
0b:25:8e:07:2e:18:58:87:08:5c:fb:d5:d9:d0:c1:
11:2a:99:d9:c9:9d:f4:52:a3:af:86:0a:6c:0f:95:
6b:27:07:9c:8b:79:58:80:4f:32:a5:cb:e9:d5:41:
5e:02:18:4d:00:65:9d:cb:a6:da:cb:a5:cd:46:fa:
cb:d6:52:c8:5d:ba:72:8b:5b:8a:08:77:a2:78:af:
7e:d6:2c:8a:0a:06:c6:d0:7b:96:2c:2b:e5:9b:5f:
d6:5c:df:a1:4e:49:e8:20:6a:63:96:69:d5:54:df:
17:03:80:81:9c:07:5d:e1:03:a6:25:44:4e:18:3d:
d6:45:ec:73:3c:22:14:c6:90:dc:3b:c9:e6:56:9e:
68:f6:e4:74:7b:1f:5e:a6:c7:48:04:d9:88:20:cb:
52:95:ac:8d:b2:6f:35:10:6f:ce:ab:93:f7:5c:dd:
4a:fa:c8:a5:f8:5c:27:e5:11:d6:8b:7f:08:f9:6f:
be:15:a6:51:76:c5:23:a6:15:d1:03:13:fe:57:32:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:4C:B0:80:9D:54:1B:BC:9B:8D:C7:FF:CB:DD:77:1E:32:37:58
X509v3 Authority Key Identifier:
keyid:21:2F:87:D4:43:9A:E2:F8:7F:05:95:DC:D3:69:85:92:CC:1C:3A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS-H1EOa4vh_BZXc02mFkswcOvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/KNtMsICdVBu8m43H_8vddx4yN1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bf8bc7-6a1b-4dc0-837b-3bd225910b37/1/IS-H1EOa4vh_BZXc02mFkswcOvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.15.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4c:e3:41:df:aa:f5:a6:2f:0a:f9:33:aa:ad:15:89:2f:a1:
ae:4a:6f:9c:48:db:f2:d9:10:b6:58:3b:8f:00:3e:7a:8a:b0:
58:80:b4:a4:8e:2a:81:bb:ae:a1:8e:fc:8a:99:14:d2:d8:16:
9b:b0:82:d3:38:9f:1b:3a:9b:2a:21:61:84:63:b2:4e:6d:4b:
e2:b0:e4:56:8e:0a:06:45:88:c0:f3:e1:13:3a:e6:fe:59:c1:
9b:aa:70:35:64:e8:bc:cb:34:a3:f8:84:33:80:10:72:5c:36:
a0:8e:ce:fa:7c:46:f6:50:46:89:8a:e8:ae:c6:dc:2a:02:16:
24:ba:0c:aa:32:e6:ae:d9:2e:97:5f:83:83:f8:e6:13:58:b6:
f3:1a:60:23:55:83:58:76:37:bf:de:d6:6b:d1:8c:f7:f3:68:
3e:4b:0f:cb:da:8c:ec:9c:46:b6:f4:3e:1d:55:37:d3:b9:6d:
b3:3e:5f:7a:96:08:ac:7b:cc:f1:40:07:f7:a6:b4:16:7a:c8:
88:76:36:dd:11:3e:95:10:29:4c:ca:be:d7:03:85:0e:f1:24:
dd:be:34:06:bc:92:c7:d5:12:50:27:6d:31:a3:b1:11:48:a2:
b3:15:0d:6e:bd:a1:dd:19:ce:17:f8:a2:0b:fd:40:33:d3:f8:
87:20:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:52 2025 by rpki-client