Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/KNu4Avk_f5iDjIFLVoDnY7SSFnE.roa
File: KNu4Avk_f5iDjIFLVoDnY7SSFnE.roa (raw, json)
Hash identifier: DLASKpzuwgnemG5F4VhBwYv7jq+szYhmUGSAS2Mjkhc=
Subject key identifier: 28:DB:B8:02:F9:3F:7F:98:83:8C:81:4B:56:80:E7:63:B4:92:16:71
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 018E8B857D7560B9F6139B1D62074D5E5F83
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/KNu4Avk_f5iDjIFLVoDnY7SSFnE.roa
Signing time: Fri 29 Mar 2024 18:42:45 +0000
ROA not before: Fri 29 Mar 2024 18:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:85:7d:75:60:b9:f6:13:9b:1d:62:07:4d:5e:5f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Mar 29 18:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28dbb802f93f7f98838c814b5680e763b4921671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:e4:eb:93:3f:70:55:48:b3:3e:89:16:f8:
9b:a3:2e:b9:1e:71:b2:a3:1e:23:07:d2:f0:f3:f1:
75:bf:33:d9:89:c3:9b:6d:24:01:ca:19:f8:c9:68:
5d:54:a6:85:73:73:48:86:5b:24:4f:73:a8:d4:28:
29:41:8d:d5:4c:77:0f:fc:d6:81:46:71:b2:f3:7c:
11:6d:30:67:85:57:ff:70:90:43:e5:c6:c8:37:a3:
bb:2d:27:a4:0f:f8:5b:d8:ab:c4:76:52:b3:df:68:
f8:43:c2:65:2d:f7:77:9d:5c:f0:b4:d0:f0:76:e5:
b6:de:cd:92:0a:36:1f:05:5d:79:18:a6:ee:37:ca:
76:f3:5e:8d:d6:63:8d:17:e1:4e:e9:fd:f6:60:ee:
03:b4:19:3b:bc:f9:db:89:ab:23:d4:96:a6:67:e6:
34:8d:7a:67:0f:2a:a9:a1:ad:de:19:9e:ea:e5:98:
f4:a2:7f:2f:51:82:dc:eb:90:11:af:88:0c:be:51:
a3:b9:45:0e:88:e2:3e:9a:54:f8:fd:b4:13:9a:41:
eb:43:66:13:99:e7:3c:ab:43:ce:9f:0c:45:36:a3:
1d:4c:a0:5a:47:4b:9b:88:f4:e7:97:10:77:e3:1a:
98:10:51:6a:ae:d5:a1:35:fc:31:91:54:ba:1e:7d:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:B8:02:F9:3F:7F:98:83:8C:81:4B:56:80:E7:63:B4:92:16:71
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/KNu4Avk_f5iDjIFLVoDnY7SSFnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
67:aa:84:ea:3c:2f:b1:e6:15:ac:6a:5f:72:9d:da:4f:a9:fb:
85:c7:02:d8:b5:93:27:59:a8:69:b1:bd:01:01:38:9f:da:1d:
4b:c6:d5:79:de:ea:d4:cb:40:76:eb:ff:ab:0b:cc:06:15:81:
e2:0d:c4:09:cd:ee:d0:71:48:f9:7d:a1:b1:80:8e:33:96:30:
ba:5c:00:b3:8d:e6:53:cd:c6:59:a6:be:21:5b:7e:ad:42:60:
91:e3:28:bd:3f:11:c3:9c:82:be:39:d4:07:6b:fb:f1:36:71:
bd:77:79:d4:71:25:c0:e0:9a:ff:f2:97:da:b8:19:b4:9d:d7:
28:37:72:4f:02:5b:6a:1e:05:74:e0:a3:a6:e4:4c:f2:6d:81:
e8:24:9a:aa:fb:b9:92:2b:fb:80:07:24:38:0c:cc:76:d4:e1:
ca:b2:ed:90:d0:e1:da:05:fe:f9:9d:d2:4f:5b:48:b0:b8:fd:
c9:34:e5:28:c4:8f:b2:98:67:85:ff:44:5b:e4:97:cd:39:98:
a7:79:59:07:a6:0d:f5:6c:9b:c1:61:07:c8:29:06:8e:fa:a5:
ae:12:3c:4a:42:ea:99:fc:25:9f:12:fe:84:f0:30:1e:b0:be:
d9:07:3e:b8:75:1a:cf:ca:2e:0e:77:e9:7b:57:b4:2f:a4:1a:
55:45:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:38:31 2025 by rpki-client