Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/KzMx4ZLMlFQ8Dy95fYT1sup5ALg.roa
File: KzMx4ZLMlFQ8Dy95fYT1sup5ALg.roa (raw, json)
Hash identifier: BvhvkRe+GmGr8e1n/AoywsJnsnzxV8S6cHg9LleWdwM=
Subject key identifier: 2B:33:31:E1:92:CC:94:54:3C:0F:2F:79:7D:84:F5:B2:EA:79:00:B8
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 018CCA999237FA838C94D905BADB66B469C5
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/KzMx4ZLMlFQ8Dy95fYT1sup5ALg.roa
Signing time: Tue 02 Jan 2024 14:35:11 +0000
ROA not before: Tue 02 Jan 2024 14:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147293
IP address blocks: 45.92.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:92:37:fa:83:8c:94:d9:05:ba:db:66:b4:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Jan 2 14:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b3331e192cc94543c0f2f797d84f5b2ea7900b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5b:b7:aa:02:35:dd:6c:0a:06:c7:51:5d:dc:
39:1f:9d:bd:c5:07:6b:be:fc:5e:e2:23:9a:71:ac:
dc:3a:b3:9a:50:96:4e:92:53:f0:d5:f2:54:d0:e1:
bd:ec:b4:dc:85:c8:6c:97:65:d2:ea:3f:f4:43:2a:
a0:9a:6c:16:13:aa:a8:f1:52:41:fb:86:c8:1a:14:
06:27:ed:17:ea:43:9e:7b:0b:16:21:ee:95:ef:be:
9e:0a:84:0e:22:cc:a3:9c:97:71:32:ab:cc:cf:08:
d9:d8:87:aa:d4:69:ad:8b:24:ed:22:80:b4:22:9a:
3c:5a:7b:7f:4d:a0:94:4f:7b:8d:c0:97:b3:fd:6f:
64:1d:ef:dd:c8:84:d4:6e:10:fc:11:6c:38:95:53:
b6:6e:69:f6:a2:01:4b:10:ed:f4:74:10:4a:d4:7d:
bf:ab:72:7d:d7:b0:51:5c:e5:b8:bf:94:55:3c:47:
f4:d9:c2:8a:f8:65:df:67:dc:ee:62:47:e1:aa:1a:
ab:37:08:5e:61:82:03:b1:3e:48:a4:a2:83:8f:b7:
c8:df:a9:42:20:61:33:3a:13:de:1c:8e:95:c8:f4:
2f:e9:a5:92:7b:bf:e7:55:15:e2:cc:8c:6e:47:a5:
49:08:5e:a4:1f:2a:af:d9:39:1f:aa:e8:90:3a:1c:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:31:E1:92:CC:94:54:3C:0F:2F:79:7D:84:F5:B2:EA:79:00:B8
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/KzMx4ZLMlFQ8Dy95fYT1sup5ALg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:45:45:32:77:6a:a9:67:e5:24:9e:a2:4c:29:2b:c3:27:6b:
0e:c7:0a:30:ed:2d:fb:de:52:99:c6:7e:b0:44:0e:d8:fb:69:
52:26:cb:4e:a9:ea:a2:0f:98:03:cd:1c:4e:fd:99:28:3e:14:
9f:0d:81:8a:68:42:d0:f3:59:aa:de:2b:31:bc:6d:ec:6b:7f:
3c:1b:a3:4c:69:c4:64:c6:84:bb:15:d6:0c:8a:da:25:3d:97:
3b:51:2f:4b:3b:18:24:0b:06:ab:da:a9:e3:f6:3a:eb:5d:9c:
5c:11:3d:11:68:d7:79:90:ed:a6:25:7b:e7:ba:63:51:9c:7b:
ef:e7:cb:d5:81:9c:ce:ae:df:fb:14:6d:f2:b0:6e:dd:d6:eb:
ed:fe:db:c8:1a:24:63:29:81:33:91:d1:26:36:a9:82:7a:98:
ed:f1:92:d2:e1:79:87:30:96:1b:55:41:9f:30:b7:11:63:56:
27:fe:98:97:e9:e4:74:45:fb:0a:df:03:2b:cf:fe:b1:d5:20:
5a:7a:2f:ce:53:65:4c:95:42:a0:82:b9:2d:0b:64:f2:9e:d0:
fb:1d:0b:b6:f2:57:cb:0b:56:f6:9e:34:09:e8:11:98:8f:1d:
f3:52:20:38:ed:19:96:2d:fd:31:51:7e:b3:ea:12:c0:bf:17:
11:36:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:39:18 2025 by rpki-client