Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kn_ojVEAvhRiT9dvaNqqmhuPDc0.roa
File: kn_ojVEAvhRiT9dvaNqqmhuPDc0.roa (raw, json)
Hash identifier: sIUA2HBAeiQVfN6w0ESPR+PgnRP5Zepk5do77iOFk9g=
Subject key identifier: 92:7F:E8:8D:51:00:BE:14:62:4F:D7:6F:68:DA:AA:9A:1B:8F:0D:CD
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4652AED2D2EF78FCCAF2C1807EF9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kn_ojVEAvhRiT9dvaNqqmhuPDc0.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60952
IP address blocks: 45.132.15.0/24 maxlen: 32
92.119.149.0/24 maxlen: 32
2a06:7a02::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:46:52:ae:d2:d2:ef:78:fc:ca:f2:c1:80:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=927fe88d5100be14624fd76f68daaa9a1b8f0dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:aa:51:23:96:33:7c:b8:2e:3a:0f:36:81:
c0:02:2d:9a:9d:83:02:7d:dd:9e:72:09:d5:27:ce:
af:59:3f:7d:30:38:eb:f8:de:32:9c:c3:b5:b5:3f:
8c:96:df:80:2d:22:1f:95:04:6e:f0:17:eb:31:cc:
b4:f1:d5:93:c6:ea:47:cf:2c:7e:a8:cf:40:57:f8:
2d:50:6f:75:28:53:1d:81:be:c3:86:d3:74:45:66:
58:4c:2e:4b:35:36:cf:77:ab:77:5f:56:0f:f9:f7:
b0:a0:af:a2:66:9c:a5:7b:e1:49:2e:9a:be:81:81:
0f:ed:c3:04:03:b5:48:f4:b5:e9:a3:b1:7f:fe:f4:
d3:96:c0:54:c3:37:6c:f9:a1:2c:37:00:35:70:0a:
09:8e:a1:2b:fa:94:42:60:e3:42:d2:37:2e:7b:e7:
ec:4d:af:e7:64:df:08:36:ba:8d:f6:d4:fa:04:1b:
31:f7:05:d9:44:b6:b8:71:17:f9:e9:d2:b8:53:5e:
42:a5:5f:1e:17:f4:3f:5c:62:6b:1e:2c:19:dd:7b:
a3:4d:fd:86:de:cb:a0:2c:1b:f5:9e:d1:e6:40:ef:
34:97:ae:13:4f:4c:bf:cc:1e:6c:cb:15:cb:15:53:
ab:36:09:21:6e:f1:20:15:3a:3c:4f:84:09:e0:83:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7F:E8:8D:51:00:BE:14:62:4F:D7:6F:68:DA:AA:9A:1B:8F:0D:CD
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kn_ojVEAvhRiT9dvaNqqmhuPDc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
92.119.149.0/24
IPv6:
2a06:7a02::/48
Signature Algorithm: sha256WithRSAEncryption
3f:8c:7b:e0:62:32:d7:26:d5:79:b9:b5:8a:03:8b:22:87:4d:
85:fc:16:ff:8a:bb:cf:28:cf:92:71:09:54:eb:a1:cc:4d:c0:
fe:eb:93:48:11:90:d1:e0:1f:87:01:9f:43:08:07:e1:f6:64:
0b:86:16:61:a6:af:fc:84:6e:3e:ce:e5:3a:d3:01:5f:1e:68:
8b:99:7a:46:9f:54:a4:40:13:96:34:e6:1a:d4:70:94:7f:8d:
8e:eb:13:e3:4c:56:e1:c5:f7:cd:e2:a2:85:ff:09:8d:07:66:
8a:9a:50:f5:4c:c3:ca:71:c7:47:74:b9:74:ce:d4:0a:ec:66:
a9:51:70:c2:1e:be:d2:56:cd:fb:c5:9d:36:36:5d:1b:0d:87:
39:92:88:07:ee:04:b3:85:13:15:5b:22:6b:78:0d:fa:05:6e:
a3:74:91:56:74:4d:41:e4:26:23:fa:49:d0:ac:4f:31:43:89:
e1:fd:d0:f2:c1:28:46:97:fa:6c:58:bd:44:d0:4f:7d:5f:29:
a9:e8:2f:5d:d7:d5:ee:26:82:57:38:28:6b:4b:1f:bb:42:ff:
69:d3:43:33:f3:cc:bc:4f:f2:e7:0c:97:37:cc:06:20:1e:26:
51:21:3b:d4:7d:a8:fc:3a:46:7a:b1:91:df:60:32:58:11:1b:
54:20:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:02 2025 by rpki-client