Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/KVI3XedSS3nRQY078sbR6ptPKy0.roa
File: KVI3XedSS3nRQY078sbR6ptPKy0.roa (raw, json)
Hash identifier: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=
Subject key identifier: 29:52:37:5D:E7:52:4B:79:D1:41:8D:3B:F2:C6:D1:EA:9B:4F:2B:2D
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019425FC508EBB47657255BB8D9795226CF6
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/KVI3XedSS3nRQY078sbR6ptPKy0.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61206
IP address blocks: 193.169.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:50:8e:bb:47:65:72:55:bb:8d:97:95:22:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2952375de7524b79d1418d3bf2c6d1ea9b4f2b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:92:b4:0b:13:e4:67:ea:85:96:8d:12:63:
5d:ea:5e:db:47:6f:cd:d8:b3:42:1d:d8:9b:93:70:
52:d6:fa:57:d0:c7:80:2d:50:ed:2f:e3:87:65:33:
8d:41:4b:d4:48:d7:69:50:bd:3d:60:50:d0:ac:1d:
fa:04:e7:4d:b7:67:e2:52:37:b9:43:e4:f0:e7:9c:
a3:72:d8:ec:8a:78:47:ab:c4:d7:d2:96:23:e8:dd:
20:d2:31:44:a8:c2:e5:62:3b:62:17:27:29:9a:c6:
d2:45:e2:20:c1:9a:ce:61:71:fb:3a:56:4f:f6:d9:
5c:67:14:3b:4a:07:f7:c3:7b:7c:f1:f9:81:6f:78:
0c:14:b8:82:5a:2b:0a:62:12:1b:b1:fd:22:87:34:
c2:f5:e9:1a:84:af:fc:b0:40:f9:bc:a4:c3:02:fb:
b2:88:c0:91:f2:ca:b9:78:ec:84:b3:69:51:ad:a8:
d6:d7:c9:c8:7e:4f:e9:9f:c9:12:b6:ef:44:60:9c:
13:bd:da:c4:f9:c4:2f:e2:33:ae:46:72:c8:56:55:
45:0f:1c:fb:2f:a8:a5:09:1e:a3:2d:7b:e1:4a:aa:
b5:c8:57:06:e0:da:78:9e:0e:32:9c:21:62:ff:bf:
3e:2a:e2:a4:c1:72:b5:77:70:94:57:3b:97:aa:55:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:52:37:5D:E7:52:4B:79:D1:41:8D:3B:F2:C6:D1:EA:9B:4F:2B:2D
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/KVI3XedSS3nRQY078sbR6ptPKy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.213.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ff:9f:90:e1:54:2c:69:a8:98:73:db:83:f1:ac:59:67:2b:
4d:ae:cd:2a:9e:1b:1c:24:32:c1:82:b0:4e:28:cd:25:00:d4:
ef:c9:df:33:8f:e7:58:5c:c0:09:07:88:11:66:79:bd:bf:b8:
5e:ea:df:18:f1:61:04:99:00:7f:ae:7d:9b:7d:e0:85:e8:a7:
26:bd:56:76:22:26:c9:51:3d:6d:f5:c6:6a:ff:f9:91:dc:dd:
d5:b2:50:a3:91:01:24:32:2a:bc:44:ea:d7:a3:3c:9b:ab:7f:
7d:5d:0a:d1:79:e5:b4:6f:c2:53:ed:25:6c:b6:a2:20:56:b6:
96:db:f9:6c:02:1b:77:6c:0d:45:32:c1:0e:7c:76:27:95:c2:
89:5a:2c:e2:ec:25:0d:4d:b5:a7:27:bd:0e:28:17:d1:1c:84:
45:6c:df:b9:32:28:81:8a:e5:9e:88:34:8a:ec:4e:f9:19:4a:
be:7c:e4:9a:37:c4:28:f6:cf:1b:b6:50:75:85:95:0d:af:ba:
dd:d5:c4:41:2f:32:22:dd:da:e1:2f:fc:5d:34:19:dc:6d:ae:
66:b5:df:4b:4b:ca:72:cf:f0:99:a9:87:42:03:78:e2:6b:03:
b5:3e:2f:72:2a:39:f7:0c:70:62:48:a8:d6:c1:a2:13:81:ad:
98:b0:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:51 2025 by rpki-client