Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/KnxXn-axSGkop5HPvMCUIUXbAOk.roa
File: KnxXn-axSGkop5HPvMCUIUXbAOk.roa (raw, json)
Hash identifier: Ir18TfCiVhZh6xVhrnRWEUBE5W+otpn2ExUvHLoY3Ok=
Subject key identifier: 2A:7C:57:9F:E6:B1:48:69:28:A7:91:CF:BC:C0:94:21:45:DB:00:E9
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0AE69884
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/KnxXn-axSGkop5HPvMCUIUXbAOk.roa
Signing time: Fri 01 Jul 2022 20:41:25 +0000
ROA not before: Fri 01 Jul 2022 20:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 91.188.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182884484 (0xae69884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Jul 1 20:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a7c579fe6b1486928a791cfbcc0942145db00e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:9e:47:45:df:80:fb:4a:b9:2b:af:48:5d:
98:29:1c:3d:88:56:06:46:88:e3:d8:da:f9:26:27:
73:1b:f7:67:41:b8:80:62:d8:3e:6a:1e:ac:d3:ee:
65:aa:04:d1:95:ea:2a:24:2c:56:f8:ba:18:9c:c9:
38:92:c8:df:52:82:71:d3:07:59:42:55:f9:35:e0:
60:0a:10:48:65:05:1d:8b:fd:1d:7c:f0:c4:20:3f:
eb:c8:12:e7:98:df:fc:cb:55:98:70:9c:83:53:b7:
67:9a:3b:6d:17:1a:d7:43:55:28:95:d2:9f:69:70:
b1:1d:3e:b0:d9:4c:2d:a8:e0:43:1f:4f:64:2c:d4:
ec:0b:77:bb:ea:0a:17:e5:55:8c:e7:c5:c0:2e:95:
1b:77:89:91:55:9e:0d:5a:74:a3:35:12:3a:63:79:
92:73:6f:50:c0:a8:2e:51:15:6f:25:33:22:96:e4:
38:76:93:43:92:74:c7:70:d9:e1:3e:82:10:35:c5:
b8:4c:12:83:99:81:6d:f4:bd:0c:54:65:72:6d:58:
f4:49:74:89:cb:f8:91:31:e5:b3:c7:5a:d3:69:ee:
8e:eb:06:a9:82:05:49:62:7e:ea:c7:0b:25:4a:7e:
52:fd:e9:57:4c:a5:2b:ac:c5:41:d7:a4:06:b2:1c:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:57:9F:E6:B1:48:69:28:A7:91:CF:BC:C0:94:21:45:DB:00:E9
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/KnxXn-axSGkop5HPvMCUIUXbAOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.255.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5f:62:d2:75:81:ff:48:7d:a4:e2:20:33:13:6f:88:69:dd:
8d:9e:18:69:7c:05:1a:36:bd:bf:36:54:4d:82:92:97:b9:06:
ff:4d:36:8e:2e:d5:e7:47:42:89:d0:71:cc:25:27:cc:d7:8a:
73:40:41:59:08:d2:9d:28:b1:b0:9f:b9:3a:bf:bf:01:1d:37:
e9:74:37:22:87:ce:36:9c:e7:40:6b:4c:7b:90:97:60:8d:d1:
05:ac:7a:57:04:84:e8:dd:62:a0:91:40:7f:b7:a9:c2:b2:c5:
f5:d4:79:42:d6:47:c7:c1:19:90:29:64:11:48:30:80:a4:f6:
96:d3:9e:19:37:de:07:78:1e:1e:b4:16:82:69:81:4d:28:9e:
bf:0c:c2:3b:fb:f0:7a:77:c9:15:e7:cc:ac:a6:fa:9e:48:3e:
a4:5b:34:75:c6:d3:32:bb:9d:f0:15:6a:e9:4b:96:b5:ad:f9:
e2:63:30:0a:d2:1d:18:3b:2f:2b:6a:cd:96:8e:25:21:c0:57:
07:e5:e0:4e:99:82:6d:c7:63:7f:9b:5b:cf:c8:46:bd:d3:79:
d8:e0:91:ac:54:1d:17:24:63:be:43:2a:3b:78:10:c3:99:ee:
33:d7:67:53:de:35:70:a7:b1:78:ac:3f:e7:ba:cb:d3:83:41:
af:2a:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:37 2025 by rpki-client