Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/KBkPEKuHor0zBj6YpAJGkxud1Fo.roa
File: KBkPEKuHor0zBj6YpAJGkxud1Fo.roa (raw, json)
Hash identifier: aRB52wqhCKyk+lFn/X5ts6PNhQ/KcaoodBx+csqadVI=
Subject key identifier: 28:19:0F:10:AB:87:A2:BD:33:06:3E:98:A4:02:46:93:1B:9D:D4:5A
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244558AC3B94905B89C415AFF36A9640
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/KBkPEKuHor0zBj6YpAJGkxud1Fo.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47294
IP address blocks: 84.44.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:58:ac:3b:94:90:5b:89:c4:15:af:f3:6a:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28190f10ab87a2bd33063e98a40246931b9dd45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:59:b8:b4:4d:dc:dc:e9:8b:b1:b1:e6:87:
2e:fa:15:a3:3c:a3:b4:5f:02:e7:48:4a:27:e0:1b:
26:96:29:76:48:26:03:79:49:06:97:d2:26:3e:f8:
1d:ad:f6:2d:c1:bc:bc:77:71:76:3f:e8:8c:aa:6f:
ac:c4:62:dd:68:4f:b3:96:eb:2a:3b:c3:a3:f3:c2:
46:54:48:b3:71:45:5c:7a:30:5e:81:64:f3:02:74:
8d:80:d5:7b:77:47:6c:74:e9:ad:b0:6b:01:10:38:
8f:bf:e0:1f:ef:53:1f:6c:eb:c8:c4:67:69:94:9e:
77:d4:28:55:98:dc:9c:58:3f:87:0d:6b:e2:c9:71:
4c:42:ca:46:99:75:88:bf:46:a3:50:f5:b4:94:ab:
39:a9:2a:97:f6:bc:02:a4:30:70:d3:f8:06:37:c6:
38:eb:4a:86:23:ea:4f:2c:0a:05:29:36:54:42:01:
35:81:f9:57:61:16:fa:e3:d7:2b:9f:f6:23:77:fe:
80:69:a8:67:1e:7a:b8:16:a3:f3:cf:05:d6:27:87:
da:c9:62:2f:0e:fa:a5:c4:0a:c3:43:33:24:72:32:
32:3f:fa:b2:7f:d1:1c:23:b5:46:3c:0f:86:cc:a3:
7f:92:35:26:5a:dd:0e:0e:eb:2b:d2:5f:ef:83:c7:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:0F:10:AB:87:A2:BD:33:06:3E:98:A4:02:46:93:1B:9D:D4:5A
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/KBkPEKuHor0zBj6YpAJGkxud1Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.41.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9d:c5:28:04:bf:4a:ca:44:6b:1a:40:8d:4c:a9:58:2d:78:
9e:54:86:81:d0:3e:a0:87:30:e8:ad:fb:b7:54:6e:cc:56:d5:
20:5d:ba:47:2c:81:da:03:74:c4:60:22:28:31:63:5b:37:c6:
1d:51:cd:5b:39:17:55:f3:32:3a:a6:bb:ee:27:78:d6:6c:9f:
a3:ca:8b:3f:e7:e7:83:8a:ea:ac:4d:d8:14:c6:92:a1:49:f5:
f2:76:4b:4d:08:af:b4:34:7e:e2:fb:08:8c:0d:48:3a:80:9b:
b5:cf:44:ab:b0:68:a0:cc:4b:46:73:72:7e:e1:79:8d:74:34:
59:96:52:6c:f7:d4:2d:2d:bf:3d:06:37:4c:72:ce:9a:be:a3:
28:52:7d:8e:a2:a3:d9:a1:23:73:63:ed:00:4b:1c:38:13:d1:
7f:f1:f4:48:cb:33:af:03:4a:70:f4:de:35:2f:fc:9c:31:6f:
7f:d3:ce:9b:87:db:c4:ed:ab:51:47:a4:d4:f6:24:f8:df:74:
29:fc:be:2a:74:f1:f5:15:e8:66:3c:e4:1e:d9:7b:a8:33:57:
3f:b7:f0:a1:65:3a:be:aa:45:5d:2e:55:ba:35:60:0f:cd:37:
9f:62:1b:87:8c:e1:73:66:c3:e6:d5:ab:96:75:01:65:95:5e:
b3:1e:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:31 2025 by rpki-client