Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa
File: KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa (raw, json)
Hash identifier: oGzQ0+1tlhBDajtg9SkNTia0clrGxHNnBRyqbyuthV8=
Subject key identifier: 28:DD:CF:AA:F7:F2:D4:6A:85:D8:74:88:CB:4F:3B:4D:9A:3B:42:CD
Certificate issuer: /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial: 01941FFA649A6BB860624C362DD7942FFBF5
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35306
IP address blocks: 193.239.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:9a:6b:b8:60:62:4c:36:2d:d7:94:2f:fb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28ddcfaaf7f2d46a85d87488cb4f3b4d9a3b42cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:99:74:92:26:fd:7e:22:73:34:fe:35:c0:
a4:9d:48:06:b2:f2:c8:be:49:00:cc:bf:18:97:17:
6a:f5:79:2d:b0:82:a2:3d:da:a9:d8:33:ef:ab:dd:
c4:b3:f2:6f:66:91:8f:4a:51:13:ad:3b:9d:64:42:
9a:58:c5:51:1d:14:87:5b:4a:e8:c6:63:46:ef:ab:
de:1f:3e:4f:4e:fc:51:90:5a:b5:e3:8e:fa:d9:4a:
6e:60:44:82:7f:9d:44:6d:87:c5:95:61:69:95:d5:
41:5a:ef:ff:cd:9e:5b:25:6b:46:06:bc:c6:69:b2:
ae:66:d3:69:29:1e:44:5a:bd:c4:0e:f7:34:71:d1:
d1:ea:15:42:29:63:49:1c:c7:3e:14:e4:3f:1b:9a:
6b:dc:73:60:46:1b:a2:64:dd:69:73:a2:d4:3b:7d:
09:05:3d:2d:8e:8c:d4:e1:fd:da:30:53:93:0b:9a:
31:24:15:0b:b3:3c:27:e1:dd:83:92:ef:a3:43:3e:
93:38:e4:ed:0e:3b:dc:37:66:8f:d1:34:55:44:36:
32:9b:4a:a5:5d:85:c7:51:20:63:7d:23:79:e0:2c:
d1:62:b9:90:54:0c:00:b9:ab:7f:a4:c7:25:17:0a:
09:fb:c6:7c:11:c2:66:c8:8f:19:0e:6a:d0:05:4c:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:CF:AA:F7:F2:D4:6A:85:D8:74:88:CB:4F:3B:4D:9A:3B:42:CD
X509v3 Authority Key Identifier:
keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:64:0c:0b:a4:48:ec:e1:a8:e1:02:d4:4a:4e:94:d7:37:90:
b5:64:9c:35:79:e8:ba:b5:a6:dc:cb:44:32:bf:7c:2b:58:84:
cb:11:20:f0:47:6a:e8:cf:83:6c:16:60:e1:4b:46:01:21:a2:
2f:36:74:d2:ef:c7:4a:0f:23:27:2f:43:5f:fe:01:4c:bb:2f:
0c:c9:da:5e:71:68:5b:ec:da:69:a9:b8:c1:46:a7:69:45:ef:
41:a8:3b:39:e4:1c:99:77:d8:f2:5a:94:27:8d:37:eb:42:d0:
12:6d:91:ff:68:19:90:4f:a9:25:84:ed:4b:9f:5a:b2:0f:ed:
d8:ac:3b:56:80:86:35:bc:f1:a8:d0:95:c2:7c:bc:cb:05:7c:
65:d2:e7:3a:47:69:aa:7a:a8:54:d7:37:3c:df:1a:17:24:40:
8d:7b:5c:dd:24:32:c5:0b:e5:42:42:4b:c3:9b:81:ef:7f:aa:
5d:63:00:08:1c:5a:b4:85:01:62:ad:a1:c1:d4:70:4e:f9:93:
48:65:21:04:fe:85:07:29:93:4a:9c:a2:85:6f:9a:e1:13:ed:
aa:8f:9d:71:0e:61:b1:7a:8e:22:69:18:32:a4:2f:6b:35:21:
d7:0f:7d:09:ce:59:22:e6:08:72:e3:0e:9b:6d:9a:b1:8f:97:
eb:63:44:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mSaa7hgYkw2LdeUL/v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmZlZTJlNjkwNmUwY2ZkN2M5NGMzN2M2NGZhYmY0MWUx
NGM3YjYwHhcNMjUwMTAxMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGRkY2ZhYWY3ZjJkNDZhODVkODc0ODhjYjRmM2I0ZDlhM2I0MmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnqZdJIm/X4iczT+NcCknUgGsvLI
vkkAzL8Ylxdq9XktsIKiPdqp2DPvq93Es/JvZpGPSlETrTudZEKaWMVRHRSHW0ro
xmNG76veHz5PTvxRkFq144762UpuYESCf51EbYfFlWFpldVBWu//zZ5bJWtGBrzG
abKuZtNpKR5EWr3EDvc0cdHR6hVCKWNJHMc+FOQ/G5pr3HNgRhuiZN1pc6LUO30J
BT0tjozU4f3aMFOTC5oxJBULszwn4d2Dku+jQz6TOOTtDjvcN2aP0TRVRDYym0ql
XYXHUSBjfSN54CzRYrmQVAwAuat/pMclFwoJ+8Z8EcJmyI8ZDmrQBUxLSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCjdz6r38tRqhdh0iMtPO02aO0LNMB8GA1UdIwQY
MBaAFBYv7i5pBuDP18lMN8ZPq/QeFMe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zOTA4MzctMmI3Yi00Njg0LTk1NTct
NjljN2VhNWQ4NzE0LzEvS04zUHF2ZnkxR3FGMkhTSXkwODdUWm83UXMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zOTA4MzctMmI3Yi00Njg0LTk1NTctNjljN2VhNWQ4NzE0
LzEvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe98MA0G
CSqGSIb3DQEBCwUAA4IBAQCuZAwLpEjs4ajhAtRKTpTXN5C1ZJw1eei6tabcy0Qy
v3wrWITLESDwR2roz4NsFmDhS0YBIaIvNnTS78dKDyMnL0Nf/gFMuy8MydpecWhb
7NppqbjBRqdpRe9BqDs55ByZd9jyWpQnjTfrQtASbZH/aBmQT6klhO1Ln1qyD+3Y
rDtWgIY1vPGo0JXCfLzLBXxl0uc6R2mqeqhU1zc83xoXJECNe1zdJDLFC+VCQkvD
m4Hvf6pdYwAIHFq0hQFiraHB1HBO+ZNIZSEE/oUHKZNKnKKFb5rhE+2qj51xDmGx
eo4iaRgypC9rNSHXD30Jzlki5ghy4w6bbZqxj5frY0R+
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:08:35 2025 by rpki-client