Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa
File: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (raw, json)
Hash identifier: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=
Subject key identifier: 28:AE:82:9D:83:55:2E:09:0E:F6:A1:72:14:E4:FD:50:6B:D7:25:82
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 019423692BCD07BA4F4186639AF247E6756B
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa
Signing time: Wed 01 Jan 2025 19:48:02 +0000
ROA not before: Wed 01 Jan 2025 19:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31433
IP address blocks: 185.100.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:2b:cd:07:ba:4f:41:86:63:9a:f2:47:e6:75:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Jan 1 19:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28ae829d83552e090ef6a17214e4fd506bd72582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:7c:70:fb:db:6b:5d:15:0c:e2:50:35:c3:
2f:8d:91:79:66:11:24:4b:c1:2b:e4:cf:cb:8c:ef:
b6:fd:f2:1f:f5:aa:87:47:03:5f:c7:9d:3a:2d:2c:
de:94:54:5f:7f:86:a4:98:83:28:b3:d0:c5:ad:85:
7b:49:19:22:ed:2e:62:38:bd:96:9a:e9:cb:de:83:
e9:6d:a0:9f:59:6a:be:7c:a9:b2:b8:1d:78:32:ee:
a5:26:f4:75:81:c4:43:b5:b7:16:96:fc:d9:1b:49:
0a:79:85:b5:9b:83:5c:77:0a:f8:e4:eb:87:1c:98:
28:9f:9d:62:43:dd:8f:38:6f:83:01:0f:76:f2:af:
c0:1b:a9:6f:85:a0:31:53:53:45:b1:fb:76:bb:09:
26:d0:23:b9:3b:72:4b:f0:b6:89:0d:0f:4b:62:3e:
cd:b1:fb:87:c4:06:06:e9:f3:bd:c2:7f:73:a3:68:
66:47:92:84:db:c8:6f:4a:23:38:d1:7c:41:fb:88:
da:54:44:cc:a2:e7:7a:8b:ac:a9:9f:25:e7:a1:2e:
e4:c0:69:36:58:4b:54:44:65:e6:3a:94:64:13:aa:
ee:06:0c:f8:2c:e6:83:d5:2f:70:1a:66:c8:0b:71:
18:d7:f6:93:5d:80:74:c0:38:b5:74:fe:80:0f:96:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AE:82:9D:83:55:2E:09:0E:F6:A1:72:14:E4:FD:50:6B:D7:25:82
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:d2:03:a0:d0:fb:aa:1a:a7:34:17:ed:ed:8a:71:44:e8:a4:
a5:f6:6c:c6:57:2e:71:d3:45:bd:4a:84:ef:dd:51:91:de:0b:
bb:42:3b:6e:b1:98:d7:eb:74:49:ee:53:72:7a:d0:69:b5:19:
83:f5:b3:09:43:b0:57:f0:12:54:23:d9:8f:0b:e2:0d:c5:cc:
9d:5c:5c:bb:17:35:b9:cf:1a:46:9a:48:82:e0:a0:b4:ce:76:
ce:7d:90:15:c4:9b:b2:2d:5f:f1:cb:e3:22:03:dd:59:da:ab:
f7:0a:de:df:9f:09:76:a5:cb:14:a6:1c:ad:18:13:c7:08:60:
89:59:1a:c3:76:73:b5:44:d7:42:d2:53:a2:3f:35:21:2c:f8:
77:7d:49:59:4b:b6:f3:a0:a4:ad:8d:4f:b4:b7:71:91:90:04:
5a:78:1d:48:ac:dd:22:0b:4b:43:bb:86:45:b4:eb:0f:d4:47:
d1:6c:86:ff:c0:b7:42:28:ef:80:43:7e:28:f2:63:d1:52:93:
a5:d0:60:b0:9e:50:5b:f5:1b:fc:e9:93:5e:33:26:e1:3b:90:
42:cf:48:a1:e3:b0:d7:ba:2d:98:6b:c0:3d:e9:a6:65:31:fe:
c5:09:c9:d8:6b:1e:c8:7f:28:7a:3d:29:7b:85:fb:f4:82:9a:
83:6a:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:49 2025 by rpki-client