Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/KmelkdSsmbJtVWU94thK7d4v5RE.roa
File: KmelkdSsmbJtVWU94thK7d4v5RE.roa (raw, json)
Hash identifier: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=
Subject key identifier: 2A:67:A5:91:D4:AC:99:B2:6D:55:65:3D:E2:D8:4A:ED:DE:2F:E5:11
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 019425223AE0ADF7A777197897371BB5198B
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/KmelkdSsmbJtVWU94thK7d4v5RE.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 147.215.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3a:e0:ad:f7:a7:77:19:78:97:37:1b:b5:19:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a67a591d4ac99b26d55653de2d84aedde2fe511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:cc:71:a6:d1:88:89:e1:55:0d:da:b5:a5:
12:2b:63:e4:5e:7a:d4:83:b4:33:53:37:71:44:83:
45:a1:fd:da:cf:0e:a1:e0:38:a4:8a:9a:24:36:ba:
c3:a5:27:00:89:c9:7b:af:34:46:0a:97:50:0d:09:
70:62:cd:50:a6:ed:eb:9d:11:36:97:8c:92:ee:e1:
44:ea:f3:cd:4c:9d:df:d3:34:48:32:8a:77:ba:e4:
a9:a9:66:b5:45:f9:ed:3d:6e:33:0f:cb:5b:66:40:
d2:b7:38:14:0c:98:dc:96:29:ad:e4:73:9f:5b:80:
01:ff:b5:81:af:ba:ac:2c:1e:c4:52:c0:1b:be:0d:
6c:e6:82:98:0a:d3:7c:0f:3d:58:85:61:cd:8b:87:
20:d6:24:10:ec:ef:30:94:e6:25:87:de:81:ad:c3:
f8:51:c4:6e:0e:c1:52:99:cb:2a:9d:e4:b0:e1:fc:
46:81:69:2f:ea:73:ea:48:8b:67:56:91:30:e5:80:
4f:6b:20:72:06:5d:4a:ba:09:d9:06:f0:fc:b0:ba:
44:8c:7e:a6:b0:13:77:4c:17:d6:97:f6:7f:e5:93:
ea:99:79:8a:20:33:ec:72:f2:88:8f:5c:bf:ce:8e:
83:80:e1:52:85:45:0c:5f:59:65:5f:5a:00:b2:e7:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:67:A5:91:D4:AC:99:B2:6D:55:65:3D:E2:D8:4A:ED:DE:2F:E5:11
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/KmelkdSsmbJtVWU94thK7d4v5RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.215.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:b5:8a:ca:6b:04:76:31:48:73:e1:2c:fd:fb:52:30:60:fd:
99:e9:19:9d:aa:38:0a:38:41:75:6d:7c:28:a3:af:52:bf:73:
81:c5:38:70:2f:5e:91:ec:36:00:b5:08:6c:06:d5:bb:71:7f:
73:ca:e2:95:87:b6:6d:f1:3d:39:34:5b:e8:09:4f:d3:66:a2:
7e:a2:e4:a5:35:b1:3b:12:b3:59:38:05:56:f1:dc:83:c3:14:
d4:1e:22:c4:b1:f8:97:4c:aa:75:d6:bb:3f:d5:26:7e:df:4a:
ec:bd:a7:ce:3d:09:9c:43:c7:e6:8a:fe:de:80:f5:8b:5c:19:
6f:e3:6b:83:24:a6:83:b9:50:23:75:59:59:44:6a:75:d4:c6:
8a:72:38:88:1b:8a:86:67:24:63:8e:ac:12:a1:3e:3f:69:9b:
df:b0:40:16:0d:cd:56:b2:ec:23:3c:89:63:eb:c3:5c:64:10:
97:56:84:d9:41:f2:78:4e:6c:8d:2e:8d:4d:b5:bb:b0:6b:63:
96:ba:0d:41:e1:c2:60:c3:ec:9c:7b:07:e7:c2:db:3d:2b:c3:
21:66:f6:6f:6e:f9:4e:39:c4:7b:5b:9e:7c:7f:e4:04:31:a4:
4e:ac:bf:e8:7e:5e:29:d1:4b:84:0f:27:3a:84:72:ee:23:8a:
ae:6f:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:35 2025 by rpki-client