Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KvI_WlSyaYCbk3_UABhTDePguQI.roa
File: KvI_WlSyaYCbk3_UABhTDePguQI.roa (raw, json)
Hash identifier: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=
Subject key identifier: 2A:F2:3F:5A:54:B2:69:80:9B:93:7F:D4:00:18:53:0D:E3:E0:B9:02
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D64C6B114B1580463C92D48C8F5C2E
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KvI_WlSyaYCbk3_UABhTDePguQI.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8739
IP address blocks: 94.155.37.0/24 maxlen: 24
213.145.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4c:6b:11:4b:15:80:46:3c:92:d4:8c:8f:5c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2af23f5a54b269809b937fd40018530de3e0b902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:81:9e:ec:be:54:2a:d2:a6:45:72:3a:9b:
cb:54:37:bc:8c:96:98:62:dc:e5:32:41:28:bf:83:
80:b8:3d:a4:04:ba:b4:35:84:3e:1e:cd:a1:ec:b7:
ec:c1:52:01:db:d3:42:00:30:b0:83:52:94:df:e6:
27:97:a8:bc:6d:51:3d:a9:00:f2:ee:49:7c:02:2b:
69:ae:49:6e:d0:ff:bd:26:c0:f8:d2:18:8c:b8:8b:
f4:81:64:ae:e3:f2:7b:e3:24:05:48:b3:69:8c:95:
1d:1d:06:cb:69:6c:86:d3:a7:ab:57:91:bd:6e:3f:
c8:64:5a:0b:cf:6c:4c:ef:8f:c9:94:c1:29:59:96:
d7:f5:7a:df:16:f4:b5:38:20:b8:28:86:e4:b7:1a:
04:4f:c4:92:50:f2:68:de:66:b7:b6:e2:d7:29:98:
d7:87:25:c0:a4:2c:87:a0:04:a5:4f:4e:ec:57:1c:
45:15:7c:a8:3f:3a:8e:c4:d5:98:06:e2:6e:b4:d8:
dc:e7:cb:12:2b:69:6e:fd:c3:05:d0:45:28:74:9b:
76:a8:b1:d5:aa:40:ab:25:35:09:7f:5a:f5:cb:4f:
1b:1e:98:ba:48:83:01:ad:1c:2e:a4:fa:7e:22:13:
69:39:88:cc:17:35:57:e0:69:c6:1d:df:26:42:34:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:3F:5A:54:B2:69:80:9B:93:7F:D4:00:18:53:0D:E3:E0:B9:02
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/KvI_WlSyaYCbk3_UABhTDePguQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.37.0/24
213.145.98.0/24
Signature Algorithm: sha256WithRSAEncryption
42:99:82:e6:f5:76:e2:73:ff:39:2e:ab:51:e5:f8:da:be:51:
97:37:61:3d:27:eb:bb:a7:9e:23:84:cd:1b:2e:fa:ec:3d:ba:
0f:55:6b:33:1d:8d:93:7f:5e:a7:b7:23:60:80:c2:dd:10:d7:
92:bd:19:ab:d1:f7:28:df:bc:db:74:6f:e2:bc:49:d7:33:96:
c1:a2:bc:66:2a:b4:4e:c3:9e:54:9e:ca:16:37:a3:47:ad:ec:
db:af:35:8d:08:b8:01:a9:0f:a8:f9:04:2a:4a:39:84:35:44:
a5:6f:68:52:c8:a4:ce:11:c6:90:b6:6f:98:a6:22:cc:f9:8e:
a7:f1:b7:88:96:07:40:d3:2e:76:09:d3:25:da:a9:f4:c3:c8:
1a:75:f4:a0:76:af:76:79:28:e0:01:f2:dd:9f:a4:84:cd:a4:
f3:a6:12:87:cb:8f:f1:0f:c8:16:a5:43:7e:8d:34:16:a6:55:
d0:eb:16:4b:ab:6f:ba:5e:4e:51:7f:57:c3:49:58:43:55:51:
27:0d:9b:c1:2b:1a:14:45:c5:76:37:9f:9c:0c:54:52:f2:2b:
47:c8:4b:da:0b:e7:b4:0c:c1:c6:5c:dc:d8:37:ab:cb:e3:1b:
b1:b0:7d:54:bb:b3:92:aa:08:55:b5:e0:5c:f6:f2:39:ad:74:
5d:1b:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:09 2025 by rpki-client