Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/KKZ3H1Ig1Ai_kXp1maqntJqKS9E.roa
File: KKZ3H1Ig1Ai_kXp1maqntJqKS9E.roa (raw, json)
Hash identifier: VljnOwALwBLtSWbQ+Tok7KNQehan+9sMOUJ88vhoF9I=
Subject key identifier: 28:A6:77:1F:52:20:D4:08:BF:91:7A:75:99:AA:A7:B4:9A:8A:4B:D1
Certificate issuer: /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial: 01941FFA92A13EB9FF14CBDB720B70D0B9CF
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/KKZ3H1Ig1Ai_kXp1maqntJqKS9E.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51964
IP address blocks: 62.229.0.0/16 maxlen: 24
200.240.0.0/17 maxlen: 17
200.240.128.0/18 maxlen: 18
200.240.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:a1:3e:b9:ff:14:cb:db:72:0b:70:d0:b9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28a6771f5220d408bf917a7599aaa7b49a8a4bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:a2:5d:04:8c:a3:10:78:33:81:35:04:46:
8a:fb:de:5a:42:d1:2e:b3:c8:66:4a:4d:98:3a:34:
65:27:a4:c1:e0:e3:69:25:00:f3:18:56:58:77:06:
e5:ff:f5:a2:e7:39:71:7e:61:d8:23:17:d7:54:1f:
96:cc:c2:3c:98:fa:9e:15:81:ea:c4:d8:6f:b8:02:
41:20:88:ba:ba:c3:86:82:7f:90:e9:5c:51:d9:63:
34:3a:d3:8f:74:8c:7a:31:b4:de:17:dc:69:7c:88:
dc:8a:66:a5:30:14:02:87:86:36:28:f9:6e:a0:85:
ff:cf:df:ea:6e:43:bb:21:f6:fc:6c:9f:7e:a2:33:
4b:e3:7c:c7:c3:2e:62:f0:13:72:52:a6:d3:c7:45:
aa:40:c2:89:7b:8a:cc:97:1b:64:2a:6e:89:1a:75:
e1:bb:ca:31:1f:6d:61:d5:d3:d1:31:2a:86:a1:a6:
bc:c4:92:f4:47:6b:35:2d:a6:99:5f:b4:d4:eb:7f:
2c:63:9a:c1:83:b7:98:f6:cd:ac:f7:40:55:7e:ee:
c5:2d:12:ca:1e:4e:9c:d3:c6:ff:02:98:0f:77:47:
e5:2b:0e:f0:7e:d0:c6:f5:cf:8b:22:8e:af:8f:a7:
ea:3a:e6:da:78:8c:45:51:05:bf:f6:1f:d5:c6:8f:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:77:1F:52:20:D4:08:BF:91:7A:75:99:AA:A7:B4:9A:8A:4B:D1
X509v3 Authority Key Identifier:
keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/KKZ3H1Ig1Ai_kXp1maqntJqKS9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.229.0.0/16
200.240.0.0-200.240.223.255
Signature Algorithm: sha256WithRSAEncryption
13:b4:bf:a4:c6:1b:bd:9f:57:49:d7:26:f1:05:66:34:53:68:
86:34:2e:25:42:42:af:ec:89:a5:50:a2:43:e5:d5:94:57:56:
d9:cc:cd:aa:4f:47:69:86:77:7b:6a:46:c1:15:93:5a:9f:16:
61:14:02:7b:77:fb:1a:e2:59:9b:2e:25:60:65:88:56:d0:02:
e9:9c:8f:ce:1e:dc:27:36:78:b9:a2:61:65:32:75:d0:52:01:
ed:2b:79:3e:8a:af:71:a4:38:2c:0b:e0:4a:65:1b:69:16:3a:
f9:0b:53:6d:61:45:20:56:93:8e:44:b2:81:bb:a1:57:b5:60:
04:89:f6:63:19:b8:57:be:04:83:15:2f:d5:12:f9:bd:da:6e:
28:d0:db:0d:0e:ea:8a:f9:0f:22:f5:97:42:e5:0e:25:b7:2b:
a0:2b:e4:b7:aa:fe:16:98:ce:2f:55:50:a1:6a:1d:04:fc:9d:
6e:cd:fb:3c:d8:c5:38:2e:ec:1f:83:01:bf:49:58:cd:5f:35:
26:7b:17:d6:2e:71:cd:5b:b6:f7:70:b1:8d:bf:26:83:73:6b:
31:bc:4c:b4:2f:38:4e:af:69:d0:bd:04:5a:8e:a8:99:d5:6d:
9d:a7:2e:23:46:37:a5:f5:36:c2:e2:b1:d4:af:a0:af:a8:7c:
2c:85:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:43:41 2025 by rpki-client