Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/KcaXY5GqNLQM-eAtasEVAbUL2j0.roa
File: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (raw, json)
Hash identifier: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=
Subject key identifier: 29:C6:97:63:91:AA:34:B4:0C:F9:E0:2D:6A:C1:15:01:B5:0B:DA:3D
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4BBC7670644648BCB41B2B2765E4
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/KcaXY5GqNLQM-eAtasEVAbUL2j0.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44307
IP address blocks: 83.126.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:bc:76:70:64:46:48:bc:b4:1b:2b:27:65:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29c6976391aa34b40cf9e02d6ac11501b50bda3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f3:a2:25:77:ea:ca:ca:91:b7:54:64:34:d4:
4b:f8:52:0b:13:d5:7b:c0:f4:d6:ec:b3:82:b3:23:
5a:b7:93:8a:fb:66:c2:b3:4e:71:f0:51:6d:7e:45:
1a:7c:19:68:62:6c:54:7c:3c:30:3d:1e:4c:9d:c2:
f2:39:ec:1a:56:be:fa:1d:77:d2:08:db:f7:6e:e9:
ce:24:f9:c8:26:88:cd:ed:6f:80:47:42:c9:6a:77:
14:b1:c8:30:a9:00:53:58:ac:f4:8d:1a:b1:04:a2:
c4:da:17:ca:5a:0f:1a:e4:fd:ea:c7:65:56:e2:3f:
88:e9:7c:80:77:f1:06:f0:c7:4e:cf:0a:73:59:ba:
86:4a:33:b1:68:89:4d:ad:9e:64:77:65:c0:84:cd:
09:01:97:39:6c:cb:85:f5:12:12:a5:26:49:c9:aa:
ef:cb:3f:25:4e:4b:e8:4e:0a:ee:41:07:d7:8b:34:
c4:eb:2b:1a:d2:a1:cc:18:f1:c6:44:e0:15:95:15:
af:4e:a4:a4:d3:24:67:b7:1b:7c:c3:7c:a4:66:f9:
46:1d:f5:50:97:67:56:d6:cc:9f:b1:56:2a:21:3c:
fb:97:4f:6a:ce:57:55:f6:b5:55:8e:ac:38:cd:e0:
59:9d:a8:86:04:a3:8f:44:2e:9f:74:5d:c7:be:f3:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:97:63:91:AA:34:B4:0C:F9:E0:2D:6A:C1:15:01:B5:0B:DA:3D
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/KcaXY5GqNLQM-eAtasEVAbUL2j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.0.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:ad:14:e7:8e:81:80:0c:87:7d:bb:aa:57:87:20:03:3f:fd:
97:33:c4:ea:2b:50:fa:eb:82:ac:4f:a4:ad:39:4a:4d:9e:8e:
88:1d:e0:69:aa:8a:4b:0e:9d:c6:4a:a3:30:26:60:e1:23:45:
d8:e1:9e:14:2d:d2:51:0d:44:b9:69:39:09:53:a1:3e:cf:f3:
93:79:df:92:1d:fb:25:4d:3b:2a:99:d6:76:28:16:f8:c1:79:
e3:57:3f:e1:98:a3:b3:ad:92:04:c8:16:40:e6:e7:3a:65:7d:
11:c7:9c:8e:ab:3c:52:83:20:37:bd:0d:78:69:b5:3a:ec:2e:
5d:b9:18:47:48:4b:77:6a:be:b5:1e:78:cd:c1:de:a9:f7:50:
2c:d4:f5:1d:2d:aa:1a:ab:ad:41:de:3e:c6:fe:29:50:83:91:
13:b6:d0:72:29:4e:b3:79:32:d9:0e:75:b1:1f:52:f7:64:52:
dc:0d:9c:bb:47:e7:2b:c5:bb:46:e5:00:6e:f5:f0:74:7a:3b:
ac:c6:4f:fd:f0:5f:da:cc:00:6c:f9:97:37:27:36:c2:c8:37:
27:93:24:e2:e3:12:a5:b3:24:0e:52:f3:16:0b:ca:bf:a1:b8:
cc:ca:ec:a6:89:aa:18:52:16:8f:ec:b1:ea:21:b7:b6:59:2c:
95:0c:7e:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+ku8dnBkRki8tBsrJ2XkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjUwMTAxMDM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWM2OTc2MzkxYWEzNGI0MGNmOWUwMmQ2YWMxMTUwMWI1MGJkYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/OiJXfqysqRt1RkNNRL+FILE9V7
wPTW7LOCsyNat5OK+2bCs05x8FFtfkUafBloYmxUfDwwPR5MncLyOewaVr76HXfS
CNv3bunOJPnIJojN7W+AR0LJancUscgwqQBTWKz0jRqxBKLE2hfKWg8a5P3qx2VW
4j+I6XyAd/EG8MdOzwpzWbqGSjOxaIlNrZ5kd2XAhM0JAZc5bMuF9RISpSZJyarv
yz8lTkvoTgruQQfXizTE6ysa0qHMGPHGROAVlRWvTqSk0yRntxt8w3ykZvlGHfVQ
l2dW1syfsVYqITz7l09qzldV9rVVjqw4zeBZnaiGBKOPRC6fdF3HvvNYwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCnGl2ORqjS0DPngLWrBFQG1C9o9MB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvS2NhWFk1R3FOTFFNLWVBdGFzRVZBYlVMMmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU34AMA0G
CSqGSIb3DQEBCwUAA4IBAQCarRTnjoGADId9u6pXhyADP/2XM8TqK1D664KsT6St
OUpNno6IHeBpqopLDp3GSqMwJmDhI0XY4Z4ULdJRDUS5aTkJU6E+z/OTed+SHfsl
TTsqmdZ2KBb4wXnjVz/hmKOzrZIEyBZA5uc6ZX0Rx5yOqzxSgyA3vQ14abU67C5d
uRhHSEt3ar61HnjNwd6p91As1PUdLaoaq61B3j7G/ilQg5ETttByKU6zeTLZDnWx
H1L3ZFLcDZy7R+crxbtG5QBu9fB0ejusxk/98F/azABs+Zc3JzbCyDcnkyTi4xKl
syQOUvMWC8q/objMyuymiaoYUhaP7LHqIbe2WSyVDH5c
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:57:50 2025 by rpki-client