Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/kPALK0u_pJmbieCv7kbynfsqawg.roa
File: kPALK0u_pJmbieCv7kbynfsqawg.roa (raw, json)
Hash identifier: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=
Subject key identifier: 90:F0:0B:2B:4B:BF:A4:99:9B:89:E0:AF:EE:46:F2:9D:FB:2A:6B:08
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA436678872E19CA838E823E8F8F1E
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/kPALK0u_pJmbieCv7kbynfsqawg.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12372
IP address blocks: 83.125.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:66:78:87:2e:19:ca:83:8e:82:3e:8f:8f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90f00b2b4bbfa4999b89e0afee46f29dfb2a6b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:a2:2e:e8:b4:84:ad:96:3a:b9:c9:28:7b:
f0:a5:06:3c:f0:ba:8f:a6:60:95:8e:c4:1b:65:37:
aa:89:50:ed:e5:5f:d5:c4:7d:84:e1:ac:53:d2:c8:
46:a1:38:3e:41:7d:c9:f1:2a:16:41:e6:68:19:71:
16:fc:d1:05:bf:61:18:e7:c9:df:ef:c7:4e:1b:1c:
51:59:81:eb:60:b1:4f:ef:b0:fd:10:d8:74:64:11:
dc:02:45:4c:c7:70:93:5f:12:b7:51:2c:5d:09:0f:
13:22:e4:e7:ca:36:88:ed:47:d4:69:ee:92:41:bb:
1f:69:19:da:f1:72:31:b9:4d:9b:0d:28:de:7c:b6:
ae:fd:ce:34:15:67:1b:1d:f8:ac:7e:3e:85:87:c9:
76:84:af:66:9a:58:ae:3a:63:fa:8d:ac:84:f0:c6:
d1:e9:f9:ee:4c:e1:31:52:90:cb:f5:b8:e6:dd:25:
f5:ad:9a:c7:ef:e7:1b:10:85:1f:78:3b:e5:70:31:
d9:1d:0c:d8:3e:78:45:3f:c1:b8:c1:8d:3d:d8:aa:
dc:81:be:2a:2d:0b:9d:2b:4d:5e:70:75:e2:70:90:
30:ef:3a:39:4e:14:16:30:f2:90:cb:68:28:34:14:
e3:88:aa:12:3c:d3:34:ee:a6:28:49:c9:33:52:be:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:0B:2B:4B:BF:A4:99:9B:89:E0:AF:EE:46:F2:9D:FB:2A:6B:08
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/kPALK0u_pJmbieCv7kbynfsqawg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.139.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fe:21:4f:00:58:95:ef:a7:3d:b7:70:66:ae:57:6f:85:13:
a6:2b:d1:5b:cd:6e:44:39:ad:b9:ac:60:c7:18:7b:0a:93:74:
f1:67:6c:0f:8e:78:fb:10:f8:f7:6c:41:61:ff:5b:cc:19:ab:
f0:f0:fe:35:c1:07:b3:66:b5:e8:ae:ef:01:cd:97:33:af:21:
26:6e:0f:3c:92:c1:83:85:d6:ef:64:76:0f:21:cf:dc:89:43:
61:4b:e6:f2:62:4b:1b:14:0d:87:40:b5:4a:7e:88:df:ca:a2:
8f:88:55:44:bc:50:a9:09:11:30:e0:60:8e:66:c4:42:08:93:
16:d7:83:92:f2:56:5d:09:ed:37:41:fc:ae:82:05:8c:e3:73:
46:88:67:f7:2c:d2:d6:ac:f4:ab:67:4b:d3:27:6d:84:06:50:
99:37:4b:b3:ea:f9:e9:9f:61:45:2f:eb:51:02:52:c7:ec:57:
ce:51:d7:27:a9:c9:fb:7a:28:16:c1:aa:0f:10:da:ee:d1:78:
c1:25:64:15:db:89:cf:ef:c5:0c:d1:66:9f:83:b9:21:78:9c:
26:91:49:1c:dc:57:bd:ba:c8:5c:2b:e5:82:e0:22:1e:34:b2:
24:96:87:52:41:06:4b:0f:60:4a:b1:0c:85:7e:25:30:d3:1d:
dd:63:27:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kNmeIcuGcqDjoI+j48eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGYwMGIyYjRiYmZhNDk5OWI4OWUwYWZlZTQ2ZjI5ZGZiMmE2YjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NKiLui0hK2WOrnJKHvwpQY88LqP
pmCVjsQbZTeqiVDt5V/VxH2E4axT0shGoTg+QX3J8SoWQeZoGXEW/NEFv2EY58nf
78dOGxxRWYHrYLFP77D9ENh0ZBHcAkVMx3CTXxK3USxdCQ8TIuTnyjaI7UfUae6S
QbsfaRna8XIxuU2bDSjefLau/c40FWcbHfisfj6Fh8l2hK9mmliuOmP6jayE8MbR
6fnuTOExUpDL9bjm3SX1rZrH7+cbEIUfeDvlcDHZHQzYPnhFP8G4wY092Krcgb4q
LQudK01ecHXicJAw7zo5ThQWMPKQy2goNBTjiKoSPNM07qYoSckzUr7PBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJDwCytLv6SZm4ngr+5G8p37KmsIMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEva1BBTEswdV9wSm1iaWVDdjdrYnluZnNxYXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU32LMA0G
CSqGSIb3DQEBCwUAA4IBAQBD/iFPAFiV76c9t3BmrldvhROmK9FbzW5EOa25rGDH
GHsKk3TxZ2wPjnj7EPj3bEFh/1vMGavw8P41wQezZrXoru8BzZczryEmbg88ksGD
hdbvZHYPIc/ciUNhS+byYksbFA2HQLVKfojfyqKPiFVEvFCpCREw4GCOZsRCCJMW
14OS8lZdCe03QfyuggWM43NGiGf3LNLWrPSrZ0vTJ22EBlCZN0uz6vnpn2FFL+tR
AlLH7FfOUdcnqcn7eigWwaoPENru0XjBJWQV24nP78UM0Wafg7kheJwmkUkc3Fe9
ushcK+WC4CIeNLIklodSQQZLD2BKsQyFfiUw0x3dYyfN
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:57:47 2025 by rpki-client