Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/KygTuxQFGUD5ATwC-VI56P0_KW8.roa
File: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (raw, json)
Hash identifier: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=
Subject key identifier: 2B:28:13:BB:14:05:19:40:F9:01:3C:02:F9:52:39:E8:FD:3F:29:6F
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 019422FB812B91A16D040456B81EEE021F5A
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/KygTuxQFGUD5ATwC-VI56P0_KW8.roa
Signing time: Wed 01 Jan 2025 17:48:15 +0000
ROA not before: Wed 01 Jan 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.129.16.0/24 maxlen: 24
185.129.17.0/24 maxlen: 24
185.231.108.0/24 maxlen: 24
185.231.109.0/24 maxlen: 24
185.231.110.0/24 maxlen: 24
185.231.111.0/24 maxlen: 24
2a0f:aac0::/48 maxlen: 48
2a0f:aac0:1::/48 maxlen: 48
2a0f:aac0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:81:2b:91:a1:6d:04:04:56:b8:1e:ee:02:1f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b2813bb14051940f9013c02f95239e8fd3f296f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:96:3e:53:a1:8a:47:4c:16:51:db:22:15:
5b:74:85:f0:8e:af:a9:84:64:61:d0:ff:02:e5:c4:
24:5b:e1:80:fe:a0:ff:17:d4:ce:c2:90:a6:a1:fc:
2d:a9:55:4c:fc:15:46:40:d8:69:16:68:18:ba:53:
66:8d:2b:71:7f:6c:4c:e3:b1:98:d3:9d:c3:77:59:
45:57:f7:e3:ce:07:50:e4:27:67:e5:d3:7f:c0:79:
1c:27:dd:74:ce:dd:ab:04:e9:58:5d:64:e1:7a:b6:
17:dc:da:25:ac:10:58:37:9d:0d:9d:4b:dd:6b:bb:
90:75:f7:fa:a1:19:35:47:57:17:07:ab:b2:73:87:
fe:e5:e7:4a:85:4f:a1:0c:c9:88:03:b7:1f:f1:fc:
9a:16:75:8b:23:f2:c1:24:34:3d:63:81:22:1f:65:
bc:b5:78:e3:67:ba:c3:3b:24:02:0e:b3:84:a9:11:
e7:ee:93:28:17:5b:31:1f:86:75:91:2b:b2:ec:0f:
39:38:c5:d7:a6:8e:5e:9d:fb:19:2d:82:ce:9d:01:
4b:b6:3c:a4:12:1a:5d:0b:c4:f5:91:03:18:dd:5f:
4d:50:c3:34:17:48:3c:4e:6c:7b:49:c8:14:7c:64:
ca:72:cd:c5:46:ee:24:b5:2b:1c:58:67:53:4d:6a:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:13:BB:14:05:19:40:F9:01:3C:02:F9:52:39:E8:FD:3F:29:6F
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/KygTuxQFGUD5ATwC-VI56P0_KW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.16.0/23
185.231.108.0/22
IPv6:
2a0f:aac0::-2a0f:aac0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:5c:20:02:3d:5f:36:04:1a:b1:44:e8:3a:b7:98:30:18:dd:
e4:c7:15:01:6e:f3:3a:e6:da:26:78:ed:06:e2:5b:76:49:9f:
27:a7:49:1d:b0:ee:fe:23:e6:65:63:0b:ec:49:6b:46:33:12:
23:31:8a:a2:00:33:31:1d:72:38:da:7e:c1:3b:50:f4:fd:72:
b2:64:f8:c5:03:b0:9a:e7:1c:64:e7:98:82:20:fd:8c:fb:ee:
b7:e4:c4:56:1c:09:26:15:80:a9:32:33:cf:a8:ee:a5:f6:6e:
0b:a2:b8:32:81:a9:af:4f:16:d6:fa:0e:7c:59:f6:d6:65:2d:
11:32:7e:6c:96:66:e9:13:31:5c:1d:63:55:27:54:8f:ad:a0:
03:8e:93:5b:76:68:8a:3c:59:5f:d8:fb:09:ab:08:aa:5d:95:
62:b8:8e:0c:2a:55:38:0c:f1:16:cb:f5:c9:fc:a9:e3:de:00:
f4:5e:13:1b:53:16:06:66:22:ff:fb:6f:3f:2c:15:dd:06:f3:
4a:54:d5:bc:fe:86:73:f3:62:eb:da:29:2d:13:3a:97:05:dd:
c5:1d:70:cf:1f:5d:ca:78:09:02:64:71:85:72:45:4b:93:c3:
8a:e0:8d:64:e6:61:42:de:14:e1:e1:5b:77:fe:bf:b9:a9:ca:
2d:50:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:57 2025 by rpki-client