Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa
File: KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa (raw, json)
Hash identifier: s7jbrR/tYQZH56SCp6DZfaO9EeWTAe129IHD4mNW6qQ=
Subject key identifier: 28:C5:3D:82:9D:8F:CD:EE:AD:2B:A4:6A:9C:6E:96:91:DC:4C:BE:12
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01946F9D4A8A0ECEFDB16660BDC282E38FA8
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa
Signing time: Thu 16 Jan 2025 14:56:06 +0000
ROA not before: Thu 16 Jan 2025 14:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202759
IP address blocks: 45.151.72.0/24 maxlen: 24
95.156.206.0/24 maxlen: 24
185.122.185.0/24 maxlen: 24
185.193.49.0/24 maxlen: 24
188.214.32.0/24 maxlen: 24
188.214.36.0/24 maxlen: 24
188.214.37.0/24 maxlen: 24
2a03:f80:372::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:9d:4a:8a:0e:ce:fd:b1:66:60:bd:c2:82:e3:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 16 14:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28c53d829d8fcdeead2ba46a9c6e9691dc4cbe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:d9:18:28:92:22:e3:a2:ec:dd:57:c7:fc:
a2:c3:0b:8c:6e:12:56:8f:aa:d4:cc:cf:c8:1a:fa:
1b:fb:c8:c6:1a:2f:78:18:d1:83:ec:cb:a9:6d:b5:
be:ee:7f:28:c6:84:cf:16:f0:dd:c2:8f:d9:8b:10:
b9:ea:57:99:11:8d:3e:87:04:be:32:62:8d:fc:4b:
87:00:9a:76:b2:51:ed:ca:46:7c:80:a6:8d:c0:bc:
7d:9d:ef:67:fe:3b:7b:7f:1d:4c:8b:75:5b:1b:4f:
3b:30:4c:c5:75:6e:ab:1e:ed:03:b2:0f:21:ac:20:
5f:cc:15:e9:f4:b2:1f:83:d5:3d:e1:1a:31:6e:83:
70:68:b5:2c:63:fd:0e:c3:5e:95:c5:39:2d:e6:0b:
2e:91:bd:1d:2f:c9:08:ad:6e:2d:26:de:72:f3:fc:
f1:29:93:66:e2:55:97:02:ff:64:3c:cf:4f:38:9b:
3f:ea:4d:13:60:90:8d:84:3c:60:16:6d:21:04:4c:
c9:10:8e:60:3d:25:c2:78:fb:7a:ed:a4:f1:c9:47:
a8:00:29:29:6e:62:2e:84:95:6c:47:ff:91:7a:00:
ca:e2:26:d6:75:04:4b:f8:0f:b7:3f:b1:1a:80:df:
34:76:24:21:6c:90:e0:73:83:62:76:a4:f0:7c:02:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C5:3D:82:9D:8F:CD:EE:AD:2B:A4:6A:9C:6E:96:91:DC:4C:BE:12
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.72.0/24
95.156.206.0/24
185.122.185.0/24
185.193.49.0/24
188.214.32.0/24
188.214.36.0/23
IPv6:
2a03:f80:372::/48
Signature Algorithm: sha256WithRSAEncryption
60:63:2d:03:aa:ab:8b:2b:62:95:f7:12:cb:ae:39:29:26:9b:
09:10:75:2d:5a:93:ce:20:1d:95:df:f3:9d:88:8e:a1:6f:4c:
fd:26:58:b6:6e:76:5a:e7:a6:23:88:1a:df:92:b4:a7:b3:0e:
6e:dc:5e:a3:19:51:b3:2a:e1:bc:d8:08:80:0c:01:48:80:42:
ec:2d:6a:2b:ab:3b:5b:b1:d9:de:3f:e8:14:84:60:00:f9:66:
31:c9:5b:56:41:a2:2f:e0:38:d5:e2:ab:64:37:80:64:52:fc:
8f:07:2f:99:98:2a:32:c3:d8:92:1a:36:3e:7e:99:8b:26:6f:
cd:b1:45:7e:e7:c6:b8:8a:4b:e9:45:d5:8f:4b:0f:79:d9:38:
60:7a:4b:1d:3c:c1:28:16:36:43:cf:8e:65:32:13:c6:eb:34:
d8:a5:88:7d:d2:99:2b:47:c3:12:08:52:35:5b:a1:67:ce:2c:
94:bb:f2:34:e7:5c:56:04:b5:53:09:58:5e:d2:dd:ea:67:8c:
fe:14:68:75:bb:35:20:a2:03:25:78:9a:da:ac:3c:18:18:72:
cb:29:a2:62:c3:ab:9c:35:3c:6f:ad:e5:83:44:0f:d5:9f:ca:
5d:8a:9c:77:0d:be:bd:95:43:26:53:8b:81:da:d8:b8:b0:3f:
e7:ba:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:27 2025 by rpki-client