Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KelEsxB1dkNkC12mV396NtS4vb8.roa
File: KelEsxB1dkNkC12mV396NtS4vb8.roa (raw, json)
Hash identifier: +9dQQRNrMfkX77DLTHHOjDT/W5bFGZO5zX1dt8wfq6o=
Subject key identifier: 29:E9:44:B3:10:75:76:43:64:0B:5D:A6:57:7F:7A:36:D4:B8:BD:BF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1FAD14FE7CC5E7079106C8DE8F5D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KelEsxB1dkNkC12mV396NtS4vb8.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41087
IP address blocks: 85.120.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1f:ad:14:fe:7c:c5:e7:07:91:06:c8:de:8f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29e944b310757643640b5da6577f7a36d4b8bdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:e2:a5:b2:a0:d2:35:78:56:e8:7d:59:42:
20:98:70:05:fb:e2:03:82:e9:60:ef:35:99:b3:0e:
5d:df:cf:db:54:88:b6:b1:7d:1f:21:75:a2:04:fb:
98:d8:83:cb:17:14:86:29:dc:22:37:99:36:67:cd:
c6:94:20:69:7d:b5:06:51:3d:84:c9:39:0e:c4:69:
ef:e6:0a:39:56:d0:a9:90:47:95:83:f6:97:54:f9:
52:6f:21:86:c2:7e:44:69:3f:45:78:44:0e:88:bd:
5c:64:64:b0:b9:51:e9:47:7d:fd:e9:be:d9:90:a9:
5c:05:f0:2f:bb:92:4e:4d:ca:b1:c7:83:96:5e:57:
46:f1:a4:99:62:7c:a6:23:5c:77:2c:c3:4f:88:73:
18:ce:40:b7:3b:8c:5a:0a:d8:d6:9c:18:21:fb:db:
54:9b:ef:7c:16:71:76:f9:89:2f:1d:3e:5c:9d:87:
b3:56:9e:7f:e3:21:2f:39:ad:30:2f:ca:67:b7:42:
6f:16:99:99:5e:ff:d3:26:3a:ee:f4:0d:ee:85:a2:
2a:cb:2b:75:8c:ab:c5:4b:99:b2:ae:e0:31:ce:8b:
8b:77:18:ad:85:76:8c:6f:fd:dd:f0:1e:30:55:f1:
4e:43:b6:ab:58:0a:d4:99:c9:fd:d0:51:4c:bc:9c:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E9:44:B3:10:75:76:43:64:0B:5D:A6:57:7F:7A:36:D4:B8:BD:BF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/KelEsxB1dkNkC12mV396NtS4vb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b6:b3:20:33:1d:42:5d:da:aa:90:61:1e:e2:2f:ca:1f:f7:
51:71:88:c4:20:3e:7c:89:25:59:31:dd:2e:4f:36:30:0a:88:
aa:b9:d7:53:89:03:93:84:a3:08:30:74:30:28:67:49:a5:c5:
58:4c:36:c4:12:14:f9:ba:26:dd:88:aa:f6:0a:68:e9:5f:88:
1a:eb:e7:6b:da:c3:97:a4:d7:ec:95:b6:28:ec:7e:d6:82:e9:
6a:ec:84:3b:cc:49:c7:8a:5d:61:e1:5a:1d:db:f6:1c:b2:89:
2e:60:79:62:0b:67:77:91:79:ef:0e:48:bf:52:18:50:ab:18:
91:b6:0e:08:d2:de:39:4e:9a:d0:1d:d8:90:15:4e:de:78:af:
58:6e:ac:5f:f2:aa:0a:f7:5c:af:e0:46:3d:31:57:12:a4:03:
dc:05:f7:0e:36:56:9c:8c:3e:05:f3:f2:66:f2:ac:9d:80:a9:
54:3e:d7:52:1c:a8:b5:a6:90:9c:ff:3d:1f:b0:2e:e7:9b:5e:
ed:aa:e5:93:a9:bd:b9:11:da:4f:de:fa:95:0e:93:d3:ce:bf:
10:3f:b8:b3:d0:fa:a8:be:15:5f:61:67:80:ae:e8:ba:94:2b:
32:ac:58:59:43:3d:ec:13:fd:7e:41:46:be:aa:a5:3e:72:7d:
71:df:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:08:51 2025 by rpki-client