Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kb9w57BB65ay_7DGdxcUiGV0w4I.roa
File: kb9w57BB65ay_7DGdxcUiGV0w4I.roa (raw, json)
Hash identifier: iKRHF5tzzhr+WifNrrghV6/0JsBHl2Jyg/A0rpD+XLI=
Subject key identifier: 91:BF:70:E7:B0:41:EB:96:B2:FF:B0:C6:77:17:14:88:65:74:C3:82
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B1BDA58DAE4D91288AEFEB8FCFF7D
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kb9w57BB65ay_7DGdxcUiGV0w4I.roa
Signing time: Sun 01 Jan 2023 13:35:11 +0000
ROA not before: Sun 01 Jan 2023 13:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209880
IP address blocks: 212.243.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:1b:da:58:da:e4:d9:12:88:ae:fe:b8:fc:ff:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91bf70e7b041eb96b2ffb0c6771714886574c382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:9f:33:41:b6:40:c6:ab:ac:f4:68:95:c0:
ec:2b:aa:f1:0b:49:3a:24:c4:97:c0:98:d1:be:44:
56:12:36:25:6c:4b:dd:d9:84:ff:ad:f4:8e:68:3f:
59:a3:c8:ac:68:f2:8d:26:1d:85:e1:a7:1b:fd:8f:
f1:68:4d:3e:69:98:0a:6b:1e:bb:de:4c:f4:35:63:
84:3d:5b:ec:4b:dc:df:8b:95:73:fb:b1:c0:8e:81:
3d:2c:7e:83:ae:04:57:d5:de:c4:4f:af:23:da:11:
21:77:e8:11:b4:6e:62:b5:2e:89:48:21:19:bf:c1:
42:f6:ec:19:ef:8e:89:a8:f6:75:85:5e:d5:fd:bb:
cc:ab:f5:d0:63:82:48:ed:2f:32:ad:f4:27:2f:10:
e8:c7:83:7e:71:b2:da:31:7e:80:68:4b:35:69:0e:
52:29:ba:66:f8:90:48:b8:97:73:3b:14:ca:4d:a5:
2d:4c:3f:29:cd:9d:32:3f:5e:e5:11:d4:e0:b8:17:
84:17:5e:7b:f4:0a:48:07:ad:3b:5b:07:a2:df:e8:
1d:bd:5e:2a:d4:43:5a:32:84:4d:ff:ea:82:35:d0:
43:df:3e:93:4b:57:51:95:1d:3d:22:ca:82:08:7b:
6b:0e:31:d3:8a:ef:15:38:cb:9e:f4:bb:6a:79:bb:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:70:E7:B0:41:EB:96:B2:FF:B0:C6:77:17:14:88:65:74:C3:82
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kb9w57BB65ay_7DGdxcUiGV0w4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.125.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e5:60:3a:db:89:31:7e:1c:a6:4e:53:c0:f1:14:98:2f:2c:
2e:19:04:34:cb:31:3d:e3:29:83:67:33:ca:26:5a:ae:a8:74:
05:84:33:b1:9d:33:0e:6e:15:25:2a:25:40:a4:71:bd:ea:b8:
bd:ff:e9:a4:1e:f1:0d:15:94:b3:76:12:67:e9:3b:e0:69:84:
0c:db:3e:b9:70:92:e7:87:ac:37:12:79:a3:a7:dd:02:c6:34:
f1:74:e9:05:5f:a5:c2:20:3d:8c:47:fb:b6:a5:75:31:3c:b4:
ee:cb:d1:5a:5e:7b:d6:6d:a3:c9:04:db:7b:b2:6f:0a:8d:bc:
4a:7c:1d:3c:19:b1:49:bd:32:ec:5c:d2:2c:61:02:94:df:ee:
da:96:a2:d0:43:ee:71:8c:4c:b0:b6:4f:ee:29:9f:bb:c8:67:
2e:15:0a:09:b7:5e:25:59:31:50:13:8f:a3:83:c2:e4:89:ac:
c4:4a:5c:98:e7:38:da:eb:8c:1b:1d:cd:32:fd:66:a6:28:76:
b7:f4:44:4f:e4:0d:59:57:94:02:4d:1b:4b:41:80:99:5e:79:
7c:f7:f9:4c:c7:13:d4:4d:32:22:d4:0a:3e:34:f6:60:e7:7d:
2c:5a:3f:e4:43:71:75:9d:32:0b:50:df:af:90:94:b0:38:d1:
77:2c:54:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtixvaWNrk2RKIrv64/P99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWJmNzBlN2IwNDFlYjk2YjJmZmIwYzY3NzE3MTQ4ODY1NzRjMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxqfM0G2QMarrPRolcDsK6rxC0k6
JMSXwJjRvkRWEjYlbEvd2YT/rfSOaD9Zo8isaPKNJh2F4acb/Y/xaE0+aZgKax67
3kz0NWOEPVvsS9zfi5Vz+7HAjoE9LH6DrgRX1d7ET68j2hEhd+gRtG5itS6JSCEZ
v8FC9uwZ746JqPZ1hV7V/bvMq/XQY4JI7S8yrfQnLxDox4N+cbLaMX6AaEs1aQ5S
Kbpm+JBIuJdzOxTKTaUtTD8pzZ0yP17lEdTguBeEF1579ApIB607Wwei3+gdvV4q
1ENaMoRN/+qCNdBD3z6TS1dRlR09IsqCCHtrDjHTiu8VOMue9Ltqebvg1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJG/cOewQeuWsv+wxncXFIhldMOCMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEva2I5dzU3QkI2NWF5XzdER2R4Y1VpR1YwdzRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN9MA0G
CSqGSIb3DQEBCwUAA4IBAQAm5WA624kxfhymTlPA8RSYLywuGQQ0yzE94ymDZzPK
JlquqHQFhDOxnTMObhUlKiVApHG96ri9/+mkHvENFZSzdhJn6TvgaYQM2z65cJLn
h6w3Enmjp90CxjTxdOkFX6XCID2MR/u2pXUxPLTuy9FaXnvWbaPJBNt7sm8KjbxK
fB08GbFJvTLsXNIsYQKU3+7alqLQQ+5xjEywtk/uKZ+7yGcuFQoJt14lWTFQE4+j
g8LkiazESlyY5zja64wbHc0y/WamKHa39ERP5A1ZV5QCTRtLQYCZXnl89/lMxxPU
TTIi1Ao+NPZg530sWj/kQ3F1nTILUN+vkJSwONF3LFTZ
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:43:36 2025 by rpki-client