Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kxxUuxOvVgCLtu5xp4EW-iwAZ58.roa
File: kxxUuxOvVgCLtu5xp4EW-iwAZ58.roa (raw, json)
Hash identifier: 4PmvDdbrMbVz1uq3lcHkXNJEew4GO8/Xc9gHeC5v/mQ=
Subject key identifier: 93:1C:54:BB:13:AF:56:00:8B:B6:EE:71:A7:81:16:FA:2C:00:67:9F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0195C8201DF3BA9D5679920033785D537591
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kxxUuxOvVgCLtu5xp4EW-iwAZ58.roa
Signing time: Mon 24 Mar 2025 12:28:22 +0000
ROA not before: Mon 24 Mar 2025 12:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204868
IP address blocks: 2.59.204.0/22 maxlen: 24
5.253.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:20:1d:f3:ba:9d:56:79:92:00:33:78:5d:53:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 24 12:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=931c54bb13af56008bb6ee71a78116fa2c00679f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:7f:2a:5e:6b:26:c2:fc:28:fc:18:09:cd:
c9:f5:7c:44:e4:54:a9:a9:01:81:d5:f1:f4:a6:56:
88:59:0e:db:98:40:fc:02:ca:c4:b3:90:c9:f2:2b:
0d:fa:cd:2e:82:bb:e3:58:79:7d:6f:36:42:a7:2c:
91:18:ea:d3:1f:e0:fd:05:1a:a3:14:f0:fe:de:60:
d1:ee:cd:1a:86:08:24:be:27:55:97:46:2d:1b:bd:
34:ae:4e:e5:48:f4:d0:21:50:08:4a:dd:78:fb:4e:
5a:cd:2d:cd:f5:60:b5:ed:a4:93:00:01:5b:3e:42:
33:cc:64:63:95:68:92:de:73:7b:7c:9b:f6:0c:50:
88:d5:6e:fb:f4:89:60:11:62:84:40:df:05:2a:3b:
2b:da:00:e1:af:69:a2:39:d2:1c:d2:56:ed:de:d9:
47:5c:ad:49:6b:77:72:ae:da:80:37:2a:0e:9c:e4:
2d:ff:d4:7d:77:9f:3e:e9:f3:79:4f:90:6c:76:7a:
ee:ca:47:0a:09:d0:fe:a7:dc:f4:36:bf:bd:7e:4a:
97:b0:34:82:0e:1a:e7:a6:1c:66:3d:52:19:2e:ec:
0a:ee:c8:8c:93:b6:48:e6:a8:ac:65:c9:13:ce:8d:
6f:8d:12:6f:74:3e:59:6f:1a:b1:95:cd:78:a5:a6:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1C:54:BB:13:AF:56:00:8B:B6:EE:71:A7:81:16:FA:2C:00:67:9F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/kxxUuxOvVgCLtu5xp4EW-iwAZ58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.204.0/22
5.253.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:43:95:9a:69:73:f7:4d:6c:b6:35:fb:29:1e:74:d3:be:84:
8e:8d:5a:b1:2f:77:15:62:33:64:f1:15:50:cb:0d:9d:c1:a3:
b5:74:4d:21:3b:dc:b4:d8:ef:90:bf:a9:a5:aa:cc:bf:25:03:
13:ad:00:e3:1b:58:5d:4f:d2:f3:b6:78:f4:4f:d0:82:6c:03:
a4:3d:2d:0b:81:8c:7f:a5:cf:9b:76:ee:2a:0a:82:fa:02:c6:
36:67:60:c2:a0:0c:a8:64:18:b9:68:c4:27:74:b1:59:8a:46:
52:13:c1:4a:84:45:ff:5c:ef:92:13:0e:f7:4f:c5:6c:fc:1a:
23:11:ee:c1:f3:aa:04:78:59:80:14:f8:08:86:a8:63:e4:9e:
42:ce:c5:28:ca:f9:1f:69:ae:9c:5d:ad:41:b2:30:13:73:50:
3c:89:81:60:1b:82:f0:20:4a:0e:a6:38:c9:fe:88:b6:e1:25:
a3:23:01:ed:10:32:17:80:5c:63:fa:a8:4b:0d:b7:be:86:9c:
2b:ef:45:b5:8b:5a:ce:e0:91:dd:f8:2d:27:1d:22:90:a7:9b:
b2:c9:b4:4c:c0:90:d8:11:d6:9c:4f:80:5f:93:cd:26:00:f5:
49:10:2d:ed:c6:09:1a:ef:01:5e:52:69:d2:b4:a9:5a:1b:a1:
ad:65:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:06 2025 by rpki-client