Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/ZjCHU3LEGq34M383f_KumGN_eB4.roa
File: ZjCHU3LEGq34M383f_KumGN_eB4.roa (raw, json)
Hash identifier: YxlGAgs8g3hAPxhoH9iP3cLnbEfE9zXQU/84spENz30=
Subject key identifier: 66:30:87:53:72:C4:1A:AD:F8:33:7F:37:7F:F2:AE:98:63:7F:78:1E
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 0194228DC0A743C378BF1144E3D24123BA64
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/ZjCHU3LEGq34M383f_KumGN_eB4.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 217.64.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c0:a7:43:c3:78:bf:11:44:e3:d2:41:23:ba:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6630875372c41aadf8337f377ff2ae98637f781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:48:c2:19:b2:0e:d9:e9:f8:ea:77:d4:ba:
38:ec:b7:1e:b7:e9:f0:80:2f:92:3a:df:f8:96:3c:
ce:05:3d:7c:27:62:5f:bd:55:cf:82:9b:8d:e4:78:
e2:ac:e1:d4:d6:f0:b3:f5:b5:bf:d5:18:5a:0b:73:
0c:8e:41:63:d4:5d:da:fd:80:1b:8a:13:0a:df:76:
1b:03:61:f0:b2:e6:cf:30:eb:f0:c8:cd:6d:38:fe:
03:a2:d7:6a:2b:97:bc:c4:cb:2b:17:7a:a0:e7:35:
65:a4:18:31:d8:7c:46:24:5f:37:f6:ab:03:7e:c3:
a0:97:93:6b:70:80:a4:ff:43:77:69:3b:e4:f9:89:
9e:84:f4:7b:93:ba:d1:de:42:0d:4b:e3:2a:ae:31:
47:8c:da:5b:5b:97:54:47:0b:1b:a3:33:e3:f3:c5:
54:17:26:55:29:b6:0c:d4:b9:c1:8a:1b:f7:cd:ea:
1f:eb:d1:d7:43:6b:ad:7d:c5:61:9a:9b:15:38:e9:
d2:88:e4:c0:6c:e3:ba:b4:29:5e:0f:74:fe:88:c0:
57:ee:78:8d:e9:ac:df:f0:98:31:4f:62:f5:fb:2a:
8d:70:cf:0d:55:db:48:bb:0b:ba:e5:3d:8e:d2:1b:
98:66:39:6e:c3:48:f1:1b:cc:61:4f:48:78:07:60:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:87:53:72:C4:1A:AD:F8:33:7F:37:7F:F2:AE:98:63:7F:78:1E
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/ZjCHU3LEGq34M383f_KumGN_eB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.64.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:76:cc:22:30:3f:bc:c4:48:33:05:a6:02:1c:bf:f8:e0:48:
8d:ff:82:c1:52:30:93:a9:48:91:ae:5e:08:f0:20:5b:e9:75:
e9:43:d4:04:fd:de:e9:86:49:4c:33:34:bb:01:ca:8e:e3:0e:
ab:87:ba:20:ac:58:fa:33:5e:99:89:61:3b:3c:8e:6d:17:25:
2e:d9:37:a8:4b:68:d8:9b:90:a9:c0:96:1a:76:1d:b0:2f:d1:
73:11:d1:69:56:62:c2:41:71:51:d9:ab:78:67:f9:cd:a7:27:
68:69:87:f4:84:7b:06:76:25:d7:b6:7e:18:6a:3e:26:92:e1:
85:13:d3:00:1c:4c:8c:c0:72:f6:89:1a:f0:fe:d1:6a:a9:f1:
a6:34:4c:55:2d:c1:a4:3d:35:66:b9:23:d6:59:2e:a2:c0:ca:
b6:3d:36:2d:0c:0f:31:4e:4a:1e:37:9a:e8:8a:5e:e0:76:38:
58:ac:4c:17:c1:1b:98:ab:c7:fe:dd:b8:30:a1:ab:89:24:fd:
2a:a2:b1:3b:1d:2f:6c:59:36:e6:54:30:25:b6:eb:e7:b7:ee:
b6:4e:16:6f:33:66:15:8a:5b:bb:76:7c:18:12:9e:36:fa:30:
1f:73:a9:77:73:dc:e7:9b:5c:70:ab:34:fb:7f:d6:e7:13:5f:
d8:96:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:55 2025 by rpki-client