Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/Ta4hIZ734d2rJw8hT17cD7g_kik.roa
File: Ta4hIZ734d2rJw8hT17cD7g_kik.roa (raw, json)
Hash identifier: RJIxNDytWmVrHBXlLdvrmogN7cdVqJbhlmkX/wgegao=
Subject key identifier: 4D:AE:21:21:9E:F7:E1:DD:AB:27:0F:21:4F:5E:DC:0F:B8:3F:92:29
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 07DF5A08
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/Ta4hIZ734d2rJw8hT17cD7g_kik.roa
Signing time: Sat 01 Jan 2022 01:55:50 +0000
ROA not before: Sat 01 Jan 2022 01:55:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202297
IP address blocks: 45.139.224.0/22 maxlen: 24
2001:678:aa8::/48 maxlen: 48
2001:678:aa4::/48 maxlen: 48
2a04:ff07::/32 maxlen: 48
2a04:ff00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132078088 (0x7df5a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 1 01:55:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dae21219ef7e1ddab270f214f5edc0fb83f9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:29:c1:3e:8f:74:04:92:43:c7:1b:c1:ee:
e0:3e:ae:a9:90:36:2e:2c:51:3d:f0:bc:13:c8:19:
8b:59:d3:e1:63:13:bd:27:0a:13:a2:37:50:6d:77:
17:9e:fd:a5:68:7b:d1:d2:85:f8:9d:7d:7a:99:9e:
34:4f:da:a7:ce:d1:30:d4:81:92:e6:08:86:f7:c8:
5e:08:d2:fc:e8:a5:98:b3:d5:60:f7:5e:f1:bb:ad:
d6:44:69:d6:ff:29:15:f3:13:ea:3e:23:8d:42:32:
31:a1:0f:38:44:a4:5d:7b:18:ac:8a:06:46:bf:b9:
8c:96:b6:23:17:67:ab:92:5b:ce:17:ba:ad:bc:df:
26:b7:3d:c3:39:e4:03:cf:40:8b:aa:95:cb:26:fd:
73:64:72:ed:6c:a7:ed:16:ec:c5:1d:4c:8f:07:89:
bf:6c:3f:28:30:10:07:39:87:ea:62:34:ce:8d:db:
a4:af:3d:66:4f:76:b6:02:ab:cb:98:c7:5b:06:d8:
85:d2:e7:64:e0:23:87:79:2a:d7:df:00:cb:7f:3b:
57:f8:91:9e:09:37:1c:ac:d5:7f:6d:13:89:78:c5:
c5:03:6f:91:7f:61:08:6e:7b:8d:99:ee:00:08:df:
40:4f:e3:d8:90:60:0f:68:71:f5:c0:65:c3:78:bf:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:21:21:9E:F7:E1:DD:AB:27:0F:21:4F:5E:DC:0F:B8:3F:92:29
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/Ta4hIZ734d2rJw8hT17cD7g_kik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.224.0/22
IPv6:
2001:678:aa4::/48
2001:678:aa8::/48
2a04:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
12:ea:a3:88:ec:69:43:f3:66:bf:c0:83:1e:ae:b7:a8:cd:52:
ac:ec:a7:96:d3:a1:a5:fb:aa:c3:e1:38:da:5c:07:03:7f:d9:
a6:7d:5f:8c:6a:fd:60:9c:2d:4e:6a:0b:04:c0:7b:84:25:42:
b5:58:71:83:ff:44:39:50:dc:7f:51:52:12:4a:2b:59:c0:ff:
39:02:72:2f:18:45:5f:59:89:59:3c:5b:c4:1e:c8:d9:e9:c3:
3b:a2:99:46:5e:14:ee:eb:85:bc:85:ca:f3:98:8d:24:30:d3:
da:03:bb:33:16:70:2e:23:72:75:32:f5:25:23:16:44:40:16:
e5:8c:0c:ce:6a:8c:d3:5b:cb:c9:5d:95:9f:cb:0e:39:42:8d:
f1:d0:a9:14:3a:b9:87:77:72:4a:da:20:7d:f7:63:aa:b5:6a:
41:28:ab:93:f1:d2:57:64:3b:24:b7:a9:20:76:94:4b:9d:a7:
77:3d:f2:2d:3b:66:c1:f6:1b:04:04:36:f7:8f:1c:5b:22:3e:
e2:33:82:e6:7b:e6:2a:0c:ff:d4:08:dc:ea:d8:3e:28:1a:cd:
17:79:5a:93:69:1e:33:6c:a0:ef:e3:8b:5b:6e:30:5f:ae:bc:
55:6e:7c:d8:2d:13:50:01:27:23:98:8d:61:eb:1f:4b:77:51:
56:43:af:84
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEB99aCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA0YzI1YzJmOGI0N2U1ZGFmNTJkMWM0YzVhNTA5OTlkZDBhMGE5MB4XDTIyMDEw
MTAxNTU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGRhZTIxMjE5ZWY3
ZTFkZGFiMjcwZjIxNGY1ZWRjMGZiODNmOTIyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTjKcE+j3QEkkPHG8Hu4D6uqZA2LixRPfC8E8gZi1nT4WMT
vScKE6I3UG13F579pWh70dKF+J19epmeNE/ap87RMNSBkuYIhvfIXgjS/OilmLPV
YPde8but1kRp1v8pFfMT6j4jjUIyMaEPOESkXXsYrIoGRr+5jJa2Ixdnq5Jbzhe6
rbzfJrc9wznkA89Ai6qVyyb9c2Ry7Wyn7RbsxR1MjweJv2w/KDAQBzmH6mI0zo3b
pK89Zk92tgKry5jHWwbYhdLnZOAjh3kq198Ay387V/iRngk3HKzVf20TiXjFxQNv
kX9hCG57jZnuAAjfQE/j2JBgD2hx9cBlw3i/TZkCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBRNriEhnvfh3asnDyFPXtwPuD+SKTAfBgNVHSMEGDAWgBR9BMJcL4tH5dr1
LRxMWlCZndCgqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRVENYQy1MUi1YYTlTMGNURnBRbVozUW9Lay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvOTcxY2M0LTU0ZDUtNGMyOC1hMWMzLWU2M2U5NGNiYTA5Zi8x
L1RhNGhJWjczNGQyckp3OGhUMTdjRDdnX2tpay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
OTcxY2M0LTU0ZDUtNGMyOC1hMWMzLWU2M2U5NGNiYTA5Zi8xL2ZRVENYQy1MUi1Y
YTlTMGNURnBRbVozUW9Lay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wDAQCAAEwBgMEAi2L4DAfBAIAAjAZAwcAIAEGeAqk
AwcAIAEGeAqoAwUDKgT/ADANBgkqhkiG9w0BAQsFAAOCAQEAEuqjiOxpQ/Nmv8CD
Hq63qM1SrOynltOhpfuqw+E42lwHA3/Zpn1fjGr9YJwtTmoLBMB7hCVCtVhxg/9E
OVDcf1FSEkorWcD/OQJyLxhFX1mJWTxbxB7I2enDO6KZRl4U7uuFvIXK85iNJDDT
2gO7MxZwLiNydTL1JSMWREAW5YwMzmqM01vLyV2Vn8sOOUKN8dCpFDq5h3dyStog
ffdjqrVqQSirk/HSV2Q7JLepIHaUS52ndz3yLTtmwfYbBAQ2948cWyI+4jOC5nvm
Kgz/1Ajc6tg+KBrNF3lak2keM2yg7+OLW24wX668VW582C0TUAEnI5iNYesfS3dR
VkOvhA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:14 2025 by rpki-client