Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/KzXRgGDo483fTk5-3EN_qh1kekQ.roa
File: KzXRgGDo483fTk5-3EN_qh1kekQ.roa (raw, json)
Hash identifier: L1hQw0eESnUebE1yf4gIsEbM9TgPAE3J+xoAxElPvH8=
Subject key identifier: 2B:35:D1:80:60:E8:E3:CD:DF:4E:4E:7E:DC:43:7F:AA:1D:64:7A:44
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0188B4A26C3164193ECE4396861030B648A8
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/KzXRgGDo483fTk5-3EN_qh1kekQ.roa
Signing time: Tue 13 Jun 2023 12:02:03 +0000
ROA not before: Tue 13 Jun 2023 12:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 37.128.248.0/23 maxlen: 23
37.128.252.0/23 maxlen: 23
37.128.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:a2:6c:31:64:19:3e:ce:43:96:86:10:30:b6:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 13 12:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b35d18060e8e3cddf4e4e7edc437faa1d647a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:f1:17:48:8d:76:6b:96:fa:47:62:17:9d:
51:02:c6:49:07:1e:08:ea:95:4d:81:39:de:15:af:
c4:84:fa:c3:20:f4:66:d7:7d:14:9a:8f:73:78:ca:
16:73:48:6f:0b:01:a1:97:37:a2:ee:65:5a:83:45:
9c:d9:07:96:ef:8a:64:55:9c:51:09:a3:c9:0d:4b:
39:0f:e3:06:46:c9:9b:dc:55:e0:32:73:21:43:98:
18:4b:53:fe:c1:cc:9e:d9:79:64:42:71:dd:3e:48:
bf:76:22:b7:be:20:18:ae:50:a2:46:a5:d2:89:1a:
41:ef:c1:20:c6:c7:6e:c8:d6:b3:54:81:b9:7a:05:
aa:89:3b:19:6f:2f:cc:aa:43:5a:81:25:35:f0:dc:
99:ea:64:70:cc:b0:3e:3f:19:8b:ad:aa:9d:9e:db:
ca:cd:09:0b:6d:07:fa:f8:10:bb:df:fa:cf:e3:89:
69:aa:51:74:7b:19:5c:a5:4d:88:5b:c1:da:63:38:
8f:c2:7b:2a:9d:94:7a:30:93:48:79:2c:bd:9f:a4:
50:a9:8a:89:67:d8:df:f2:ec:75:c6:1c:a5:90:e6:
a9:4b:a7:50:1f:76:f9:ff:52:47:96:79:d5:1d:a2:
07:8b:c8:84:b9:37:e0:70:60:94:82:c2:6f:5f:f0:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:D1:80:60:E8:E3:CD:DF:4E:4E:7E:DC:43:7F:AA:1D:64:7A:44
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/KzXRgGDo483fTk5-3EN_qh1kekQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
37.128.252.0/22
Signature Algorithm: sha256WithRSAEncryption
af:21:f8:2f:b7:84:27:d7:13:93:c4:b4:30:fc:9d:cd:69:5f:
19:ae:7f:b9:b7:fe:6b:8e:69:0c:b8:a3:ca:68:0e:82:2e:6f:
67:fe:6b:c8:be:b4:38:2b:12:2f:b3:11:12:2f:6b:12:a9:81:
d5:66:7b:2c:13:1e:b1:be:7c:71:b0:84:52:2b:1d:f6:bd:11:
e2:f3:2d:76:f6:de:6f:a3:19:ef:03:c2:54:b3:88:f4:4e:a9:
72:79:72:01:d6:22:2c:46:19:51:a6:e5:ec:83:3b:39:7c:cf:
48:51:b1:c6:00:97:b4:03:b9:06:0f:a2:60:7d:2a:0d:19:a1:
36:86:28:b3:91:c3:1f:b3:34:23:5f:6a:a6:7a:e1:90:22:87:
24:de:49:f6:f9:c0:1d:ba:9a:ad:d2:8d:98:ba:0a:86:23:51:
b8:7c:21:4d:d9:43:f5:6e:cb:1d:13:4e:52:2c:db:f0:26:0b:
98:30:9b:ef:b6:a8:a0:80:1d:9f:29:31:e7:d8:18:b5:66:6c:
68:10:e6:e0:5e:c8:d6:97:11:62:d0:fe:c6:3a:18:b2:2a:f5:
a8:0f:53:f2:db:8b:67:a3:45:3d:6d:65:70:e8:b9:9b:37:25:
0d:25:ae:5a:cc:0f:a7:75:d9:a7:94:7f:93:7f:a8:15:f6:fb:
37:ff:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:55 2025 by rpki-client