Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KjfC69lpz8PqUxjW_sseqPVFknE.roa
File: KjfC69lpz8PqUxjW_sseqPVFknE.roa (raw, json)
Hash identifier: FIuKbBfxoB6fWBsCtu09jvp2QYqalPi/H3Kgng/xiu8=
Subject key identifier: 2A:37:C2:EB:D9:69:CF:C3:EA:53:18:D6:FE:CB:1E:A8:F5:45:92:71
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019391F4F4B8B8A18041093EBC8B3CF87D5B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KjfC69lpz8PqUxjW_sseqPVFknE.roa
Signing time: Wed 04 Dec 2024 13:56:09 +0000
ROA not before: Wed 04 Dec 2024 13:56:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29262
IP address blocks: 46.29.24.0/24 maxlen: 24
46.29.25.0/24 maxlen: 24
46.29.26.0/24 maxlen: 24
46.29.27.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.87.24.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:f4:f4:b8:b8:a1:80:41:09:3e:bc:8b:3c:f8:7d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Dec 4 13:56:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a37c2ebd969cfc3ea5318d6fecb1ea8f5459271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:bd:47:2b:77:5e:c4:23:52:9a:72:78:5e:
2e:13:31:c9:be:de:a0:32:dc:48:17:85:3f:df:6c:
97:66:17:53:81:20:f5:8a:95:e8:e0:fc:0e:4e:08:
65:84:06:35:17:09:22:e1:81:57:42:96:0c:a3:40:
75:4c:ae:50:55:c4:02:4c:64:6a:58:74:50:d8:0b:
3b:4f:de:70:8a:b1:5b:14:e5:20:9f:f5:d8:ed:6a:
d2:21:d8:54:f8:72:66:ee:74:2d:d0:45:e5:0e:56:
df:db:6f:2c:9e:f4:0a:40:b5:a7:2f:4d:aa:74:ec:
0f:3c:a4:8e:21:17:f0:a9:5f:65:e2:39:e2:09:59:
f8:17:39:9b:8f:8a:e0:ed:ce:1b:dc:70:de:5e:3d:
a1:29:4a:46:01:84:46:8f:39:08:21:be:e3:69:06:
02:7f:5f:ee:37:e3:6e:eb:f7:8a:12:41:cc:b9:5c:
5b:8b:7b:26:42:ce:bc:68:90:1f:0f:81:55:89:54:
68:0d:6f:5c:d7:88:db:f3:91:65:db:cb:43:65:d7:
24:b3:8b:00:49:9a:09:bc:d2:4f:96:21:38:79:cb:
a6:8a:4f:ea:11:3e:39:72:96:6f:cc:da:d6:a0:d5:
0f:5d:d8:b3:08:40:21:a6:ef:35:8a:a8:03:fc:ba:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:37:C2:EB:D9:69:CF:C3:EA:53:18:D6:FE:CB:1E:A8:F5:45:92:71
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/KjfC69lpz8PqUxjW_sseqPVFknE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/22
185.85.189.0-185.85.191.255
185.85.237.0-185.85.239.255
185.86.5.0/24
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/23
185.87.121.0-185.87.123.255
185.98.60.0/24
185.119.80.0/22
185.141.32.0/24
IPv6:
2a0b:6780::/29
2a0c:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:8b:8f:ce:ae:20:7e:5c:6f:1b:62:e0:98:68:e2:a5:55:e6:
fb:ba:2a:88:1a:3c:5f:54:79:3f:24:31:82:21:41:32:bd:74:
2d:61:dc:5e:00:c0:d1:ea:c4:f9:15:8f:9e:ac:af:eb:25:b6:
54:74:06:c5:b6:1e:ad:64:54:dc:4b:f2:63:85:20:a6:7f:75:
f5:f7:2d:8e:29:6e:fa:e4:8a:50:48:d5:a9:03:70:21:37:a0:
aa:8f:af:ba:fd:4f:93:78:0d:0f:b7:e0:f7:e4:50:57:7d:8d:
93:02:e0:a5:1c:15:2d:41:e4:22:83:e0:e0:ff:b4:65:36:01:
2f:29:ff:24:c0:f9:77:3a:d2:2b:03:5e:c9:f0:51:41:44:6a:
03:6e:6f:78:ba:41:35:6a:98:99:f2:a3:74:1a:a3:e6:1b:7a:
e5:f9:c5:fd:c2:38:7f:bd:67:fd:80:36:59:58:6e:96:b9:ce:
83:46:08:f8:59:6c:11:31:e1:f4:e4:e9:77:78:35:38:eb:64:
83:46:e8:6c:1e:41:f5:8a:61:b3:78:76:90:3d:34:7d:98:c5:
ec:85:58:ca:5d:90:e0:89:b0:ef:e2:15:97:35:2a:4f:2c:53:
88:3a:40:7d:a3:94:b3:2b:45:5c:2b:3f:74:11:2b:86:0a:5f:
77:a6:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:35 2025 by rpki-client