Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/KfG19VOPYj2Ckp4Z0izUBrajCFE.roa
File: KfG19VOPYj2Ckp4Z0izUBrajCFE.roa (raw, json)
Hash identifier: UJTK6lh7TdNqCdxERPwQFmijyWpw5/WU7QHnWln7Xnw=
Subject key identifier: 29:F1:B5:F5:53:8F:62:3D:82:92:9E:19:D2:2C:D4:06:B6:A3:08:51
Certificate issuer: /CN=cbe2af2f0886c93c78281e5ad8642d96117d4cf9
Certificate serial: 0185727136BCF940BDE1CBD046C741D63D50
Authority key identifier: CB:E2:AF:2F:08:86:C9:3C:78:28:1E:5A:D8:64:2D:96:11:7D:4C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-KvLwiGyTx4KB5a2GQtlhF9TPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/KfG19VOPYj2Ckp4Z0izUBrajCFE.roa
Signing time: Mon 02 Jan 2023 12:25:00 +0000
ROA not before: Mon 02 Jan 2023 12:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211041
IP address blocks: 188.64.138.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:36:bc:f9:40:bd:e1:cb:d0:46:c7:41:d6:3d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe2af2f0886c93c78281e5ad8642d96117d4cf9
Validity
Not Before: Jan 2 12:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29f1b5f5538f623d82929e19d22cd406b6a30851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c4:0b:b0:ee:d8:94:c6:a6:16:58:d9:22:77:
16:4b:eb:e6:83:54:10:d6:47:78:42:97:02:ce:dd:
56:9b:57:fa:7a:43:62:ad:68:88:aa:f3:3a:e8:9c:
2f:98:39:1b:92:4a:fd:f0:ec:60:6c:f0:59:2a:a6:
b0:3f:08:1e:bc:77:34:f1:5e:a6:27:3b:47:52:ad:
ce:27:72:f3:13:5d:54:1c:8d:3e:a4:5c:d6:a2:ad:
d6:30:c5:ea:5c:c1:28:58:b7:01:ba:10:85:53:62:
88:dc:a2:40:ee:cb:37:a5:fd:d9:47:0b:3a:7a:4f:
bb:84:6d:4f:11:0b:96:dd:4b:4d:2b:0d:58:30:0b:
f7:77:98:f3:91:70:c3:9b:f1:ee:99:85:45:83:b9:
29:9b:b9:23:b6:5b:f6:89:fe:11:26:59:d9:b9:5c:
0c:84:26:98:a9:0e:22:f1:4c:c1:77:63:60:21:fb:
21:ba:b4:e0:24:b9:1a:66:ba:8f:ff:f1:ef:7a:27:
01:08:ad:1b:13:fb:00:86:da:07:fa:e6:cd:cb:c0:
27:7d:14:a6:e5:49:d6:57:f8:d2:f6:f4:ba:49:4a:
ba:f9:90:08:31:86:d4:a2:a9:91:7b:79:22:bc:90:
8d:60:9f:66:e5:68:3f:47:31:b2:71:b5:21:c0:ab:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:B5:F5:53:8F:62:3D:82:92:9E:19:D2:2C:D4:06:B6:A3:08:51
X509v3 Authority Key Identifier:
keyid:CB:E2:AF:2F:08:86:C9:3C:78:28:1E:5A:D8:64:2D:96:11:7D:4C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-KvLwiGyTx4KB5a2GQtlhF9TPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/KfG19VOPYj2Ckp4Z0izUBrajCFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e6bbb3-b09b-4a3e-a89f-0b3a9e124157/1/y-KvLwiGyTx4KB5a2GQtlhF9TPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.138.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0e:90:89:f9:68:31:4f:73:27:21:c1:1f:a0:d9:64:81:86:
de:9d:af:e6:87:bc:bf:fa:aa:ad:f8:bf:1a:2d:61:43:ae:59:
ad:78:17:51:8d:76:59:d3:a8:45:97:15:b2:28:8c:51:99:85:
3b:bf:80:12:e5:48:be:2b:15:dc:50:8a:8d:4a:6c:b6:be:8d:
44:ae:eb:b1:97:2a:c7:2e:c7:fc:76:2a:57:04:33:25:60:ff:
3c:f3:4a:2c:24:e0:a9:24:36:de:0b:66:0f:ca:1b:a3:d1:ec:
5d:e6:aa:f9:c6:95:dd:9d:ce:78:e0:da:dd:13:04:14:f9:35:
59:80:11:65:06:b4:f9:a2:c5:e9:3c:bf:9b:4e:f7:3e:24:7b:
39:fe:57:95:84:7b:91:d3:ea:d4:cd:4a:b4:cd:bb:a7:08:13:
84:1a:5c:4f:51:31:ea:d2:05:50:be:86:14:17:37:66:59:f1:
fa:5e:f1:fb:f9:10:a4:c5:56:52:69:53:b0:e9:09:f2:46:31:
e5:11:44:0d:0c:ad:b5:5b:b5:ad:60:eb:96:4a:9e:de:ec:b6:
6f:bb:f4:9a:4e:9d:b2:a6:a4:91:fc:d0:68:65:8d:92:3b:b8:
69:de:eb:3b:21:e2:1a:6b:ac:96:9d:a6:75:02:b0:b5:4d:da:
b7:0b:3f:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycTa8+UC94cvQRsdB1j1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTJhZjJmMDg4NmM5M2M3ODI4MWU1YWQ4NjQyZDk2MTE3
ZDRjZjkwHhcNMjMwMTAyMTIyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWYxYjVmNTUzOGY2MjNkODI5MjllMTlkMjJjZDQwNmI2YTMwODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMQLsO7YlMamFljZIncWS+vmg1QQ
1kd4QpcCzt1Wm1f6ekNirWiIqvM66JwvmDkbkkr98OxgbPBZKqawPwgevHc08V6m
JztHUq3OJ3LzE11UHI0+pFzWoq3WMMXqXMEoWLcBuhCFU2KI3KJA7ss3pf3ZRws6
ek+7hG1PEQuW3UtNKw1YMAv3d5jzkXDDm/HumYVFg7kpm7kjtlv2if4RJlnZuVwM
hCaYqQ4i8UzBd2NgIfshurTgJLkaZrqP//HveicBCK0bE/sAhtoH+ubNy8AnfRSm
5UnWV/jS9vS6SUq6+ZAIMYbUoqmRe3kivJCNYJ9m5Wg/RzGycbUhwKudfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCnxtfVTj2I9gpKeGdIs1Aa2owhRMB8GA1UdIwQY
MBaAFMviry8Ihsk8eCgeWthkLZYRfUz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1Ldkx3aUd5VHg0S0I1YTJHUXRsaEY5VFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNmJiYjMtYjA5Yi00YTNlLWE4OWYt
MGIzYTllMTI0MTU3LzEvS2ZHMTlWT1BZajJDa3A0WjBpelVCcmFqQ0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lNmJiYjMtYjA5Yi00YTNlLWE4OWYtMGIzYTllMTI0MTU3
LzEveS1Ldkx3aUd5VHg0S0I1YTJHUXRsaEY5VFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvECKMA0G
CSqGSIb3DQEBCwUAA4IBAQBCDpCJ+WgxT3MnIcEfoNlkgYbena/mh7y/+qqt+L8a
LWFDrlmteBdRjXZZ06hFlxWyKIxRmYU7v4AS5Ui+KxXcUIqNSmy2vo1EruuxlyrH
Lsf8dipXBDMlYP8880osJOCpJDbeC2YPyhuj0exd5qr5xpXdnc544NrdEwQU+TVZ
gBFlBrT5osXpPL+bTvc+JHs5/leVhHuR0+rUzUq0zbunCBOEGlxPUTHq0gVQvoYU
FzdmWfH6XvH7+RCkxVZSaVOw6QnyRjHlEUQNDK21W7WtYOuWSp7e7LZvu/SaTp2y
pqSR/NBoZY2SO7hp3us7IeIaa6yWnaZ1ArC1Tdq3Cz8y
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:00 2025 by rpki-client