Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KPRx-zHBcW4tTYDtUqpBNIMVDNQ.roa
File: KPRx-zHBcW4tTYDtUqpBNIMVDNQ.roa (raw, json)
Hash identifier: DmF8p+kfexNj7pExho2E5KC970TrYqAB1itWh6AC5kg=
Subject key identifier: 28:F4:71:FB:31:C1:71:6E:2D:4D:80:ED:52:AA:41:34:83:15:0C:D4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746ACB35380E82CD2A5068637D98587
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KPRx-zHBcW4tTYDtUqpBNIMVDNQ.roa
Signing time: Thu 02 Jan 2025 13:48:50 +0000
ROA not before: Thu 02 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206375
IP address blocks: 78.135.91.0/24 maxlen: 24
78.135.94.0/24 maxlen: 24
78.135.95.0/24 maxlen: 24
188.132.132.0/24 maxlen: 24
188.132.133.0/24 maxlen: 24
188.132.136.0/24 maxlen: 24
188.132.137.0/24 maxlen: 24
188.132.138.0/24 maxlen: 24
188.132.139.0/24 maxlen: 24
188.132.140.0/24 maxlen: 24
188.132.143.0/24 maxlen: 24
188.132.144.0/24 maxlen: 24
188.132.145.0/24 maxlen: 24
188.132.162.0/24 maxlen: 24
188.132.247.0/24 maxlen: 24
188.132.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ac:b3:53:80:e8:2c:d2:a5:06:86:37:d9:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28f471fb31c1716e2d4d80ed52aa413483150cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:e6:34:71:2e:1a:7c:fb:38:e5:a7:60:88:
80:a9:d5:bc:6d:37:9d:9b:e8:ea:4b:f6:a8:a8:fa:
88:93:13:dd:95:4b:49:68:8d:db:75:89:74:4b:7b:
e9:f2:01:c1:33:1d:bc:e3:b0:95:48:31:6e:38:f9:
b5:52:48:a7:49:d2:5e:33:7b:60:14:2d:dc:44:dd:
da:db:93:02:cc:fc:67:58:bb:12:f1:ac:6d:e3:3d:
8e:0d:3c:f9:d7:95:74:47:c0:40:cf:72:cf:05:a5:
31:bc:60:c0:d0:6b:91:f9:06:51:ec:d1:d1:c2:b5:
bc:4d:19:43:02:81:d2:41:9b:9b:d0:7e:77:54:3b:
a0:de:78:a6:a1:77:e8:41:04:e8:3e:03:3f:33:2b:
9c:21:cb:40:f5:78:f0:ef:f4:85:f8:df:f0:a2:6a:
fd:cb:35:25:0d:f3:21:ee:c6:75:56:2e:f9:3d:e6:
46:05:e8:dc:33:50:73:7d:67:99:e5:f6:fe:e6:ab:
6e:a3:fa:b3:ca:1f:86:98:5e:ed:5c:b0:38:54:c3:
03:0a:24:54:93:d3:30:68:f3:f6:aa:cb:ac:56:4a:
53:18:38:e1:c2:1a:6a:06:82:18:4e:a5:73:bf:2b:
80:35:cf:58:95:35:b0:2c:39:06:a3:e0:37:52:06:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:71:FB:31:C1:71:6E:2D:4D:80:ED:52:AA:41:34:83:15:0C:D4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/KPRx-zHBcW4tTYDtUqpBNIMVDNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.91.0/24
78.135.94.0/23
188.132.132.0/23
188.132.136.0-188.132.140.255
188.132.143.0-188.132.145.255
188.132.162.0/24
188.132.247.0-188.132.248.255
Signature Algorithm: sha256WithRSAEncryption
82:8c:51:fe:30:d5:dc:b6:d4:03:13:f5:b6:33:0d:34:df:e4:
b5:1c:b4:2b:cb:1e:c1:54:07:38:ae:ed:44:ad:ed:f5:36:56:
9f:65:6d:cb:91:a9:86:06:98:eb:30:06:ae:e1:8c:85:88:08:
17:8a:ae:76:69:2b:03:18:9f:da:0b:7f:4d:35:dd:ae:d0:aa:
01:19:2d:7e:65:89:6b:89:c6:a6:2d:b1:39:bc:43:77:be:7b:
6f:c2:1d:93:18:7d:6e:8b:6f:3f:08:a8:9d:58:02:7e:d0:b0:
3c:e8:05:b7:8f:dd:d4:a9:72:7e:59:8e:13:ff:0a:23:7c:4a:
6e:71:76:a5:64:4c:f6:62:2e:78:bd:d6:95:6f:74:91:0b:18:
71:3f:f7:01:f7:3b:78:09:1b:32:1b:a7:bd:29:11:20:48:90:
a8:fa:31:18:c5:d5:6b:78:1d:db:cb:f5:9c:7a:69:11:21:91:
19:3b:56:cb:a1:26:39:2b:0d:90:6e:20:5a:de:d5:7b:9d:96:
bb:41:11:fc:7e:d1:61:b9:27:73:f3:1b:4a:67:9a:3c:1c:e8:
d9:5e:1a:46:34:3f:f2:7b:ea:da:1c:16:5a:53:63:43:80:ad:
4e:c2:50:5a:16:e8:b7:ea:9c:ad:de:f5:b2:54:c5:04:d1:ca:
19:47:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:19 2025 by rpki-client