Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/KtiXWUU4RAVMVnPjJRK8JnkRuGk.roa
File: KtiXWUU4RAVMVnPjJRK8JnkRuGk.roa (raw, json)
Hash identifier: mRV9q5EG/tG8l92ttY6CqZtj1ZqOrEgQhz/WcLjNkww=
Subject key identifier: 2A:D8:97:59:45:38:44:05:4C:56:73:E3:25:12:BC:26:79:11:B8:69
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 01838FF39351A88BFC8C17D3F4BFFA34E679
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/KtiXWUU4RAVMVnPjJRK8JnkRuGk.roa
Signing time: Fri 30 Sep 2022 19:50:48 +0000
ROA not before: Fri 30 Sep 2022 19:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202949
IP address blocks: 185.174.58.0/24 maxlen: 24
185.174.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8f:f3:93:51:a8:8b:fc:8c:17:d3:f4:bf:fa:34:e6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Sep 30 19:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ad89759453844054c5673e32512bc267911b869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:a3:95:ab:65:d0:2c:34:c2:ba:a6:8a:ef:
36:87:12:0d:36:37:db:5c:eb:6b:ee:68:36:21:67:
9d:a5:b5:9d:05:01:39:d3:8a:c4:ae:14:8f:1b:1e:
0e:3d:50:e1:30:8d:13:f7:d1:73:5e:31:b9:92:44:
32:3e:b4:0d:99:a3:6c:4c:b1:c5:3c:8e:51:57:ee:
31:c8:07:12:3d:86:be:ac:8b:fe:0c:1a:0e:ee:d0:
91:ef:87:84:ab:75:dc:ff:6c:50:a9:2c:63:75:8f:
0d:be:70:af:e9:fe:60:90:63:56:9d:e1:a7:37:f9:
16:b6:be:8d:7a:2f:2c:d3:09:7b:93:93:cc:ca:2f:
54:e4:5f:e8:b2:0a:ae:43:5f:4b:7d:e7:7d:22:dd:
ae:63:c2:f4:58:78:bc:d8:ce:b8:08:d7:bc:32:e9:
66:55:3c:87:5e:a6:94:b7:fe:d1:5e:11:db:00:2c:
fd:42:5c:70:02:5f:ce:4a:b7:ac:32:51:ac:59:ea:
ca:39:9a:da:c9:21:b5:dc:c2:ac:2d:58:1c:05:64:
84:a9:73:b9:92:5c:18:1c:01:eb:31:87:92:db:0e:
62:87:54:fa:bb:38:69:3f:0b:49:92:19:bd:5c:0d:
4c:4b:cb:4c:08:87:1b:3c:43:07:cf:7a:6f:3d:7b:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:97:59:45:38:44:05:4C:56:73:E3:25:12:BC:26:79:11:B8:69
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/KtiXWUU4RAVMVnPjJRK8JnkRuGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.57.0-185.174.58.255
Signature Algorithm: sha256WithRSAEncryption
6e:e5:1a:c6:10:e8:64:08:9a:95:5e:cd:76:05:a0:d8:94:cc:
81:1b:bb:0a:04:32:3c:05:ee:ad:cd:08:98:88:f5:10:6b:d0:
da:83:2d:22:62:10:06:0c:65:c1:b6:fd:d3:8b:dc:16:e4:b3:
ab:75:fa:7f:34:2d:d4:f6:a8:bd:5c:2c:13:19:f9:41:3f:47:
97:ae:33:9b:d5:57:84:05:33:62:d4:d9:c2:47:78:e5:ec:36:
19:91:ed:b9:ae:a3:87:15:6b:f1:8f:5d:43:ef:8f:dd:5c:18:
af:9d:26:55:64:c4:d3:ed:c6:82:f0:e9:40:19:f4:3d:5e:a6:
22:47:cd:6c:1f:07:1a:db:d0:48:c1:39:3b:f8:81:4e:df:9c:
af:8d:06:53:23:b6:31:06:95:8a:bd:db:65:d6:ed:89:b9:e5:
61:7e:a6:f9:a9:2f:bc:d1:72:84:6e:69:9c:8d:d0:30:5a:63:
f2:66:6f:c4:a3:cb:df:6e:0b:e3:dc:38:7a:cd:3a:5d:9d:b6:
6c:3b:af:a2:66:70:32:ed:49:83:05:32:cd:bf:0e:33:33:2d:
03:e3:d9:a1:a5:22:26:cc:b8:11:d0:d5:cf:1f:68:36:0a:68:
a5:fc:ee:8f:23:dc:62:6e:80:d1:92:3d:56:6b:37:3b:12:f3:
fd:27:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:13 2025 by rpki-client