Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e2662e-d81d-4baa-91cc-f845cfbb5e7a/1/kELH8KT4cKsTBDVV7gdf_2r45Z4.roa
File: kELH8KT4cKsTBDVV7gdf_2r45Z4.roa (raw, json)
Hash identifier: UxdiRMCb9LX0vUM+yD4WSyr4HfLP2WYVyEF4MUMcDlM=
Subject key identifier: 90:42:C7:F0:A4:F8:70:AB:13:04:35:55:EE:07:5F:FF:6A:F8:E5:9E
Certificate issuer: /CN=d2c9bc2cf905bd43b429f5194a81936cf1ec619b
Certificate serial: 018CC501307A719A614AD0153B699B6B96DA
Authority key identifier: D2:C9:BC:2C:F9:05:BD:43:B4:29:F5:19:4A:81:93:6C:F1:EC:61:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sm8LPkFvUO0KfUZSoGTbPHsYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e2662e-d81d-4baa-91cc-f845cfbb5e7a/1/kELH8KT4cKsTBDVV7gdf_2r45Z4.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41458
IP address blocks: 195.3.164.0/22 maxlen: 22
94.229.0.0/20 maxlen: 20
185.50.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:30:7a:71:9a:61:4a:d0:15:3b:69:9b:6b:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c9bc2cf905bd43b429f5194a81936cf1ec619b
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9042c7f0a4f870ab13043555ee075fff6af8e59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:47:26:1b:31:74:54:15:a0:ff:a1:e7:84:
55:6c:a8:4e:34:c6:3d:00:c2:42:04:85:7d:73:0d:
7c:7a:08:cb:47:1e:ae:27:41:f7:70:ee:5d:0c:d1:
aa:47:d1:42:50:cd:b7:17:44:ab:4b:b0:e2:ed:09:
40:a7:a6:6b:98:06:fc:7c:7b:c8:de:94:1c:5a:3c:
72:d7:bb:4c:db:09:99:25:85:ff:a4:a1:b7:f6:aa:
3a:2b:17:86:3a:28:e1:f0:f4:93:48:bf:61:69:00:
cf:af:08:b7:9c:5f:54:de:aa:04:ce:fb:0e:59:21:
21:f6:44:ae:f8:81:f0:58:c0:ea:23:d7:fa:57:b8:
5a:9d:f5:a9:90:19:20:c5:c7:3d:f0:10:d7:5e:69:
22:ed:1e:30:78:f8:ed:0a:c6:ba:5f:43:3c:6f:b2:
59:04:58:35:f6:c3:b1:ef:f4:84:49:70:12:00:5e:
f2:07:f3:4a:3d:b5:f4:35:62:c3:bb:09:eb:ef:5c:
9a:02:c8:53:1d:67:97:37:91:88:31:05:ec:56:6b:
ac:58:8a:fd:b9:29:47:7d:3e:7c:d9:24:e6:9d:7f:
b9:f1:ca:8d:19:59:b6:de:3d:87:4a:8b:82:6f:df:
cc:10:6a:34:b4:00:0b:21:4b:41:e0:6b:51:e6:e6:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:C7:F0:A4:F8:70:AB:13:04:35:55:EE:07:5F:FF:6A:F8:E5:9E
X509v3 Authority Key Identifier:
keyid:D2:C9:BC:2C:F9:05:BD:43:B4:29:F5:19:4A:81:93:6C:F1:EC:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sm8LPkFvUO0KfUZSoGTbPHsYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e2662e-d81d-4baa-91cc-f845cfbb5e7a/1/kELH8KT4cKsTBDVV7gdf_2r45Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e2662e-d81d-4baa-91cc-f845cfbb5e7a/1/0sm8LPkFvUO0KfUZSoGTbPHsYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.0.0/20
185.50.132.0/22
195.3.164.0/22
Signature Algorithm: sha256WithRSAEncryption
59:20:a8:92:47:c3:e2:6a:59:2c:98:68:ec:a5:13:be:de:c1:
8a:0b:8b:73:d1:69:26:e9:09:75:57:0c:1f:31:08:06:de:4c:
cf:18:84:dc:6e:b2:bb:47:41:f1:26:d2:5b:a6:76:44:3b:9c:
85:34:d5:13:f0:ba:c0:5e:85:6c:7c:b3:48:7f:44:cf:57:41:
5a:7f:f2:45:1c:27:f6:f4:a4:3a:1a:46:ea:61:e4:f9:d0:27:
54:2d:d5:66:f7:06:b0:5d:19:1d:ec:1f:3f:2e:51:56:e8:bd:
f2:64:f8:be:80:c6:07:18:e4:7f:d8:2a:d5:29:4e:66:d8:67:
c7:a0:b9:69:31:b4:5f:8a:cd:80:57:05:68:af:55:65:04:df:
a7:13:22:81:f5:d5:10:fa:5a:9d:52:38:ad:71:ea:f5:7e:b9:
15:3d:fd:df:35:da:8e:bc:cd:e1:40:df:f5:90:66:4e:b9:5a:
0e:f3:3f:a0:74:49:1f:8b:90:d6:62:d9:87:44:57:6f:97:59:
e1:b1:03:0c:ab:69:8f:f2:9a:d1:0a:b8:69:34:17:36:84:73:
9e:e2:d9:d6:ec:93:01:79:db:66:ab:69:02:d0:b6:18:2b:18:
89:13:44:dd:52:f3:b2:3d:1e:31:61:b4:04:59:6c:4c:65:0f:
ae:3b:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:00:48 2025 by rpki-client