Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/KwgXZqDYcgh4zXYqaxbQknWHXTU.roa
File: KwgXZqDYcgh4zXYqaxbQknWHXTU.roa (raw, json)
Hash identifier: jIwi+9Rze68vMzWY1H0bY4CpBzrr84g1O5yKXA5KfZA=
Subject key identifier: 2B:08:17:66:A0:D8:72:08:78:CD:76:2A:6B:16:D0:92:75:87:5D:35
Certificate issuer: /CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
Certificate serial: 019424B37E9106047F435DFEB669878C530F
Authority key identifier: 79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/KwgXZqDYcgh4zXYqaxbQknWHXTU.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16019
IP address blocks: 185.13.87.0/24 maxlen: 24
2a10:1d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7e:91:06:04:7f:43:5d:fe:b6:69:87:8c:53:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b081766a0d8720878cd762a6b16d09275875d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:50:0f:f4:7d:dc:a3:9b:de:91:bb:63:95:7d:
36:a2:f4:b7:5c:78:51:bb:90:a6:64:d0:2d:5e:8c:
8c:20:25:4c:78:19:cc:45:b1:a5:36:0c:28:c0:98:
62:e0:06:6d:d0:12:2c:5e:f1:5f:0e:84:c2:8d:d0:
ff:bb:c7:25:5a:3b:f0:01:23:02:15:a8:5e:b3:26:
2b:7c:98:b7:58:bb:da:b3:51:9f:a0:51:75:60:95:
12:4a:dd:50:ed:3c:48:e8:1d:88:9d:47:34:a7:36:
c6:66:cf:9f:7a:1c:3f:ce:72:2c:aa:0b:a9:0f:9d:
59:19:02:8d:42:ac:8f:91:dc:ec:7d:fa:a7:08:cb:
0f:26:df:72:a2:9a:f7:7e:7c:3e:26:5f:e5:a0:7a:
b2:24:90:20:c6:41:c7:69:a6:39:55:ef:1c:e8:59:
25:74:8a:60:ea:4e:4a:4c:69:ee:36:de:f2:c0:3f:
4b:d0:c8:63:b2:16:cc:63:70:3b:79:a7:26:fa:ce:
2f:63:90:fe:05:d7:e0:69:b8:e3:55:16:a0:33:9b:
72:a6:1a:34:c9:3d:28:33:67:81:39:2c:e6:38:6f:
5b:8c:67:b3:63:65:2b:6f:4f:a0:27:ed:f5:33:50:
93:f5:08:d3:8a:1a:ca:16:fa:4a:81:95:96:29:da:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:17:66:A0:D8:72:08:78:CD:76:2A:6B:16:D0:92:75:87:5D:35
X509v3 Authority Key Identifier:
keyid:79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/KwgXZqDYcgh4zXYqaxbQknWHXTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.87.0/24
IPv6:
2a10:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
d8:bb:8d:02:8c:a3:6f:6d:58:75:d5:aa:41:c5:f1:d8:0a:dd:
cf:61:9a:0d:0f:fb:cd:f4:93:3f:2e:f3:54:b8:eb:64:1f:45:
57:ce:ba:ce:42:7d:17:14:4d:c4:33:ef:fc:52:ce:cc:71:96:
b6:8c:86:a2:83:54:b3:95:a3:10:da:bb:14:6a:69:35:a9:09:
ab:00:98:84:15:34:f3:21:7a:b9:1b:f0:f8:c5:b7:0b:f9:ee:
88:2f:47:88:5f:84:67:17:61:6d:e1:68:80:cf:60:32:8c:06:
87:81:60:e5:17:30:52:ed:75:64:74:a0:d8:46:78:da:ba:92:
a6:25:d3:6a:ca:05:ad:9d:66:ab:c9:99:1b:86:08:97:3e:dd:
4f:6d:0b:ea:76:31:87:f3:c7:45:5c:f2:31:61:e7:4f:d1:81:
52:09:aa:60:c0:4d:c0:07:26:24:87:7b:ee:43:fe:cb:24:03:
b4:3c:0f:d6:cc:93:65:48:5f:7c:26:6c:3b:71:fc:e7:f2:08:
bc:f2:85:2f:c7:32:a0:e7:c0:aa:bd:9c:be:af:e2:79:22:e6:
8d:63:7c:16:a8:f3:c1:e0:96:07:8a:3a:94:c9:76:42:3e:ea:
bb:c2:6f:df:41:b0:e4:1a:6a:1b:56:8f:61:ff:74:51:92:16:
fe:03:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:38 2025 by rpki-client