Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa
File: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (raw, json)
Hash identifier: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=
Subject key identifier: 29:8B:56:B6:58:2A:13:90:7D:A0:F5:69:6B:95:ED:31:6A:D3:CB:6B
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 01941F8CA979CFEF0B8388D3D55E91C815F4
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 192.33.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a9:79:cf:ef:0b:83:88:d3:d5:5e:91:c8:15:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=298b56b6582a13907da0f5696b95ed316ad3cb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:60:d1:38:05:18:fb:e4:91:fa:2d:df:cf:
8b:fd:7c:c8:63:71:b4:a5:82:f6:03:ca:ed:cf:b0:
72:5f:af:60:38:b5:af:ff:d4:02:a3:bd:75:b5:ea:
0d:cb:4a:92:bb:9e:ad:32:03:9d:25:80:84:de:d5:
ef:41:3a:92:e4:25:db:68:79:ac:c6:c4:90:b7:0a:
7e:fe:df:ba:f5:5c:93:7e:cf:89:1a:00:a0:43:9f:
b6:7c:fc:9d:e7:6f:ef:70:55:a5:75:c2:cb:c5:89:
7a:79:34:f5:2f:c6:bb:53:50:e1:46:01:d9:d9:13:
ba:4c:90:24:71:2e:11:88:a4:06:b6:a1:dc:f4:c6:
ad:83:0c:5b:35:2f:4e:57:72:e4:a8:9a:e9:d9:12:
08:a6:00:5b:22:57:fd:a6:0f:3b:5c:65:7b:70:96:
ed:2f:0f:95:a2:98:dd:c9:3f:14:db:0d:97:be:68:
51:e0:72:39:f6:d3:38:b4:64:ec:d2:6a:94:88:e1:
7a:3f:30:84:65:45:6d:b8:d6:b5:51:01:e0:a5:28:
5d:3d:a2:88:29:a3:56:26:5c:e4:e8:db:c9:69:1f:
f8:53:11:f0:52:c5:71:cc:1b:20:98:e1:82:0f:b1:
46:53:a9:da:78:95:d1:5d:16:1b:3a:81:15:32:62:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:56:B6:58:2A:13:90:7D:A0:F5:69:6B:95:ED:31:6A:D3:CB:6B
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.221.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c9:6f:cf:47:81:e2:d9:00:18:c0:dd:da:64:13:45:be:71:
46:b8:34:36:29:7b:1c:8e:b1:d7:03:d2:ac:9e:b0:70:64:0a:
fa:5d:07:d0:2f:75:7b:a0:2e:35:ad:73:ca:3b:c7:46:77:aa:
ab:c5:e6:15:ea:60:12:34:bc:db:c0:6e:03:76:ba:2e:73:af:
5c:e7:09:e9:06:02:c3:3e:c5:91:6d:65:24:a9:1f:1d:68:83:
c0:5c:dc:7c:d4:52:69:0d:76:a4:af:a2:03:a5:1f:05:05:07:
35:ad:c4:87:00:52:2d:13:ae:58:09:3c:b8:a3:c8:99:51:5a:
65:c8:92:6c:8d:80:2e:9b:82:4b:95:24:86:9b:35:c9:78:f3:
53:b1:f3:1a:23:f7:b9:0f:26:d1:5a:08:45:7b:b3:23:09:d2:
a7:aa:7b:87:e4:fb:3a:4e:e4:05:5c:d1:f8:11:7d:eb:13:c9:
a9:90:3d:71:9c:d4:d8:6e:a1:e3:48:5e:60:18:a0:45:9f:dd:
a6:92:64:04:52:3c:43:5d:3a:81:37:12:59:e0:da:79:51:56:
9e:f0:f7:2c:02:ff:f8:51:98:f7:17:f1:68:b9:c7:fa:11:4c:
74:00:95:b2:e3:38:d1:98:5f:a1:d4:12:83:ae:c7:7e:71:92:
63:3c:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:22 2025 by rpki-client