Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KhZtAbA1_mJioJwZBREDde-8LqM.roa
File: KhZtAbA1_mJioJwZBREDde-8LqM.roa (raw, json)
Hash identifier: L71LLCekkg47f6HHti5D+6f1DS4rDbdUaVgPNIM4H/E=
Subject key identifier: 2A:16:6D:01:B0:35:FE:62:62:A0:9C:19:05:11:03:75:EF:BC:2E:A3
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA937D23400901A42DD7E2187025F3
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KhZtAbA1_mJioJwZBREDde-8LqM.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42938
IP address blocks: 37.230.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:93:7d:23:40:09:01:a4:2d:d7:e2:18:70:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a166d01b035fe6262a09c1905110375efbc2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:fd:b8:c0:31:db:49:87:21:3f:d9:dd:a8:
33:5d:dd:68:db:67:88:51:ea:1f:70:49:de:7b:57:
49:fb:c0:00:cf:83:3e:12:8a:dc:a0:76:44:36:95:
a8:5e:48:70:62:a8:ba:ac:2e:8c:96:67:e0:df:e7:
d7:cc:92:3c:94:72:d9:05:68:5b:f9:aa:71:4e:a2:
df:8e:c9:38:e8:9f:8c:1f:e7:e2:7e:2b:59:5f:7f:
72:62:0b:7b:aa:2a:78:06:32:43:06:7b:48:c8:fb:
91:9e:94:54:35:2e:05:02:04:ae:14:47:02:e6:f6:
fd:f0:c7:8a:ad:9b:ec:d6:81:91:c2:06:1e:5b:36:
4c:69:44:61:a5:a1:70:16:ca:db:e6:26:df:25:5b:
e2:d0:83:ad:2d:12:61:aa:40:a3:e8:66:cd:49:10:
ea:9e:b6:c5:10:05:3b:c0:e2:fe:02:b9:71:46:5f:
c6:45:6b:1e:72:5f:6f:19:01:81:0d:00:78:a3:49:
a4:24:76:0c:87:54:2f:a0:72:28:2f:93:4b:4d:0b:
81:e4:90:85:9b:92:09:71:11:52:43:d6:e2:c8:d3:
79:b0:4e:f1:ac:b8:52:1d:fd:50:70:6f:9b:94:4e:
7a:2a:c7:4b:ba:12:78:41:1e:20:2d:ec:4c:7e:2d:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:16:6D:01:B0:35:FE:62:62:A0:9C:19:05:11:03:75:EF:BC:2E:A3
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/KhZtAbA1_mJioJwZBREDde-8LqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fd:71:cc:a1:9d:d5:25:88:33:04:dc:30:55:64:c2:63:20:
1e:19:42:10:d1:60:f8:d5:fe:00:10:a4:fb:2a:b6:5d:3e:d6:
39:42:7d:4c:65:02:7f:e6:78:75:11:84:14:dd:d9:e7:f2:b2:
95:0b:67:f8:32:e6:4c:3b:0f:56:72:38:19:fb:cc:67:39:9c:
63:0b:fb:55:42:a1:9c:7a:14:dd:03:e3:9e:1a:b1:a3:46:ea:
1a:87:4c:1f:71:7d:4f:ff:66:58:31:9a:0b:44:36:9b:8c:f4:
3e:e2:9e:f1:52:03:92:a2:ac:68:a3:05:c2:cc:92:ad:26:cc:
5c:93:7d:5a:92:8e:94:31:5d:85:4c:a4:aa:b6:a9:40:dd:bf:
f4:28:48:dc:09:14:f8:21:df:ef:af:e3:cd:f1:38:63:84:8f:
a7:b2:73:5c:2c:1e:30:22:6f:b2:81:59:99:f7:57:c4:16:50:
90:d6:14:8c:e0:ca:fa:b4:27:e8:9d:6f:1e:79:aa:52:09:db:
d1:a3:35:0d:d2:b4:8e:b7:c1:52:39:cd:27:d8:71:f3:ef:45:
b6:07:c3:7c:53:83:95:aa:b3:8b:bd:67:52:bc:0a:8a:3f:54:
ae:6e:32:b3:99:d4:0b:2a:47:29:d2:f5:bb:a7:c7:f3:67:a8:
cb:9a:b2:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+pN9I0AJAaQt1+IYcCXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTAxMDM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTE2NmQwMWIwMzVmZTYyNjJhMDljMTkwNTExMDM3NWVmYmMyZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Df9uMAx20mHIT/Z3agzXd1o22eI
UeofcEnee1dJ+8AAz4M+EorcoHZENpWoXkhwYqi6rC6Mlmfg3+fXzJI8lHLZBWhb
+apxTqLfjsk46J+MH+fifitZX39yYgt7qip4BjJDBntIyPuRnpRUNS4FAgSuFEcC
5vb98MeKrZvs1oGRwgYeWzZMaURhpaFwFsrb5ibfJVvi0IOtLRJhqkCj6GbNSRDq
nrbFEAU7wOL+ArlxRl/GRWsecl9vGQGBDQB4o0mkJHYMh1QvoHIoL5NLTQuB5JCF
m5IJcRFSQ9biyNN5sE7xrLhSHf1QcG+blE56KsdLuhJ4QR4gLexMfi18RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCoWbQGwNf5iYqCcGQURA3XvvC6jMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvS2hadEFiQTFfbUppb0p3WkJSRURkZS04THFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeb3MA0G
CSqGSIb3DQEBCwUAA4IBAQB//XHMoZ3VJYgzBNwwVWTCYyAeGUIQ0WD41f4AEKT7
KrZdPtY5Qn1MZQJ/5nh1EYQU3dnn8rKVC2f4MuZMOw9WcjgZ+8xnOZxjC/tVQqGc
ehTdA+OeGrGjRuoah0wfcX1P/2ZYMZoLRDabjPQ+4p7xUgOSoqxoowXCzJKtJsxc
k31ako6UMV2FTKSqtqlA3b/0KEjcCRT4Id/vr+PN8ThjhI+nsnNcLB4wIm+ygVmZ
91fEFlCQ1hSM4Mr6tCfonW8eeapSCdvRozUN0rSOt8FSOc0n2HHz70W2B8N8U4OV
qrOLvWdSvAqKP1SubjKzmdQLKkcp0vW7p8fzZ6jLmrJy
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:17:30 2025 by rpki-client