Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/KBv7cx0tJHA3eI3MeKeZBbdYVE0.roa
File: KBv7cx0tJHA3eI3MeKeZBbdYVE0.roa (raw, json)
Hash identifier: XdqsAReXoxDewwC3orq0aVF3jYkGUC/O6cTnD+2U5aI=
Subject key identifier: 28:1B:FB:73:1D:2D:24:70:37:78:8D:CC:78:A7:99:05:B7:58:54:4D
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424449EAC7FD252C45053DBF2B3ADA20E
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/KBv7cx0tJHA3eI3MeKeZBbdYVE0.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215239
IP address blocks: 185.213.151.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9e:ac:7f:d2:52:c4:50:53:db:f2:b3:ad:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=281bfb731d2d247037788dcc78a79905b758544d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:19:7f:ce:d3:55:a8:36:5e:f3:ec:a3:06:
86:6b:7a:17:42:31:be:7f:b4:8d:87:cd:76:d6:b7:
64:23:c3:da:37:9c:88:58:ce:40:d6:85:48:a9:f4:
da:80:b6:44:a4:c3:b5:72:fc:bc:a3:ff:01:72:eb:
9c:87:79:79:02:a6:15:0b:14:6c:97:d8:46:26:5e:
3d:2e:ef:d2:16:9c:bd:d6:85:fb:e4:5c:09:16:7f:
59:3f:f1:f1:e2:f8:f1:80:ad:8b:ac:32:1c:4b:b0:
cd:2f:08:91:26:ee:88:97:a2:92:af:c3:54:80:b6:
dd:3e:e6:fb:71:24:59:15:23:d3:83:fc:ab:26:9b:
57:27:c9:56:07:0b:6a:c5:4e:a8:93:1c:ff:0f:bd:
0e:d6:95:30:18:e9:4c:1d:e3:80:6f:6f:98:26:42:
30:18:8c:07:0b:d4:08:55:6c:78:ae:92:a3:12:a7:
c4:93:18:d5:da:7f:71:02:d5:0b:d1:11:a0:02:d4:
25:44:51:2d:4b:e4:b7:b9:05:4d:3f:10:61:b9:3e:
e1:1e:f7:ad:fb:de:fc:25:bf:8f:7b:a2:49:cf:80:
36:c9:40:53:c8:3a:a8:56:69:ee:77:44:44:36:0f:
58:75:4f:16:c6:87:77:da:f6:3b:ba:89:a0:02:15:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1B:FB:73:1D:2D:24:70:37:78:8D:CC:78:A7:99:05:B7:58:54:4D
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/KBv7cx0tJHA3eI3MeKeZBbdYVE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:41:3a:58:ca:1f:71:e5:d4:44:74:46:72:89:e8:9d:8c:66:
4a:43:70:7c:5b:7e:52:f2:6c:1b:f6:e0:4d:bc:6f:e8:6b:89:
cf:bf:e0:b7:13:07:73:af:d4:60:c2:c7:ff:39:79:c2:5f:ad:
1b:0d:bd:0f:92:8e:ad:52:87:28:ed:76:02:ff:a2:e4:96:26:
49:2c:14:3b:10:2e:42:72:eb:84:15:be:65:d6:ec:cb:dd:84:
3d:78:a9:c5:9d:1c:cd:83:a6:ad:f0:0f:35:f5:d6:5d:8f:74:
18:64:07:82:6c:d7:55:0c:6f:6b:27:bb:52:31:4b:fd:7f:97:
a9:35:85:82:a5:09:88:67:6e:92:d2:0a:3b:69:cf:7c:de:05:
f4:b8:e3:d7:ec:98:a8:bf:9b:74:e0:b3:eb:75:6a:50:ea:4c:
4e:64:29:8f:30:d6:89:1b:24:3c:2a:92:7b:fc:f8:87:62:ce:
78:02:1f:1f:b7:ef:bb:e2:d2:49:3b:05:dc:03:92:b2:41:50:
3b:06:38:06:6d:96:65:13:e4:05:40:6d:bc:13:86:a2:8d:74:
20:dc:27:4d:6a:00:5e:ad:e5:f7:fc:d1:77:56:a0:ed:83:8a:
46:05:fb:49:5b:dc:57:a5:97:a8:11:1f:0d:0b:9f:0b:a6:a4:
c6:e9:da:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJ6sf9JSxFBT2/KzraIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjUwMTAxMjM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODFiZmI3MzFkMmQyNDcwMzc3ODhkY2M3OGE3OTkwNWI3NTg1NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMIZf87TVag2XvPsowaGa3oXQjG+
f7SNh8121rdkI8PaN5yIWM5A1oVIqfTagLZEpMO1cvy8o/8Bcuuch3l5AqYVCxRs
l9hGJl49Lu/SFpy91oX75FwJFn9ZP/Hx4vjxgK2LrDIcS7DNLwiRJu6Il6KSr8NU
gLbdPub7cSRZFSPTg/yrJptXJ8lWBwtqxU6okxz/D70O1pUwGOlMHeOAb2+YJkIw
GIwHC9QIVWx4rpKjEqfEkxjV2n9xAtUL0RGgAtQlRFEtS+S3uQVNPxBhuT7hHvet
+978Jb+Pe6JJz4A2yUBTyDqoVmnud0RENg9YdU8Wxod32vY7uomgAhVUEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgb+3MdLSRwN3iNzHinmQW3WFRNMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvS0J2N2N4MHRKSEEzZUkzTWVLZVpCYmRZVkUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudWXMA0G
CSqGSIb3DQEBCwUAA4IBAQCaQTpYyh9x5dREdEZyieidjGZKQ3B8W35S8mwb9uBN
vG/oa4nPv+C3Ewdzr9Rgwsf/OXnCX60bDb0Pko6tUoco7XYC/6LkliZJLBQ7EC5C
cuuEFb5l1uzL3YQ9eKnFnRzNg6at8A819dZdj3QYZAeCbNdVDG9rJ7tSMUv9f5ep
NYWCpQmIZ26S0go7ac983gX0uOPX7Jiov5t04LPrdWpQ6kxOZCmPMNaJGyQ8KpJ7
/PiHYs54Ah8ft++74tJJOwXcA5KyQVA7BjgGbZZlE+QFQG28E4aijXQg3CdNagBe
reX3/NF3VqDtg4pGBftJW9xXpZeoER8NC58LpqTG6dpK
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:37 2025 by rpki-client