Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/Kx73athyUzxEmECjUrHx8LW1V3Y.roa
File: Kx73athyUzxEmECjUrHx8LW1V3Y.roa (raw, json)
Hash identifier: lGfbpfGUrdUvVFsGLU8b1swBdW8uUwnurDvwaydgWDE=
Subject key identifier: 2B:1E:F7:6A:D8:72:53:3C:44:98:40:A3:52:B1:F1:F0:B5:B5:57:76
Certificate issuer: /CN=29b899d7dfa63fc8862ec239201eb1f6c08f07f4
Certificate serial: 03B509
Authority key identifier: 29:B8:99:D7:DF:A6:3F:C8:86:2E:C2:39:20:1E:B1:F6:C0:8F:07:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/Kx73athyUzxEmECjUrHx8LW1V3Y.roa
Signing time: Fri 27 May 2022 21:20:14 +0000
ROA not before: Fri 27 May 2022 21:20:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206004
IP address blocks: 185.194.200.0/23 maxlen: 23
185.194.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242953 (0x3b509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b899d7dfa63fc8862ec239201eb1f6c08f07f4
Validity
Not Before: May 27 21:20:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b1ef76ad872533c449840a352b1f1f0b5b55776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:52:6c:f8:2f:70:47:fb:70:8d:1a:6d:ea:
64:b5:17:17:4e:3e:e6:50:12:c5:6d:b6:03:52:68:
41:4c:b7:6e:87:39:bd:5b:ad:3e:b6:08:d8:55:cc:
96:bf:8b:5d:05:3a:12:8e:8b:cc:cb:4a:f7:78:43:
14:c6:0a:25:d6:9c:8c:c0:22:b3:e2:e6:1a:3c:b9:
81:d8:c3:ca:83:d8:43:e6:b9:1f:dd:af:d9:f0:12:
cd:ee:16:66:3f:b4:d4:8b:61:74:63:69:7e:64:7b:
ff:eb:1e:90:4a:0d:f2:3b:39:f8:99:46:f1:8e:79:
f8:3b:17:34:8d:e0:c3:9d:9c:3d:18:2f:64:7a:00:
83:7e:d1:c5:e4:df:94:bc:d0:90:4f:97:ca:f7:f9:
19:07:33:0c:dd:9b:02:60:4c:a1:7e:66:2c:81:d5:
79:4d:d2:17:dd:c8:1c:57:33:08:3a:55:d4:4c:bf:
4d:02:6f:67:6f:7e:1a:2e:9d:30:7a:11:07:ea:f4:
d3:9b:f3:90:0c:7b:a9:fb:ea:90:4e:04:00:03:98:
74:c5:00:34:73:97:fc:49:1d:17:d4:db:3f:50:17:
5e:61:0a:e6:13:88:e8:81:37:c1:88:cb:d8:13:54:
90:a9:79:89:10:dc:0c:8f:8d:e5:13:b5:95:c8:cd:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1E:F7:6A:D8:72:53:3C:44:98:40:A3:52:B1:F1:F0:B5:B5:57:76
X509v3 Authority Key Identifier:
keyid:29:B8:99:D7:DF:A6:3F:C8:86:2E:C2:39:20:1E:B1:F6:C0:8F:07:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/Kx73athyUzxEmECjUrHx8LW1V3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b00316-4893-4152-97e6-d8e2a357cd4b/1/KbiZ19-mP8iGLsI5IB6x9sCPB_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.200.0/23
Signature Algorithm: sha256WithRSAEncryption
33:73:2c:ab:f0:2c:ba:c5:4c:e3:54:9b:7b:f4:b4:35:20:2d:
71:83:ac:9e:ea:2b:42:6e:23:d7:59:26:ff:8d:35:43:01:93:
bd:8e:99:7b:56:75:73:9d:d8:6a:a6:62:4a:4b:52:6f:68:2d:
be:a7:91:9e:f1:bf:8f:49:08:fb:ce:fd:d5:b0:e5:91:7c:a0:
6c:28:4c:c9:e6:67:69:4b:9a:62:ec:d4:88:ee:b9:34:3a:f4:
86:96:ce:6b:af:9c:e3:ba:a7:23:16:86:9b:38:93:2e:92:e6:
de:30:7f:c3:1e:e2:bf:f6:1d:c6:2b:79:91:6c:9e:29:c3:e2:
27:73:ea:ae:0f:53:a3:ad:86:95:43:12:ce:a8:ae:4c:8d:4b:
2f:5c:18:ff:f8:20:69:6e:dc:73:d6:62:91:79:ff:1e:e8:7a:
8c:ba:72:bf:dc:5c:cd:70:15:aa:53:42:98:2c:28:e8:2d:f1:
43:69:c5:41:71:89:e1:bb:a4:2c:d7:07:3b:cc:c1:34:d3:2d:
36:73:2f:35:13:03:a3:a1:d2:2a:06:10:c2:d5:69:d0:aa:39:
be:18:2b:4c:c9:ef:13:0b:d2:fd:38:f2:d0:7d:85:91:9f:1c:
ea:79:5d:49:0a:3e:54:80:f2:b8:cb:c1:3c:9c:27:c9:41:75:
85:8b:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:53 2025 by rpki-client