Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KKla4z5XyzCx_ugfyI_wQ7aPrjU.roa
File: KKla4z5XyzCx_ugfyI_wQ7aPrjU.roa (raw, json)
Hash identifier: am7wKqi6oVJedcrp6TSlF4Vo6/h428UGDARehVAjDN4=
Subject key identifier: 28:A9:5A:E3:3E:57:CB:30:B1:FE:E8:1F:C8:8F:F0:43:B6:8F:AE:35
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01958FE2F229886DA00A9ACC7BB010400A58
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KKla4z5XyzCx_ugfyI_wQ7aPrjU.roa
Signing time: Thu 13 Mar 2025 14:22:49 +0000
ROA not before: Thu 13 Mar 2025 14:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 151.242.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:e2:f2:29:88:6d:a0:0a:9a:cc:7b:b0:10:40:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 13 14:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28a95ae33e57cb30b1fee81fc88ff043b68fae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:03:63:f6:c0:01:d3:e4:51:39:bc:0b:f5:8a:
29:39:f6:82:4f:e3:36:14:1b:a0:ad:38:f3:b7:86:
7a:bd:9c:8c:18:07:6d:4b:e5:f2:49:74:ff:5a:3e:
d2:41:49:5e:72:b9:72:e1:05:90:14:c5:c5:fb:d6:
04:ff:28:0a:87:0a:2d:14:bb:fa:9f:ba:35:14:cb:
57:ca:6a:8a:8a:a5:db:3a:08:80:5b:64:12:cb:51:
3d:e5:a6:11:54:b1:d1:84:22:97:27:43:c4:4a:96:
a6:1b:e7:71:79:75:85:3e:8c:e2:6a:4f:98:28:4a:
0e:6b:06:e1:21:1a:66:33:cf:22:27:fb:c0:c7:5c:
0f:dd:07:97:16:06:0b:a0:7e:89:4b:d8:f6:c0:6c:
a4:69:4a:d8:ec:dc:97:f3:ea:ea:d5:b7:11:cb:fb:
90:30:06:ea:46:91:0f:73:62:9c:ab:a2:21:0e:6b:
8f:b8:a7:a7:0d:d2:4a:b0:31:f9:8d:6b:11:57:dd:
35:f5:91:eb:fd:81:5d:2a:74:ae:0c:c1:79:62:e5:
85:24:b4:4e:24:25:2b:79:34:4f:cd:d8:0f:b1:80:
a1:75:57:46:e9:da:22:1e:f3:a5:f0:27:d9:6f:f5:
e3:19:49:a9:8f:5a:eb:58:8e:3e:de:fb:6b:28:9a:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:5A:E3:3E:57:CB:30:B1:FE:E8:1F:C8:8F:F0:43:B6:8F:AE:35
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KKla4z5XyzCx_ugfyI_wQ7aPrjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.43.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c4:51:4e:60:91:62:80:f0:32:10:93:19:b4:ec:3a:80:36:
9c:92:64:6a:6f:22:da:33:ad:40:13:90:db:ba:43:82:71:2f:
7a:1d:fb:f4:53:d8:4d:5c:34:06:ab:17:3b:50:27:dd:32:ec:
a5:c7:ac:d5:c3:e1:72:24:d5:bc:85:52:29:c0:42:0a:63:f4:
1e:cd:82:6e:6d:90:cf:0f:dc:83:a3:6a:e4:36:0a:ef:d1:a2:
05:39:37:8d:3e:5f:b7:4b:36:80:1b:e2:36:01:04:e8:f5:3b:
aa:8c:f3:f8:b9:db:7b:41:a5:86:43:7f:f9:a0:70:25:6a:c4:
0a:2f:f5:6b:a9:36:f6:b4:aa:ad:ba:03:0f:4d:97:54:4b:b8:
a3:50:56:8a:9b:06:8d:98:c8:39:19:b5:7f:6b:4f:46:fe:e0:
f2:b7:20:14:18:98:3a:91:0e:79:3b:3d:2a:21:ac:b3:b8:e7:
3c:bb:06:42:4c:1b:9f:f6:20:87:3c:6c:24:14:2c:91:32:dc:
39:71:dd:bf:22:c1:93:9e:eb:42:8b:2b:b7:9f:8c:c2:d0:37:
cc:1c:27:e8:0a:48:ff:46:59:f5:f8:57:cd:ca:d8:aa:4c:0d:
05:f3:6c:4b:10:04:0d:b4:16:e0:1c:cc:1f:2a:97:42:da:60:
07:6d:31:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWP4vIpiG2gCprMe7AQQApYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzEzMTQyMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGE5NWFlMzNlNTdjYjMwYjFmZWU4MWZjODhmZjA0M2I2OGZhZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuANj9sAB0+RRObwL9YopOfaCT+M2
FBugrTjzt4Z6vZyMGAdtS+XySXT/Wj7SQUlecrly4QWQFMXF+9YE/ygKhwotFLv6
n7o1FMtXymqKiqXbOgiAW2QSy1E95aYRVLHRhCKXJ0PESpamG+dxeXWFPoziak+Y
KEoOawbhIRpmM88iJ/vAx1wP3QeXFgYLoH6JS9j2wGykaUrY7NyX8+rq1bcRy/uQ
MAbqRpEPc2Kcq6IhDmuPuKenDdJKsDH5jWsRV9019ZHr/YFdKnSuDMF5YuWFJLRO
JCUreTRPzdgPsYChdVdG6doiHvOl8CfZb/XjGUmpj1rrWI4+3vtrKJqABQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCipWuM+V8swsf7oH8iP8EO2j641MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvS0tsYTR6NVh5ekN4X3VnZnlJX3dRN2FQcmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IrMA0G
CSqGSIb3DQEBCwUAA4IBAQBOxFFOYJFigPAyEJMZtOw6gDackmRqbyLaM61AE5Db
ukOCcS96Hfv0U9hNXDQGqxc7UCfdMuylx6zVw+FyJNW8hVIpwEIKY/QezYJubZDP
D9yDo2rkNgrv0aIFOTeNPl+3SzaAG+I2AQTo9TuqjPP4udt7QaWGQ3/5oHAlasQK
L/VrqTb2tKqtugMPTZdUS7ijUFaKmwaNmMg5GbV/a09G/uDytyAUGJg6kQ55Oz0q
IayzuOc8uwZCTBuf9iCHPGwkFCyRMtw5cd2/IsGTnutCiyu3n4zC0DfMHCfoCkj/
Rln1+FfNytiqTA0F82xLEAQNtBbgHMwfKpdC2mAHbTGo
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:24 2025 by rpki-client