Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kb3zu-D64qRCfRDQZqlEpLNofOM.roa
File: kb3zu-D64qRCfRDQZqlEpLNofOM.roa (raw, json)
Hash identifier: ZCaXb1a4hP0Zo0EJlyp6pNvAKJ5pq75G/o9gbP/BhUM=
Subject key identifier: 91:BD:F3:BB:E0:FA:E2:A4:42:7D:10:D0:66:A9:44:A4:B3:68:7C:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195D3504DFD9EC173DA6A8C8777A52F6D67
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kb3zu-D64qRCfRDQZqlEpLNofOM.roa
Signing time: Wed 26 Mar 2025 16:36:50 +0000
ROA not before: Wed 26 Mar 2025 16:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211377
IP address blocks: 31.59.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:50:4d:fd:9e:c1:73:da:6a:8c:87:77:a5:2f:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 26 16:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91bdf3bbe0fae2a4427d10d066a944a4b3687ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:f6:19:0f:ef:c2:75:8d:d1:63:c1:32:bf:
e9:54:75:fb:57:4b:75:00:50:1b:bd:a9:f6:62:f5:
d5:32:3e:57:2c:d4:30:cb:e0:b4:3a:87:be:e9:b0:
40:54:70:4d:45:d3:9e:be:ff:3d:d9:74:3a:0a:a8:
14:16:7d:a3:29:6a:12:ed:36:56:8f:71:23:9c:a1:
c0:42:80:62:0b:c6:22:c9:8f:6f:e0:26:ec:d6:3e:
50:31:b1:0a:20:86:d5:dd:91:e8:2c:94:fb:58:f0:
85:34:8c:83:87:4e:f5:7b:3d:5f:56:17:d4:bc:5e:
c5:f2:6a:05:c3:84:9a:ce:c6:3b:f6:73:76:e9:52:
83:41:5c:e4:b1:72:91:02:ba:dd:84:51:b7:94:9e:
3c:c4:9c:dc:5e:78:63:6a:45:4b:77:00:05:a4:3a:
ca:5f:0b:7f:87:7f:41:48:f7:3a:3f:29:ae:e5:95:
4d:17:99:21:47:92:65:e5:7b:2b:5f:ed:2b:03:90:
c0:4e:3e:34:2a:1d:d1:6d:41:f1:15:44:1e:35:68:
07:e5:f2:3b:06:56:3b:3e:eb:b7:01:40:89:86:ac:
55:22:af:0d:90:c4:f2:aa:19:99:07:28:e1:9b:03:
09:df:36:7c:93:25:6c:1c:2c:6f:dd:40:ee:6f:3d:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:F3:BB:E0:FA:E2:A4:42:7D:10:D0:66:A9:44:A4:B3:68:7C:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kb3zu-D64qRCfRDQZqlEpLNofOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.234.0/23
Signature Algorithm: sha256WithRSAEncryption
62:01:9a:79:87:f7:ee:77:5d:6d:b5:2f:70:46:20:b5:8e:8a:
3d:87:da:ef:56:4d:bf:65:13:c4:e0:2e:0b:97:a0:6d:6f:8f:
63:13:b3:b5:0f:03:a7:31:c6:f8:7c:1e:49:2d:95:3b:3e:d0:
8a:61:f1:e3:9d:12:fa:12:df:e2:2c:ee:ca:68:e3:8c:77:c0:
85:ec:17:fc:19:c0:1b:9e:a3:96:86:7e:e7:be:3a:62:20:1b:
02:5a:05:29:99:4d:c1:d3:de:e7:93:a8:9e:ad:34:8a:47:f5:
dd:af:22:f8:b5:45:8a:cb:2a:f8:a5:22:4a:18:a0:30:56:d0:
7c:92:fc:05:c8:ef:4c:cd:d2:c9:b3:28:97:57:dc:42:85:9f:
ca:04:04:cc:db:c7:68:35:df:34:2b:39:54:84:f5:49:74:92:
ae:d3:ce:8c:5a:89:e4:ab:c4:23:00:4e:7b:f2:fa:ef:a8:af:
40:a7:de:f8:ad:b6:c6:80:4b:55:22:61:68:a1:9f:46:a7:4c:
4e:2d:f7:f5:f2:89:c6:b4:c1:0e:3c:d8:12:ba:cc:9e:5a:8b:
3b:21:49:ba:93:67:2d:4e:ee:b5:55:13:04:d6:35:da:9d:5f:
5e:55:72:09:2b:c5:04:5a:85:37:cc:07:bd:68:b6:8d:de:0e:
6e:f0:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:02 2025 by rpki-client