Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa
File: KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa (raw, json)
Hash identifier: AFMADJ+EdA++truR6oHaQkzeXGaM562uJumCeUqnVzo=
Subject key identifier: 29:5B:CE:19:81:32:1E:15:A1:44:7C:12:F4:B4:23:1B:75:CA:F0:42
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 0195121C0B7AE79144004D0B9915ACB2F3B9
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa
Signing time: Mon 17 Feb 2025 04:13:02 +0000
ROA not before: Mon 17 Feb 2025 04:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212794
IP address blocks: 2a10:afc0:e010::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:1c:0b:7a:e7:91:44:00:4d:0b:99:15:ac:b2:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Feb 17 04:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=295bce1981321e15a1447c12f4b4231b75caf042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:e9:5f:09:67:4c:92:47:83:f2:5a:04:37:
e9:1c:cb:62:18:bc:f6:9d:ba:17:13:e0:5d:90:fa:
a6:28:13:ed:73:3a:47:67:6a:a2:35:22:e3:e8:0b:
a0:3d:65:33:5b:b0:11:f0:fe:e8:d0:5f:b4:59:ae:
19:b7:6f:e4:f8:b4:c9:f0:77:db:92:f9:f2:79:73:
2f:46:60:18:8e:e6:8d:89:0d:ef:bc:6d:17:36:03:
d7:14:d1:d8:28:a6:15:81:d7:20:7c:be:ff:d1:58:
95:e4:65:fc:18:2a:e5:08:3d:0e:77:d0:db:75:15:
d3:ac:39:72:a7:36:4b:2e:7d:a1:74:7e:72:bd:0f:
d9:9f:7c:6e:b7:37:48:9f:44:f5:02:0a:93:9b:83:
d5:b8:7e:f1:a3:11:cf:6c:4b:55:27:6b:ac:07:be:
bc:ec:db:bb:c7:00:7e:c3:24:49:07:fb:03:11:d8:
9c:74:23:29:b6:6f:74:88:ed:93:12:9d:55:67:0c:
99:93:56:1f:30:39:b0:ab:28:f4:e9:4c:36:92:df:
78:30:db:50:f6:0c:05:f6:f5:dd:9e:29:87:97:71:
19:3e:e5:75:14:3a:0f:1f:8b:a1:17:f3:16:f4:d1:
44:6e:6c:a6:7d:4e:2a:67:eb:29:13:7b:86:b2:79:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:CE:19:81:32:1E:15:A1:44:7C:12:F4:B4:23:1B:75:CA:F0:42
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:afc0:e010::/44
Signature Algorithm: sha256WithRSAEncryption
8a:50:de:38:b8:c6:2c:a9:6d:0e:71:b7:2f:b7:0b:b6:6d:92:
20:63:95:bf:29:07:d6:6f:7a:65:69:53:9d:db:5a:41:93:f8:
51:cb:a3:ed:d4:2e:02:a8:e5:f5:ba:12:58:11:c3:b4:f5:95:
5a:cf:76:23:17:73:12:39:5e:3e:e3:96:15:4d:04:38:81:49:
db:47:47:1d:12:80:c0:ab:be:61:9a:52:00:ea:3c:44:37:86:
c8:0a:73:70:e0:3c:34:cc:5b:aa:41:33:b5:8c:3a:69:58:e0:
a0:26:d4:55:2e:5b:5d:b0:a2:20:44:b7:90:67:68:86:87:69:
88:21:f3:54:5f:42:d1:52:37:6e:38:e6:c0:de:cb:08:43:b7:
b8:96:69:1d:bc:5c:07:14:89:22:b3:cb:b3:48:de:3e:09:0f:
4e:5b:54:28:1f:fd:cd:bb:2d:25:81:0a:71:01:0a:62:01:6b:
ea:46:80:55:15:30:d6:1b:34:31:47:b5:30:b8:82:a8:f5:39:
f9:bf:2a:4e:97:3b:67:02:57:59:e0:db:2e:e9:0b:a5:18:eb:
be:7b:b0:52:e6:4d:73:0e:65:ca:54:73:ff:eb:ef:82:f7:e3:
0c:cc:29:17:10:1f:9f:e0:e1:39:df:90:06:24:aa:25:e5:d2:
e7:e6:02:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:24 2025 by rpki-client