Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/KExUk0ZqXQL8EgosDUsfpJpTUyg.roa
File: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (raw, json)
Hash identifier: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=
Subject key identifier: 28:4C:54:93:46:6A:5D:02:FC:12:0A:2C:0D:4B:1F:A4:9A:53:53:28
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 019425FD5796E9ED08F905D63A3C0D7BBC48
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/KExUk0ZqXQL8EgosDUsfpJpTUyg.roa
Signing time: Thu 02 Jan 2025 07:49:07 +0000
ROA not before: Thu 02 Jan 2025 07:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207139
IP address blocks: 185.169.115.0/24 maxlen: 24
2a01:8787::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:57:96:e9:ed:08:f9:05:d6:3a:3c:0d:7b:bc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=284c5493466a5d02fc120a2c0d4b1fa49a535328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d8:9c:2f:28:f0:0f:04:d8:c3:07:7b:14:bd:
c8:e2:58:f0:51:e7:d6:6a:77:2b:b4:de:f0:3f:1e:
89:9e:fc:0e:53:90:62:66:b7:6b:e3:c9:e4:62:8d:
25:6a:08:0a:b8:3a:9b:75:23:8c:a3:e0:76:fb:33:
46:01:4a:70:61:b1:fb:b6:eb:09:66:7d:a8:62:3c:
e6:69:f3:74:54:53:9a:4f:45:d6:1d:11:86:83:a8:
7e:69:06:88:63:f9:f3:1e:cb:f9:c4:08:6f:ee:10:
ab:0a:dc:77:eb:ae:96:03:ae:0f:66:ae:ec:56:35:
e0:11:fe:53:67:b6:a3:47:c6:87:bf:0e:6b:b8:ee:
96:26:1d:14:b9:a6:6b:9a:30:f0:e2:04:0d:a9:8e:
fe:cd:6a:d6:78:4d:6f:cb:2e:e8:c1:d5:69:5a:c3:
6e:04:6e:41:48:14:7a:d1:f7:97:a7:ca:ce:ab:ec:
90:d5:ed:81:01:08:b8:23:f2:32:75:6e:a5:e5:72:
9c:30:8a:66:03:d0:63:4a:bc:e3:67:1f:9a:a4:d4:
86:80:a9:4d:8f:52:76:87:ac:ea:f4:d6:45:be:49:
2f:ed:a3:4e:63:e1:22:b8:d7:c5:6a:cc:74:5e:e8:
59:5c:0d:fe:e1:7d:69:b3:a1:f4:d0:8e:69:d7:ae:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:54:93:46:6A:5D:02:FC:12:0A:2C:0D:4B:1F:A4:9A:53:53:28
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/KExUk0ZqXQL8EgosDUsfpJpTUyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.115.0/24
IPv6:
2a01:8787::/32
Signature Algorithm: sha256WithRSAEncryption
18:06:ae:6d:c8:fd:d9:22:2e:4a:77:02:2d:cd:b5:b2:60:f7:
6c:b7:38:79:6d:42:f9:90:33:08:40:c4:43:43:be:68:88:02:
17:1a:93:82:20:91:e3:b0:e6:a1:a0:3a:00:16:58:56:c7:3a:
0e:10:4b:ed:b8:ce:e4:3d:02:59:4a:8b:35:b8:8e:24:4a:65:
f6:85:e9:48:28:3b:47:7e:9f:c5:27:f6:51:7b:94:81:c3:9a:
12:65:66:7e:d8:4c:35:79:53:7b:dc:0c:d9:56:9c:ae:2a:24:
61:fc:10:60:c3:49:c1:0b:af:23:ef:bb:78:50:5f:c4:cb:a9:
89:f8:e3:7f:f5:b5:99:f7:07:e4:ab:f2:03:c2:84:f5:b3:a7:
e0:7c:0c:03:3b:d9:6f:c3:a9:e4:93:49:cd:55:9a:b2:4f:0d:
28:73:db:7d:c6:7c:8a:35:31:1c:18:e7:04:b9:e5:f0:85:be:
97:a8:fa:d5:b3:d8:81:f2:0f:ac:1c:b4:d8:6c:46:8d:c8:24:
59:02:d8:03:c8:1c:5d:ca:50:85:75:7f:10:e6:38:3e:3d:31:
af:f5:f5:d3:28:47:15:11:37:26:b3:03:f5:30:79:97:58:f4:
c4:62:44:41:7b:de:9a:4a:35:d9:c7:ce:07:20:b3:57:0c:5a:
2c:a9:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:37 2025 by rpki-client