Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/K2kxxnXR0hyRDLSHetoTuV93cio.roa
File: K2kxxnXR0hyRDLSHetoTuV93cio.roa (raw, json)
Hash identifier: 6Lp9HENYwftvLV127osb06d1zI9h5IKnxTHFjnx8o1E=
Subject key identifier: 2B:69:31:C6:75:D1:D2:1C:91:0C:B4:87:7A:DA:13:B9:5F:77:72:2A
Certificate issuer: /CN=2b0c6d298f2832caa0cb1e1ada7fdf0cf300d8e1
Certificate serial: 018373FB468C2A1B6AACEAC97CA925E9183E
Authority key identifier: 2B:0C:6D:29:8F:28:32:CA:A0:CB:1E:1A:DA:7F:DF:0C:F3:00:D8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwxtKY8oMsqgyx4a2n_fDPMA2OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/K2kxxnXR0hyRDLSHetoTuV93cio.roa
Signing time: Sun 25 Sep 2022 09:29:50 +0000
ROA not before: Sun 25 Sep 2022 09:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199775
IP address blocks: 185.168.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:73:fb:46:8c:2a:1b:6a:ac:ea:c9:7c:a9:25:e9:18:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0c6d298f2832caa0cb1e1ada7fdf0cf300d8e1
Validity
Not Before: Sep 25 09:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b6931c675d1d21c910cb4877ada13b95f77722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:b3:ff:43:b7:62:57:0d:ec:a7:62:5e:d6:
22:5b:70:e7:ab:2f:5e:5e:12:22:93:5e:9d:c1:08:
79:2d:e0:02:4a:1c:c9:26:c1:83:a3:fa:8f:da:c4:
a8:71:ef:35:6a:a7:66:ec:bb:0f:1d:dd:3a:5c:09:
45:cb:eb:4b:dd:6a:ec:24:bc:37:e6:df:2d:fc:0c:
63:43:00:02:9f:5f:33:6b:b2:d8:7f:16:47:8d:20:
4f:7f:08:97:51:54:9e:fe:33:c7:c1:d8:e4:82:e5:
af:43:b5:03:19:70:09:30:4a:ca:b1:b2:e4:48:88:
a8:c1:ae:21:b4:3c:ea:e2:4f:f8:15:c3:c9:65:dd:
81:67:99:d5:14:13:0c:47:f3:da:7d:54:62:80:25:
10:f3:d6:5c:e7:23:a0:fa:0b:0f:fc:30:65:50:8d:
dd:80:de:5b:40:b8:92:00:f2:df:05:99:01:54:67:
d7:23:f8:ed:99:b1:0f:c9:d5:06:10:cb:14:14:1c:
f0:5b:9f:4e:8e:4c:8e:41:60:65:bf:25:54:3e:76:
4f:95:f8:b4:00:7b:82:49:e4:e9:5d:fb:85:6a:a4:
c2:d6:3d:b8:c6:05:43:91:14:d0:68:af:ae:8a:cf:
cf:bc:02:0a:68:1a:f7:f2:5f:40:1c:a1:15:cb:44:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:31:C6:75:D1:D2:1C:91:0C:B4:87:7A:DA:13:B9:5F:77:72:2A
X509v3 Authority Key Identifier:
keyid:2B:0C:6D:29:8F:28:32:CA:A0:CB:1E:1A:DA:7F:DF:0C:F3:00:D8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwxtKY8oMsqgyx4a2n_fDPMA2OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/K2kxxnXR0hyRDLSHetoTuV93cio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8470df-cb19-4194-9d8e-e19053be66ef/1/KwxtKY8oMsqgyx4a2n_fDPMA2OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.134.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:f3:39:5f:bb:16:6f:47:6c:f0:e3:99:39:5f:aa:05:3a:8b:
85:64:c4:66:41:bc:3c:c6:c7:77:ba:fe:78:1f:93:fa:1e:04:
ec:1e:d6:52:26:c9:8f:c4:86:61:65:6a:70:1f:f0:70:3b:8d:
04:81:bf:ce:56:a2:3a:63:06:b0:2d:0f:ac:b0:f9:af:08:47:
a9:53:8c:65:36:f2:eb:22:97:e1:d8:ce:e6:01:43:7a:07:b0:
63:78:a6:dc:a5:72:02:0d:54:f7:0c:a2:22:d1:01:cd:02:89:
44:8d:1c:e1:96:df:0c:91:b4:13:c8:c9:26:ac:e3:d1:56:0f:
e2:67:f8:c7:4c:b8:45:c0:ac:7f:4b:0d:37:af:d6:c5:bf:e3:
5f:50:c7:18:d8:5d:44:15:43:c4:53:69:e7:b9:b2:08:f6:8e:
7c:39:d4:c9:79:63:0f:8f:46:ac:19:6b:f3:24:db:e5:b3:ed:
3a:05:87:f7:43:54:a7:94:33:94:3b:99:81:d4:9f:b1:71:b6:
f7:d3:d2:de:d6:e8:50:32:7a:16:bf:40:bf:fd:d0:07:43:48:
66:7a:9f:1a:df:a3:c3:dd:ac:a8:5a:40:4c:bc:7b:af:ec:95:
a5:e5:bf:d2:e9:8a:fb:87:ab:cf:ae:3e:dc:39:04:cf:2d:86:
aa:5c:ba:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNz+0aMKhtqrOrJfKkl6Rg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGM2ZDI5OGYyODMyY2FhMGNiMWUxYWRhN2ZkZjBjZjMw
MGQ4ZTEwHhcNMjIwOTI1MDkyOTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjY5MzFjNjc1ZDFkMjFjOTEwY2I0ODc3YWRhMTNiOTVmNzc3MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW+z/0O3YlcN7KdiXtYiW3Dnqy9e
XhIik16dwQh5LeACShzJJsGDo/qP2sSoce81aqdm7LsPHd06XAlFy+tL3WrsJLw3
5t8t/AxjQwACn18za7LYfxZHjSBPfwiXUVSe/jPHwdjkguWvQ7UDGXAJMErKsbLk
SIiowa4htDzq4k/4FcPJZd2BZ5nVFBMMR/PafVRigCUQ89Zc5yOg+gsP/DBlUI3d
gN5bQLiSAPLfBZkBVGfXI/jtmbEPydUGEMsUFBzwW59OjkyOQWBlvyVUPnZPlfi0
AHuCSeTpXfuFaqTC1j24xgVDkRTQaK+uis/PvAIKaBr38l9AHKEVy0QiHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCtpMcZ10dIckQy0h3raE7lfd3IqMB8GA1UdIwQY
MBaAFCsMbSmPKDLKoMseGtp/3wzzANjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3d4dEtZOG9Nc3FneXg0YTJuX2ZEUE1BMk9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84NDcwZGYtY2IxOS00MTk0LTlkOGUt
ZTE5MDUzYmU2NmVmLzEvSzJreHhuWFIwaHlSRExTSGV0b1R1VjkzY2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi84NDcwZGYtY2IxOS00MTk0LTlkOGUtZTE5MDUzYmU2NmVm
LzEvS3d4dEtZOG9Nc3FneXg0YTJuX2ZEUE1BMk9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaiGMA0G
CSqGSIb3DQEBCwUAA4IBAQBd8zlfuxZvR2zw45k5X6oFOouFZMRmQbw8xsd3uv54
H5P6HgTsHtZSJsmPxIZhZWpwH/BwO40Egb/OVqI6YwawLQ+ssPmvCEepU4xlNvLr
Ipfh2M7mAUN6B7BjeKbcpXICDVT3DKIi0QHNAolEjRzhlt8MkbQTyMkmrOPRVg/i
Z/jHTLhFwKx/Sw03r9bFv+NfUMcY2F1EFUPEU2nnubII9o58OdTJeWMPj0asGWvz
JNvls+06BYf3Q1SnlDOUO5mB1J+xcbb309Le1uhQMnoWv0C//dAHQ0hmep8a36PD
3ayoWkBMvHuv7JWl5b/S6Yr7h6vPrj7cOQTPLYaqXLqg
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:48 2025 by rpki-client