Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/kd4_CVyDRGYYXlLj59bKP5Sg76U.roa
File: kd4_CVyDRGYYXlLj59bKP5Sg76U.roa (raw, json)
Hash identifier: 06BuqBpbLDOBCijvNkfnXHdYTJp6zKypj2IJ+s1ow3k=
Subject key identifier: 91:DE:3F:09:5C:83:44:66:18:5E:52:E3:E7:D6:CA:3F:94:A0:EF:A5
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 018CC4254B28B66F93464C0BFF65F43806CB
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/kd4_CVyDRGYYXlLj59bKP5Sg76U.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 185.60.4.0/24 maxlen: 24
185.60.5.0/24 maxlen: 24
185.60.6.0/24 maxlen: 24
185.60.7.0/24 maxlen: 24
149.19.179.0/24 maxlen: 24
149.19.176.0/24 maxlen: 24
149.19.177.0/24 maxlen: 24
149.19.178.0/24 maxlen: 24
195.206.186.0/24 maxlen: 24
195.206.184.0/24 maxlen: 24
195.206.185.0/24 maxlen: 24
195.206.187.0/24 maxlen: 24
195.206.188.0/24 maxlen: 24
195.206.189.0/24 maxlen: 24
195.206.190.0/24 maxlen: 24
195.206.191.0/24 maxlen: 24
185.91.43.0/24 maxlen: 24
185.91.40.0/24 maxlen: 24
185.91.41.0/24 maxlen: 24
185.91.42.0/24 maxlen: 24
185.86.23.0/24 maxlen: 24
185.86.20.0/24 maxlen: 24
185.86.21.0/24 maxlen: 24
185.86.22.0/24 maxlen: 24
185.2.79.0/24 maxlen: 24
185.34.80.0/24 maxlen: 24
185.34.81.0/24 maxlen: 24
185.34.82.0/24 maxlen: 24
185.34.83.0/24 maxlen: 24
185.61.88.0/24 maxlen: 24
185.61.89.0/24 maxlen: 24
185.61.90.0/24 maxlen: 24
185.61.91.0/24 maxlen: 24
37.157.48.0/24 maxlen: 24
37.157.49.0/24 maxlen: 24
37.157.50.0/24 maxlen: 24
37.157.51.0/24 maxlen: 24
37.157.52.0/24 maxlen: 24
37.157.53.0/24 maxlen: 24
37.157.54.0/24 maxlen: 24
37.157.55.0/24 maxlen: 24
185.2.76.0/24 maxlen: 24
185.2.77.0/24 maxlen: 24
185.2.78.0/24 maxlen: 24
2a00:b840::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4b:28:b6:6f:93:46:4c:0b:ff:65:f4:38:06:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91de3f095c834466185e52e3e7d6ca3f94a0efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:13:c5:4e:ff:52:45:bd:39:a3:94:bc:7c:
04:d3:56:2d:2f:36:7f:52:e4:ac:69:10:b7:95:60:
b7:94:3f:08:26:4b:96:56:0f:da:d6:bc:dd:88:9a:
19:48:a7:d7:a6:8c:71:c6:31:54:cd:85:db:63:01:
95:32:6f:13:f7:de:3c:10:fc:5b:f7:55:56:03:bb:
b3:64:43:c5:2f:6a:d9:e9:41:81:79:fa:90:df:65:
68:c1:1d:67:ae:a9:14:ad:96:bb:b7:ec:00:b1:34:
32:76:85:54:f3:29:52:a6:b8:f9:77:72:ca:ab:0c:
b4:3a:40:91:f7:5a:c9:c3:b2:f3:47:8a:f8:6c:ce:
5d:51:55:cc:c1:9c:6d:61:5c:14:f7:70:6e:8b:2d:
a8:b4:e4:ae:46:9c:eb:c8:6e:f6:5b:a0:17:9f:52:
e7:b4:14:2f:17:51:a4:ad:35:eb:0e:49:d0:d4:ce:
93:ec:76:29:d5:9e:0c:cb:be:c0:5c:97:fa:13:6b:
2c:cb:89:13:af:68:81:9d:9b:f1:52:a1:f5:ba:57:
f2:63:d0:8a:ef:6a:53:13:c3:ae:a0:57:31:36:d6:
ef:4e:3b:16:c6:1f:ce:68:7c:af:dc:69:7f:d2:ec:
27:c7:3a:7e:32:3a:63:b7:6d:f7:9f:09:23:99:1c:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:3F:09:5C:83:44:66:18:5E:52:E3:E7:D6:CA:3F:94:A0:EF:A5
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/kd4_CVyDRGYYXlLj59bKP5Sg76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.48.0/21
149.19.176.0/22
185.2.76.0/22
185.34.80.0/22
185.60.4.0/22
185.61.88.0/22
185.86.20.0/22
185.91.40.0/22
195.206.184.0/21
IPv6:
2a00:b840::/29
Signature Algorithm: sha256WithRSAEncryption
b4:2e:64:42:06:38:79:40:e9:20:f1:32:4a:de:0c:f1:82:d3:
1b:14:b7:dc:cc:98:7e:3a:09:0c:98:ae:e4:57:dd:6a:08:f5:
5f:29:4b:be:46:67:69:03:37:11:f0:80:1e:32:e5:2d:9c:56:
46:a1:8c:fe:ef:98:47:b1:4b:64:48:cd:91:9d:b4:fe:4b:61:
37:17:02:62:9a:14:3e:fd:33:a1:df:b7:3d:e6:58:40:67:88:
e5:2a:5d:ed:9a:d1:8d:03:22:dc:56:11:0f:fa:1e:83:f6:6d:
24:95:7d:46:dd:90:02:de:1f:74:ac:62:db:af:ec:b3:fc:62:
78:1d:26:35:1c:e9:5b:93:3f:e4:fc:d5:e9:5e:29:e6:ae:42:
ad:ef:93:1b:5f:b7:07:2c:6b:b6:ca:f4:9d:1d:c7:44:68:da:
69:4d:c2:69:24:08:76:3f:88:d8:63:3f:fe:ed:4b:74:20:f9:
2a:80:77:1d:19:51:df:02:d7:6b:09:ec:e9:5c:da:82:9f:dd:
74:29:8a:f2:b1:02:d9:2e:13:75:ea:64:90:07:02:8d:4f:af:
c9:7e:f4:a7:d3:fc:a5:fb:45:63:27:03:e5:4e:d6:4d:b4:55:
ba:04:74:21:9d:14:3a:ba:1a:36:ed:63:d9:cb:e2:78:52:d8:
b4:cc:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:45:30 2025 by rpki-client