Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/KLwgquw30_PGrG_5L3JWZ7FnWHM.roa
File: KLwgquw30_PGrG_5L3JWZ7FnWHM.roa (raw, json)
Hash identifier: RCQTumNrbnh6Uww5jrgHKoM2dm8tel7TtCQn6PMQjFo=
Subject key identifier: 28:BC:20:AA:EC:37:D3:F3:C6:AC:6F:F9:2F:72:56:67:B1:67:58:73
Certificate issuer: /CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Certificate serial: 018571FA3D0907E8DAEE2749E829FE7DFF6C
Authority key identifier: 6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/KLwgquw30_PGrG_5L3JWZ7FnWHM.roa
Signing time: Mon 02 Jan 2023 10:15:03 +0000
ROA not before: Mon 02 Jan 2023 10:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.38.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:3d:09:07:e8:da:ee:27:49:e8:29:fe:7d:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4fc7125c4350892c04de89a673de118c8a4e91
Validity
Not Before: Jan 2 10:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28bc20aaec37d3f3c6ac6ff92f725667b1675873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:78:94:b3:18:f0:a5:db:c5:71:ad:c7:75:
46:4f:ba:75:45:47:3f:05:12:56:d5:41:b9:d9:07:
3f:a6:b9:ff:6d:71:b1:fe:0b:08:9c:a3:65:39:72:
a0:67:50:c6:f1:b5:76:0a:b1:cc:5c:ac:51:85:35:
12:60:42:a0:55:14:88:64:b7:81:ab:2d:7a:05:68:
46:ae:5b:6d:8d:84:fe:70:d9:f6:8d:47:02:fd:7c:
0b:a4:49:88:ad:e0:80:3f:cd:50:b1:75:25:6a:a6:
14:a3:94:68:de:d7:c8:4e:56:85:81:f3:b2:ac:1e:
74:ae:05:e1:be:2a:c1:7c:e2:40:3e:39:c4:e2:a8:
73:db:27:a3:4e:c8:3f:c6:fb:9a:3c:ad:bf:13:2b:
98:89:a6:83:e3:33:b8:a0:71:ce:3b:8e:5e:a0:d0:
b2:0d:a2:56:92:7e:33:3e:bb:77:99:9a:5c:bf:71:
66:93:f9:97:96:eb:90:62:17:f3:90:12:37:56:88:
87:9f:a4:5d:8f:31:d7:3f:4d:cb:64:3f:15:b8:0e:
aa:4e:db:32:09:ae:20:a1:f0:d4:5f:c7:b0:21:fe:
d7:ab:df:2f:2a:16:d4:48:3a:95:0a:b4:b0:59:97:
8a:c5:9a:74:0b:9f:f3:29:08:b6:93:18:a6:6c:87:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:20:AA:EC:37:D3:F3:C6:AC:6F:F9:2F:72:56:67:B1:67:58:73
X509v3 Authority Key Identifier:
keyid:6D:4F:C7:12:5C:43:50:89:2C:04:DE:89:A6:73:DE:11:8C:8A:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bU_HElxDUIksBN6JpnPeEYyKTpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/KLwgquw30_PGrG_5L3JWZ7FnWHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4d2d90-04bb-44dd-ab1b-2a9db942adb7/1/bU_HElxDUIksBN6JpnPeEYyKTpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fc:75:72:e9:36:8d:75:e4:6a:7c:e4:38:de:e8:5c:b6:fe:
dc:4f:42:bc:2a:2b:36:62:cc:ac:94:88:97:26:8e:73:21:d4:
00:fc:0b:0f:ed:8e:05:07:9f:8f:54:bd:71:5d:93:d0:98:a0:
14:26:d2:5a:be:14:30:29:88:1e:20:a5:22:bf:96:ff:8f:6a:
31:d8:a6:e7:68:f7:0a:72:f7:49:ec:0a:45:f3:e4:80:b9:89:
e6:49:95:68:b5:dd:73:82:a3:65:07:f9:66:55:fb:a5:8f:8f:
2d:ab:7d:a1:ea:f7:87:f6:d5:63:c5:14:4e:af:dc:57:a7:27:
b9:4a:81:6b:a0:73:ee:d7:42:20:06:f2:8d:73:b2:aa:f9:34:
c2:4f:c1:a0:46:5b:35:6d:64:a3:22:2d:6f:84:61:9c:80:be:
69:68:30:3b:a5:6c:5b:6c:a6:14:b4:9b:69:92:8a:1a:73:50:
76:d6:17:97:0f:8f:d8:02:b6:dc:8d:5f:ca:ed:c2:50:f3:46:
85:ec:6a:ac:dd:6e:1c:99:96:f2:a0:21:27:3d:8b:e1:8d:18:
f5:62:54:f7:e5:ba:61:8a:3b:55:ce:2e:86:13:7e:3b:d1:46:
37:15:16:eb:ba:0a:2a:77:90:d8:74:73:b2:71:a3:8f:a6:ec:
d6:c5:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:08:46 2025 by rpki-client