Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/KiMYrb7_k5A1XChjZVkaZe03-J4.roa
File: KiMYrb7_k5A1XChjZVkaZe03-J4.roa (raw, json)
Hash identifier: 30qTixTrPBopXsIzoLW1hBKkrCQ5vS3MAYgu2zCZ2kU=
Subject key identifier: 2A:23:18:AD:BE:FF:93:90:35:5C:28:63:65:59:1A:65:ED:37:F8:9E
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01942444D795B5E77A129E7AA16CA892A0AB
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/KiMYrb7_k5A1XChjZVkaZe03-J4.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60168
IP address blocks: 88.80.152.0/22 maxlen: 24
88.80.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d7:95:b5:e7:7a:12:9e:7a:a1:6c:a8:92:a0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a2318adbeff9390355c286365591a65ed37f89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:34:36:4c:ac:9d:12:57:78:03:de:69:8c:
cf:86:43:64:62:25:4c:47:1d:ab:0a:ef:1f:33:8d:
b9:f9:1c:d1:1a:02:2d:a5:79:6c:05:fb:9f:bf:55:
e1:70:fc:c8:8a:f8:9b:f7:5e:21:28:20:95:ef:ad:
66:34:7c:55:2f:ea:cc:c6:0a:71:63:78:8e:16:3d:
42:5f:ec:01:b8:81:d3:a3:2b:8f:8a:86:82:5c:ea:
be:5e:38:fa:a6:78:5d:b2:05:a9:4b:ba:88:b2:00:
71:0a:39:de:b9:81:d6:55:c9:b5:2e:ab:37:e9:6d:
cb:a2:48:15:2a:4d:69:ce:1f:1b:f6:23:99:97:c2:
17:43:f1:41:42:e9:3b:75:a7:53:d0:01:5b:58:e1:
b1:45:8b:53:24:03:b0:bc:0d:34:f5:76:84:e5:e1:
87:d3:fe:20:55:38:32:c5:d0:49:ca:e3:5b:f2:68:
ad:de:21:1d:62:34:cd:64:27:b3:c9:09:d3:a1:e8:
a4:40:52:f5:e4:bb:6c:bc:38:1a:ac:83:fb:58:a8:
0c:b3:89:37:38:97:e1:d8:19:10:aa:60:e8:be:b9:
0c:ce:77:25:c3:ad:95:82:a8:b7:04:64:8c:36:29:
8c:79:a5:96:08:6f:f5:22:ae:89:6d:00:21:f9:21:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:23:18:AD:BE:FF:93:90:35:5C:28:63:65:59:1A:65:ED:37:F8:9E
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/KiMYrb7_k5A1XChjZVkaZe03-J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.152.0/21
Signature Algorithm: sha256WithRSAEncryption
31:8e:01:78:cf:0c:2c:8d:5d:46:48:84:0e:b4:5f:1e:75:a2:
e9:be:a6:7c:74:39:42:11:43:69:c9:03:03:f4:61:58:31:0f:
c6:d2:a8:b9:98:61:44:3f:7f:69:e5:61:d9:0b:08:0f:0a:54:
fd:c5:7f:fd:84:b7:94:dc:03:6b:0e:d7:a4:f4:f0:aa:c2:26:
5f:b8:96:79:65:df:d2:91:06:02:40:87:a5:6f:9a:e6:2c:ef:
19:7e:79:5b:2f:8f:9f:29:74:28:be:0d:45:fe:7b:66:ff:e5:
34:3f:6f:d8:2b:5c:fb:2e:98:19:82:17:2b:20:93:b3:33:fe:
29:f6:02:60:8e:aa:1e:b4:d6:a5:ed:d9:08:16:6e:d9:06:d2:
50:e6:48:d2:09:d5:f9:46:d8:0d:e9:f8:85:fc:e7:9b:5f:59:
2d:7d:15:76:c3:4e:c2:16:a7:ac:0d:f5:14:90:19:6b:aa:64:
fc:92:d6:71:4d:21:2a:a3:a5:c2:8e:a1:05:43:79:03:42:91:
e4:f9:3a:72:40:95:3e:de:30:55:66:51:cf:9a:e7:e3:bf:1c:
2d:de:ce:f5:b5:4d:ea:54:7e:6c:e8:bc:3b:6c:8b:72:01:ba:
67:03:07:11:28:e7:9e:3d:3e:f6:d3:73:d5:dd:76:5f:4b:04:
ed:ed:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:56:36 2025 by rpki-client