Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa
File: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (raw, json)
Hash identifier: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=
Subject key identifier: 28:2A:3F:11:71:7F:93:05:C5:06:8C:BF:FB:C8:35:BE:7F:57:E0:85
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 019420681EDA2BF61A06C5294BB43A80944B
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50903
IP address blocks: 45.148.156.0/22 maxlen: 24
45.159.68.0/22 maxlen: 24
178.23.32.0/21 maxlen: 24
185.118.92.0/22 maxlen: 24
2a00:ab80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1e:da:2b:f6:1a:06:c5:29:4b:b4:3a:80:94:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=282a3f11717f9305c5068cbffbc835be7f57e085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:54:f5:b9:01:19:7e:17:e7:3d:6e:bc:3e:
bf:21:46:1d:77:47:05:92:48:f8:fb:a2:4e:fe:df:
56:24:c6:25:c7:ef:fd:6c:a7:13:7a:21:a4:5d:e4:
73:e5:fa:46:73:a6:67:1e:c3:21:27:20:c2:24:f8:
a8:3e:61:b7:45:d6:dc:fc:56:a6:74:9f:d8:2d:89:
f9:ef:17:01:df:11:04:d7:b4:e6:16:20:9d:0e:39:
02:2c:e4:c9:77:de:54:33:2c:01:6c:19:6c:ef:29:
69:6d:8d:8f:a2:6b:ae:01:fa:bb:e7:87:ef:c5:49:
10:ba:00:b2:01:a3:08:38:5f:94:94:47:4f:b3:86:
57:21:aa:7f:70:38:d1:79:9e:76:23:57:90:b0:ec:
41:a9:b2:76:39:23:eb:1f:e3:94:c2:f7:3a:08:e2:
91:ea:ce:e8:bf:a2:10:81:06:b2:3f:c7:cf:57:d0:
83:62:b1:8b:68:08:4b:43:73:ae:2f:bf:b5:c4:9b:
e0:61:6d:7f:69:41:8d:8f:8b:a8:83:17:a4:fb:04:
1c:d4:17:55:d2:45:cf:fa:d9:a7:ab:81:4e:e0:16:
f2:84:4c:ec:38:e0:14:4a:56:78:8e:4b:0f:7a:85:
4b:22:99:a4:be:38:3c:9e:67:99:a1:d2:fa:45:04:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:3F:11:71:7F:93:05:C5:06:8C:BF:FB:C8:35:BE:7F:57:E0:85
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.156.0/22
45.159.68.0/22
178.23.32.0/21
185.118.92.0/22
IPv6:
2a00:ab80::/32
Signature Algorithm: sha256WithRSAEncryption
55:7d:44:49:dc:18:a0:dd:a6:49:c8:f8:3b:ff:ba:00:23:59:
bf:be:f8:9e:c4:ee:80:99:fc:d4:dd:83:4c:c7:5f:36:ab:04:
b3:fe:e2:16:5a:3f:64:cb:59:08:01:92:ec:52:66:93:1c:d5:
27:75:73:b3:43:91:ee:70:30:ea:41:78:32:0c:3c:2d:d9:d5:
62:31:81:75:c0:44:47:b5:e1:40:e0:26:a7:ec:ac:5d:e6:31:
35:06:bc:73:5a:33:ba:d8:de:10:7a:dd:c9:00:45:a4:c4:56:
f6:7c:b9:cc:0d:74:80:62:02:27:33:50:78:e0:7a:8a:48:09:
be:91:cd:90:36:e4:b5:1a:c1:64:d4:7b:1b:1c:f4:db:a8:68:
b0:13:fb:7a:4d:91:ab:9d:a6:6e:8b:f8:16:f8:58:5e:0c:59:
5c:00:31:56:99:61:d6:fe:cc:b2:fc:f7:45:fc:da:82:ec:ed:
18:d5:72:80:cd:c7:d0:7f:27:dc:76:86:16:a0:62:c5:e1:a5:
f9:5c:ee:66:0b:97:b9:ce:6d:ea:6d:02:ef:b2:a4:61:da:f1:
4f:8f:3b:38:21:db:c6:eb:0e:f5:6e:68:08:3b:c4:14:79:db:
5d:1c:04:f6:e2:4c:ec:53:0a:0b:56:cc:99:4d:04:ef:8b:ea:
ff:25:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:10 2025 by rpki-client