Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KHWXU61nbuAvt9t1WCNbKv5_l0w.roa
File: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (raw, json)
Hash identifier: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=
Subject key identifier: 28:75:97:53:AD:67:6E:E0:2F:B7:DB:75:58:23:5B:2A:FE:7F:97:4C
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D627E19BC1AAC779EACBF9A9A2C0CB
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KHWXU61nbuAvt9t1WCNbKv5_l0w.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47687
IP address blocks: 185.225.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:27:e1:9b:c1:aa:c7:79:ea:cb:f9:a9:a2:c0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28759753ad676ee02fb7db7558235b2afe7f974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:3d:7c:b8:20:e5:ea:82:41:14:5b:83:7e:
d0:1f:bb:59:be:a6:a1:5b:44:58:7e:81:49:82:aa:
a3:9c:45:54:6e:e6:c6:15:16:a3:0b:35:84:92:26:
33:b1:2c:9d:61:90:bb:ae:27:e8:c0:89:bf:39:76:
15:64:1c:56:d0:b5:b9:00:39:ef:22:15:e4:27:02:
99:72:1e:a4:80:ad:95:a2:fb:88:98:0f:9f:a2:58:
41:69:bc:48:5e:f9:12:ec:09:de:24:c3:4a:ee:de:
da:ca:67:df:6d:42:7f:17:15:25:f7:a4:fa:0f:75:
1e:25:03:37:06:ac:c6:60:85:74:a4:c2:51:34:ff:
fe:92:27:2d:d1:14:b0:51:cf:3c:94:10:f0:e4:65:
59:b2:af:74:3b:b8:e1:33:9e:5e:e8:a8:82:3a:fa:
6c:98:27:aa:44:b3:92:7a:2e:c8:e9:c9:b2:e6:44:
0a:57:4c:bb:cf:dd:df:a9:4d:d3:fa:ca:d0:e9:f0:
9e:0d:bd:ff:79:9e:54:ae:f5:3e:ba:1c:a4:24:16:
4a:4c:8f:3f:f9:36:5a:9d:9d:98:c7:ef:a7:4d:af:
f6:ab:13:61:22:eb:6f:0c:d4:a4:44:af:02:83:fa:
40:1f:4b:58:6d:fa:28:a8:0a:1c:26:23:66:50:32:
96:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:97:53:AD:67:6E:E0:2F:B7:DB:75:58:23:5B:2A:FE:7F:97:4C
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/KHWXU61nbuAvt9t1WCNbKv5_l0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e6:b8:37:05:c3:5a:29:3c:ae:8a:f4:09:17:5a:3e:c5:78:
f2:6a:11:b9:e1:ac:18:77:52:99:10:d3:5b:27:b3:c4:1a:1c:
2a:a2:5a:cf:9a:4e:a9:4e:35:9c:89:85:ff:91:5b:6c:8d:3a:
17:b9:30:ae:56:07:b3:70:9c:d1:67:eb:a4:cb:7e:0e:25:fa:
67:ed:45:1e:59:40:a8:1b:7e:09:b7:45:39:f4:d4:87:d9:61:
be:eb:bc:44:1f:85:79:b1:a4:3e:5b:d3:19:2c:2a:67:47:a0:
bb:0d:4d:47:40:a1:9d:79:fe:30:ac:be:f1:d9:e6:c8:3b:78:
95:8d:50:f5:32:c3:9b:f3:5e:3e:5c:6b:20:da:c2:8f:c5:81:
46:04:c5:2a:83:f8:a9:60:26:e2:9c:30:93:5a:7a:e5:74:0c:
df:57:4a:cf:98:13:b7:99:3b:c4:58:09:ab:16:5b:ea:3e:c9:
ac:94:95:a0:a4:33:53:dc:6c:59:1e:e5:b6:69:16:9b:e3:8f:
21:60:41:ba:88:a4:f8:41:b3:27:4e:51:33:97:8b:7e:eb:95:
90:d8:24:87:5f:7a:4b:db:f1:b5:b8:ce:ab:17:bf:9f:19:1f:
5e:61:a0:88:41:0d:52:4a:f6:b9:8b:f1:ec:1a:aa:59:77:52:
bd:ca:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:25:26 2025 by rpki-client