Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/k_q0_KCxGCY23ALr6XgnBWO3WkU.roa
File: k_q0_KCxGCY23ALr6XgnBWO3WkU.roa (raw, json)
Hash identifier: PK5vUI4tiDmBvp3V15H0GXhYuJsllxR7+Hz0FNggobg=
Subject key identifier: 93:FA:B4:FC:A0:B1:18:26:36:DC:02:EB:E9:78:27:05:63:B7:5A:45
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D7708E1E6B457E8BCF51552D487A39
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/k_q0_KCxGCY23ALr6XgnBWO3WkU.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207732
IP address blocks: 2.58.55.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:70:8e:1e:6b:45:7e:8b:cf:51:55:2d:48:7a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93fab4fca0b1182636dc02ebe978270563b75a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:95:e3:e8:3a:61:48:7d:29:3f:6b:45:39:
21:82:ce:97:d4:80:c6:12:5d:e7:22:2b:70:c3:5a:
9a:77:af:f5:32:1b:ad:2d:b4:73:b9:78:14:dc:6b:
b6:61:ff:b2:4e:cf:d4:8f:ac:0d:27:70:ff:90:5e:
9b:d6:17:e3:9f:86:bc:e0:38:c2:67:33:6b:cd:d5:
b8:3a:9c:80:50:9c:b5:f4:7a:73:ba:17:ad:61:da:
97:60:3a:37:90:a2:82:9f:73:49:27:63:09:d5:0a:
f7:13:09:f1:83:26:a0:00:24:d2:24:e8:25:d6:0a:
5a:08:97:d7:59:8c:8a:aa:c4:c8:5b:a1:c8:3b:8f:
e2:83:c8:07:f0:28:33:44:87:90:33:7a:f9:ea:63:
ce:d0:13:ea:99:8c:96:40:40:cb:e7:de:f0:08:58:
d6:e4:60:c4:c2:c0:3d:ac:ea:25:a4:61:94:6d:10:
92:98:12:16:bf:61:7c:c7:04:d2:af:be:77:e2:f9:
7d:fd:fc:9c:db:a3:2c:b3:9f:1a:bd:b7:ec:62:fe:
f3:7a:aa:76:fc:f5:56:1e:ee:8a:e2:56:19:9a:66:
e6:58:a4:ae:9e:56:27:98:19:fa:3d:60:db:5b:cc:
7d:93:fc:e7:fc:0d:39:db:2a:2a:63:6d:72:bc:73:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:B4:FC:A0:B1:18:26:36:DC:02:EB:E9:78:27:05:63:B7:5A:45
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/k_q0_KCxGCY23ALr6XgnBWO3WkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:14:f4:22:b7:da:8f:e1:5b:d9:d2:a7:4e:55:eb:df:9c:81:
21:f8:c2:9f:65:5d:7e:df:1c:95:68:9d:4d:2f:b0:be:f7:1c:
07:de:b3:07:2b:93:86:ee:50:35:eb:3c:1f:ce:b1:ed:d2:15:
57:7a:23:1f:80:91:12:21:4e:71:0e:c7:f1:2a:4c:a4:83:38:
a3:7a:2d:ff:e3:0f:fe:9f:56:28:62:13:22:b2:f6:05:b2:0e:
27:89:cf:db:cc:bb:30:b0:73:d7:8c:6a:a5:5e:59:e3:a7:11:
3f:78:ea:f6:9c:66:2d:d2:75:8c:20:0b:c8:18:3a:97:6d:7f:
1b:49:a1:29:2b:ea:81:cf:c4:1a:ce:f3:cf:18:b3:6d:96:c4:
e3:9b:a8:89:08:f8:39:55:17:eb:bc:72:cc:bc:fb:fc:ac:33:
6b:55:3f:69:0d:28:01:4c:29:39:b0:58:c6:e6:e2:0d:2b:22:
d9:a2:22:e8:55:ac:be:b8:c1:89:fc:46:9d:24:81:2a:26:88:
da:9f:6c:9b:58:c9:0c:cc:8a:e0:6c:51:d0:58:4f:91:a5:83:
30:f9:9f:3a:e7:a1:bb:19:22:48:e6:55:08:4d:3e:a1:c3:1e:
b1:50:19:b4:29:c1:9b:22:d3:a0:6d:3d:90:d5:0d:c2:85:1d:
02:69:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:12 2025 by rpki-client