Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/KV4PIuBz77z5XgOP1ynV3CahdKo.roa
File: KV4PIuBz77z5XgOP1ynV3CahdKo.roa (raw, json)
Hash identifier: TjWH9Dyg2nfsKZrO+VOfMsAyaJXW0WObYtWDwD3NAaw=
Subject key identifier: 29:5E:0F:22:E0:73:EF:BC:F9:5E:03:8F:D7:29:D5:DC:26:A1:74:AA
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B2A4BDB0C7E37F43EADB4DB3BC65
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/KV4PIuBz77z5XgOP1ynV3CahdKo.roa
Signing time: Thu 09 Jan 2025 09:28:20 +0000
ROA not before: Thu 09 Jan 2025 09:28:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49699
IP address blocks: 5.104.170.0/24 maxlen: 24
5.104.171.0/24 maxlen: 24
5.104.172.0/24 maxlen: 24
5.104.173.0/24 maxlen: 24
78.142.50.0/24 maxlen: 24
79.124.30.0/24 maxlen: 24
82.118.239.0/24 maxlen: 24
82.118.241.0/24 maxlen: 24
87.246.3.0/24 maxlen: 24
87.246.24.0/24 maxlen: 24
130.185.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b2:a4:bd:b0:c7:e3:7f:43:ea:db:4d:b3:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=295e0f22e073efbcf95e038fd729d5dc26a174aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:77:0b:6a:ec:18:ab:16:07:9d:90:b2:c1:
57:2c:ba:28:7e:c7:34:5f:85:af:0a:f8:37:05:91:
65:a9:8a:e0:54:e5:a8:9c:c4:f9:7e:1a:18:db:ff:
88:b1:d7:e7:ff:b5:c4:58:f4:9e:9c:38:57:94:a6:
07:24:e3:c9:cd:78:ee:d1:48:f8:2b:2b:35:4b:5f:
09:7a:dd:45:c4:5a:b0:b0:90:96:12:ae:f3:6e:32:
2b:4e:1b:23:ea:44:7c:c3:1c:88:da:68:9b:da:09:
14:28:81:41:c0:5b:de:8b:89:58:72:ae:53:89:a9:
49:f1:c9:d0:84:61:8e:80:7e:08:3b:e8:8c:b2:36:
ef:95:ec:aa:fc:2a:fc:ae:be:6c:20:6e:3e:98:83:
8a:32:59:d2:32:0e:a9:30:19:91:b1:27:cf:be:8d:
87:62:e9:83:c0:f4:c2:1a:7c:c7:d2:1d:f1:96:21:
09:79:e8:b3:c3:ef:90:48:a3:03:f4:b2:f9:9e:de:
ec:65:6f:0b:82:48:8f:c4:2d:e0:13:d4:76:e1:0d:
24:c4:ce:0f:78:35:23:60:68:c7:c6:88:1a:ff:2c:
ff:9c:80:d6:d3:fe:ca:b2:cb:f4:db:7c:d9:0f:a1:
dd:db:a0:56:76:a4:1c:fa:c7:b9:29:75:e6:36:87:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:0F:22:E0:73:EF:BC:F9:5E:03:8F:D7:29:D5:DC:26:A1:74:AA
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/KV4PIuBz77z5XgOP1ynV3CahdKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.170.0-5.104.173.255
78.142.50.0/24
79.124.30.0/24
82.118.239.0/24
82.118.241.0/24
87.246.3.0/24
87.246.24.0/24
130.185.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:32:74:86:3f:52:6f:e8:2c:3b:98:9b:08:1f:d8:f4:0b:64:
0e:ac:63:bc:38:24:bc:58:76:2b:99:56:e4:fe:3a:0b:5e:02:
60:9d:15:e3:99:63:20:df:44:7e:ec:32:23:a4:f4:11:d5:7c:
90:bb:a1:bd:fa:0e:e7:c2:43:bf:72:28:2b:eb:3c:f9:cc:1a:
5e:61:ab:67:20:0a:72:6d:24:3c:57:d7:d8:07:47:c5:be:af:
51:3b:02:d0:3a:c4:99:8e:cf:55:3d:80:fa:28:e8:91:33:4d:
f1:1a:03:87:45:89:2d:36:95:6f:d9:11:0d:06:a0:26:b5:93:
ad:f8:dd:a9:d0:b5:e5:95:5d:3f:60:12:6b:a7:cd:c5:ea:e8:
e9:12:a2:53:7b:ab:65:6a:cb:ca:b3:9b:70:e8:f7:47:c0:28:
25:f8:00:b5:47:f6:42:f7:d2:00:d2:21:b6:25:c4:db:ea:8e:
6b:94:58:42:b9:ba:b7:39:97:f9:e9:a5:ba:b5:d7:2f:81:dd:
06:fc:8f:2d:24:0c:59:77:4f:08:e6:b7:f9:65:55:83:35:d2:
3a:2d:27:c4:ab:75:8d:24:d8:0b:be:a2:89:f0:4e:01:b2:ee:
e3:ac:45:c9:40:4f:82:41:26:cb:97:97:26:4a:f0:45:9c:24:
da:34:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:47 2025 by rpki-client