Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Khfa_Ew1yl0D2whNBT54syiI2UM.roa
File: Khfa_Ew1yl0D2whNBT54syiI2UM.roa (raw, json)
Hash identifier: zQD4j5VxiXYkceRjAPpBcTKuMa7EHROFT92MZX1LspQ=
Subject key identifier: 2A:17:DA:FC:4C:35:CA:5D:03:DB:08:4D:05:3E:78:B3:28:88:D9:43
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0184CF47D069503EAED9F073569309317C08
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Khfa_Ew1yl0D2whNBT54syiI2UM.roa
Signing time: Thu 01 Dec 2022 20:01:40 +0000
ROA not before: Thu 01 Dec 2022 20:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 85.209.228.0/22 maxlen: 24
45.95.212.0/22 maxlen: 24
45.95.212.0/23 maxlen: 24
45.95.214.0/23 maxlen: 24
2.59.60.0/22 maxlen: 24
45.8.218.0/23 maxlen: 24
45.8.216.0/23 maxlen: 24
194.31.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:47:d0:69:50:3e:ae:d9:f0:73:56:93:09:31:7c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Dec 1 20:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a17dafc4c35ca5d03db084d053e78b32888d943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:40:0a:db:1e:17:0e:14:5f:b9:19:6a:65:ba:
db:49:1f:b3:c1:9b:21:a4:83:0b:cb:fb:e1:4c:cb:
99:39:27:d0:5f:37:4c:1f:cb:5a:25:6a:68:f4:6e:
85:09:b0:c2:84:6c:bc:ab:07:79:71:5d:52:fa:c4:
82:fd:f0:9a:52:06:7c:e2:38:ac:48:4e:8c:fc:8b:
9f:2d:d1:b5:6f:e6:94:f0:62:4c:31:1d:dd:a5:f8:
1d:9e:e4:a4:8e:2d:02:81:31:c6:1d:eb:45:75:de:
be:ef:98:d7:2b:bd:46:26:df:41:03:80:6b:a2:36:
f2:69:16:af:01:2e:75:25:55:e5:6c:72:9b:70:23:
0a:7d:31:af:a0:90:ac:b1:96:52:66:8a:e4:01:0f:
ec:2d:3c:b8:78:93:43:a2:df:51:1a:04:8f:d0:e8:
63:88:c0:d4:1e:fa:8f:22:d2:08:a1:f8:77:8d:61:
99:e7:55:fa:e1:fc:08:82:00:47:c9:81:18:57:2e:
22:7b:fa:ed:8f:87:c6:e3:cf:07:6c:db:00:64:8a:
e9:51:9e:41:03:27:3e:b4:09:42:d0:c0:cf:cc:ff:
b0:45:6d:9b:8a:b8:da:84:da:e7:a5:bd:f8:17:1f:
35:28:61:bb:29:90:27:e5:3e:5c:2d:c7:fc:5c:76:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:17:DA:FC:4C:35:CA:5D:03:DB:08:4D:05:3E:78:B3:28:88:D9:43
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Khfa_Ew1yl0D2whNBT54syiI2UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/22
45.8.216.0/22
45.95.212.0/22
85.209.228.0/22
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
72:ed:35:3d:db:df:a3:3d:ed:64:0d:a7:d5:67:96:59:0d:0e:
5f:1a:59:67:02:1f:77:7b:22:44:b3:0c:23:9d:42:9d:8b:10:
f3:38:c9:00:c8:e4:ac:d4:54:db:ae:40:90:1b:9a:7d:9b:14:
4b:98:70:e0:1b:40:07:81:ee:3e:31:de:fc:88:3a:4b:ce:df:
f6:31:8c:50:89:d9:e3:58:da:60:0a:50:1c:fa:9f:86:3d:18:
01:fe:34:fb:1b:52:d9:6b:da:f8:c1:e2:55:38:da:c0:7a:df:
36:f4:e4:11:99:96:1b:df:00:45:2c:34:d7:37:98:e0:1c:1b:
f3:96:76:38:fa:3d:89:eb:02:ca:de:89:b2:9e:24:7a:75:5d:
81:9f:16:c0:99:5f:1d:c9:d9:54:c3:b8:05:32:7c:60:68:fe:
a8:aa:19:d2:aa:21:1b:49:5e:a7:5b:15:3e:ca:89:30:ed:52:
19:87:97:d2:c9:f1:9e:ee:e0:a6:74:4b:74:10:ce:01:8e:20:
bf:58:11:e9:5c:c5:ae:d6:18:3f:0b:dd:28:69:a1:bb:6c:2c:
3b:53:25:6e:1f:d4:54:2b:e7:4d:37:cf:2e:a4:04:c3:d1:82:
67:c9:7f:15:f3:ca:e1:9b:dc:f6:35:bc:4b:5e:92:8f:ab:d3:
b5:e9:9f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:48 2025 by rpki-client