Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa
File: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (raw, json)
Hash identifier: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=
Subject key identifier: 29:E7:F9:1E:DF:22:87:7C:C2:47:BA:08:DB:1C:0D:08:27:A4:FD:CD
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 019423D7E253FF6040387FCE2CF9B8F4978C
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa
Signing time: Wed 01 Jan 2025 21:48:58 +0000
ROA not before: Wed 01 Jan 2025 21:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203234
IP address blocks: 185.138.240.0/23 maxlen: 23
2a07:10c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e2:53:ff:60:40:38:7f:ce:2c:f9:b8:f4:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Jan 1 21:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29e7f91edf22877cc247ba08db1c0d0827a4fdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:ce:02:40:ca:e0:45:32:c0:67:e5:e3:38:
30:4f:fa:35:f7:4f:1f:c3:da:51:7d:31:43:57:00:
6d:fb:a2:15:3b:1f:e5:94:46:b6:aa:81:21:78:61:
c6:36:ad:04:a7:16:ca:8a:13:4c:55:05:24:40:8b:
6d:e8:4e:2b:a2:a8:4f:f2:a8:19:18:49:6c:6d:7c:
ac:54:8e:8b:27:62:37:f0:ea:bc:72:37:fc:23:ab:
f6:ce:f9:c0:9d:8b:03:eb:ef:2b:df:c7:3d:13:3a:
dc:a1:89:33:06:2b:f4:db:8f:cc:82:4f:a0:15:39:
71:e0:0f:12:e8:05:52:16:61:11:b0:32:fb:47:2a:
47:67:a5:a3:bf:df:2b:d3:69:f1:64:e9:be:55:b0:
cc:74:a1:22:55:2e:50:e8:ef:23:7c:a4:90:7b:d5:
8c:0f:73:40:9a:60:fc:fa:b6:c6:97:8d:92:72:a8:
68:86:26:a4:04:20:60:97:8a:e0:33:7a:b1:0b:4b:
18:68:a3:c0:87:6b:d2:ba:cd:cf:ef:5f:98:f4:4d:
12:9f:bb:46:7c:91:e3:c5:74:f8:86:78:84:af:3a:
6f:71:de:cb:b2:06:6a:7c:e9:54:08:fa:14:3d:38:
f8:b2:d3:26:34:58:93:2c:b6:ec:f8:6b:93:20:21:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E7:F9:1E:DF:22:87:7C:C2:47:BA:08:DB:1C:0D:08:27:A4:FD:CD
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.240.0/23
IPv6:
2a07:10c0::/48
Signature Algorithm: sha256WithRSAEncryption
81:a9:36:0d:62:02:dc:e6:7c:d6:73:2e:06:2e:78:88:4f:75:
6d:31:49:a5:0f:ef:96:74:74:65:a9:b5:ff:2a:59:c7:bc:c2:
e7:72:d3:61:e4:ae:e3:dd:a7:0d:49:94:b6:ad:05:d0:5b:f8:
d2:8c:b4:99:33:0f:30:ff:69:52:8c:d2:95:c2:94:df:5c:2c:
8a:f6:4f:ea:d2:0b:21:43:41:95:e5:45:e5:53:82:a3:e8:8a:
ad:27:f6:21:17:f6:77:2b:d0:e5:ac:72:37:96:0d:c2:8c:cf:
95:aa:ed:23:04:4b:2b:24:58:ec:11:7c:43:3c:40:15:2a:54:
1b:d1:f0:46:32:a3:93:74:e7:1c:c6:a2:08:0a:f5:c2:54:e7:
a8:f6:99:83:18:7a:ba:3a:11:42:f7:ec:ba:2c:86:dc:e7:37:
44:76:54:09:f9:8c:6f:da:41:51:ae:26:db:fa:12:8c:e6:26:
0d:64:31:f3:08:bc:26:42:f2:88:7c:9d:45:eb:87:d7:53:6e:
c5:be:5e:12:a1:35:07:74:c1:46:de:71:ff:89:85:02:6e:37:
e1:18:ae:9d:e2:1b:9d:3e:f4:45:2c:f4:1b:6a:c6:e2:7a:06:
13:36:d8:57:7d:cd:43:b6:02:36:f2:26:de:66:2f:0b:e7:67:
a6:50:2d:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQj1+JT/2BAOH/OLPm49JeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjEwNWQxNDhkZTk5NjAzNmZkZjIxY2IyMDhhMzM4YTE1
OGNlZGEwHhcNMjUwMTAxMjE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWU3ZjkxZWRmMjI4NzdjYzI0N2JhMDhkYjFjMGQwODI3YTRmZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW3OAkDK4EUywGfl4zgwT/o1908f
w9pRfTFDVwBt+6IVOx/llEa2qoEheGHGNq0EpxbKihNMVQUkQItt6E4roqhP8qgZ
GElsbXysVI6LJ2I38Oq8cjf8I6v2zvnAnYsD6+8r38c9EzrcoYkzBiv024/Mgk+g
FTlx4A8S6AVSFmERsDL7RypHZ6Wjv98r02nxZOm+VbDMdKEiVS5Q6O8jfKSQe9WM
D3NAmmD8+rbGl42ScqhohiakBCBgl4rgM3qxC0sYaKPAh2vSus3P71+Y9E0Sn7tG
fJHjxXT4hniErzpvcd7LsgZqfOlUCPoUPTj4stMmNFiTLLbs+GuTICFzswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCnn+R7fIod8wke6CNscDQgnpP3NMB8GA1UdIwQY
MBaAFBmxBdFI3plgNv3yHLIIozihWM7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTIt
MjZlNjRkNzhiMGM2LzEvS2VmNUh0OGloM3pDUjdvSTJ4d05DQ2VrX2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi81MmNiOGQtMTFkNC00ZjljLThmOTItMjZlNjRkNzhiMGM2
LzEvR2JFRjBVamVtV0EyX2ZJY3NnaWpPS0ZZenRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuYrwMA8E
AgACMAkDBwAqBxDAAAAwDQYJKoZIhvcNAQELBQADggEBAIGpNg1iAtzmfNZzLgYu
eIhPdW0xSaUP75Z0dGWptf8qWce8wudy02HkruPdpw1JlLatBdBb+NKMtJkzDzD/
aVKM0pXClN9cLIr2T+rSCyFDQZXlReVTgqPoiq0n9iEX9ncr0OWscjeWDcKMz5Wq
7SMESyskWOwRfEM8QBUqVBvR8EYyo5N05xzGoggK9cJU56j2mYMYero6EUL37Los
htznN0R2VAn5jG/aQVGuJtv6EozmJg1kMfMIvCZC8oh8nUXrh9dTbsW+XhKhNQd0
wUbecf+JhQJuN+EYrp3iG50+9EUs9BtqxuJ6BhM22Fd9zUO2AjbyJt5mLwvnZ6ZQ
LcQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:39 2025 by rpki-client